Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa
File:                     3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa (raw, json)
Hash identifier:          v1cdFttc4ojlyZd4wcli0KyZb9dq0M97eKP7CtXB33U=
Subject key identifier:   B4:C2:62:F9:13:B7:DC:56:5D:FD:B6:03:46:B5:79:FF:6E:4E:7A:91
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       44985989713ECFEB3B481CA20254E0661716D9F8
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:14 +0000
ROA not before:           Thu 06 Mar 2025 04:37:14 +0000
ROA not after:            Thu 05 Mar 2026 04:42:14 +0000
asID:                     28210
IP address blocks:        186.219.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:98:59:89:71:3e:cf:eb:3b:48:1c:a2:02:54:e0:66:17:16:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:14 2025 GMT
            Not After : Mar  5 04:42:14 2026 GMT
        Subject: CN=B4C262F913B7DC565DFDB60346B579FF6E4E7A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:cb:e5:fe:ff:04:6b:95:7f:b6:78:32:2c:
                    81:dd:e1:1c:48:68:7c:3e:b0:ab:4c:27:93:07:4c:
                    4f:77:7e:c6:34:46:8d:72:5d:f2:5e:1f:b6:0a:19:
                    a9:86:cb:d0:10:8c:d7:4d:fb:37:38:41:aa:93:a2:
                    3c:aa:ba:55:bb:51:1d:1a:43:35:7a:46:95:5f:92:
                    6e:78:83:16:e4:93:9a:1f:99:57:1b:d9:97:03:32:
                    7e:3a:a1:90:7e:fd:c9:25:e9:94:cc:ae:12:40:24:
                    a7:62:15:b6:20:1e:ae:27:3d:99:a3:c9:f1:c8:00:
                    75:04:ee:c7:b8:d4:28:50:68:39:85:7a:4a:ce:2b:
                    57:f2:c2:3a:19:61:79:37:ab:64:34:3f:42:83:04:
                    3a:b9:34:0b:e8:fd:d0:96:bd:ff:86:96:8c:a0:32:
                    cd:3d:57:e5:45:6e:b7:7f:8d:42:c6:70:79:a8:c4:
                    a4:f6:c6:b1:a6:c2:68:da:4e:c0:14:d0:b5:a0:41:
                    e2:e2:b3:f6:b2:1c:50:0c:de:5c:c7:45:4a:40:57:
                    3f:63:ed:70:df:74:6d:a6:e8:7e:bc:f2:e8:1a:90:
                    2e:13:01:e5:09:06:39:1a:69:23:95:e4:56:28:fe:
                    ee:93:5a:fe:a6:df:31:99:90:2a:7e:ea:6a:4b:8d:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:62:F9:13:B7:DC:56:5D:FD:B6:03:46:B5:79:FF:6E:4E:7A:91
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:68:18:6d:27:9b:57:57:d3:f3:e0:ae:30:2a:1a:90:d1:02:
         f1:11:4f:9d:27:2d:2f:05:28:1c:81:30:de:7f:d8:9f:83:cd:
         76:e6:6a:e6:b2:f7:aa:f8:ff:91:64:32:e0:9e:1c:14:a5:2e:
         60:a3:39:11:28:a5:aa:0e:f8:8f:0e:fb:15:14:66:01:19:e9:
         76:47:85:25:12:b9:6c:35:38:73:93:25:2c:64:98:75:36:46:
         67:ac:4d:75:36:c8:03:c9:4b:43:cb:14:d9:0b:a4:5a:56:60:
         7e:55:a5:7b:2e:ee:d5:07:0d:17:aa:24:7f:92:c7:75:23:06:
         ba:d9:79:ce:a7:0f:8d:05:cf:65:c0:4e:eb:f2:f6:ad:18:a5:
         e9:e2:07:6e:7d:c2:e8:91:61:04:75:3e:40:2c:77:3e:19:c5:
         50:f3:a6:25:b1:15:0c:61:fd:8a:56:6c:fd:21:50:4c:70:77:
         d0:34:68:ca:4b:2d:24:af:51:62:bb:dd:33:16:70:09:81:bb:
         bc:79:01:15:57:de:86:d8:19:f2:ac:74:bb:ab:d8:c1:9e:68:
         be:e2:cf:09:24:94:01:b6:ed:23:0a:64:c8:d2:ea:f0:22:7f:
         2b:78:a7:6d:ad:e5:40:42:d9:08:6c:57:ba:33:df:ea:08:d9:
         40:1f:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:40 2025 by rpki-client