Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa
File:                     3138372e3130382e34382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          Wz0mzsFyhSWmCxABBucIzAi4QrlzCm99VGX0iKE2UBw=
Subject key identifier:   59:A9:51:1C:AA:B1:82:57:6E:5B:3E:83:91:23:D7:51:D1:8E:50:AE
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       74143BD423BF14F46FFE7A7514959E0F8A607E48
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 12:33:12 +0000
ROA not before:           Wed 12 Mar 2025 12:28:12 +0000
ROA not after:            Wed 11 Mar 2026 12:33:12 +0000
asID:                     28201
IP address blocks:        187.108.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 01:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:14:3b:d4:23:bf:14:f4:6f:fe:7a:75:14:95:9e:0f:8a:60:7e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 12:28:12 2025 GMT
            Not After : Mar 11 12:33:12 2026 GMT
        Subject: CN=59A9511CAAB182576E5B3E839123D751D18E50AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:35:92:f0:d8:3e:a0:d5:d3:26:ee:3e:17:
                    98:13:94:18:71:7f:69:87:d4:dc:a5:40:a1:86:d7:
                    3a:b5:2f:6e:57:64:ca:2e:f8:ef:ba:54:fd:3a:0b:
                    23:15:33:94:fa:18:70:3d:78:76:ca:75:cc:39:a9:
                    5e:4a:9b:4e:0d:14:61:2a:65:1f:2e:b6:af:76:5a:
                    76:18:57:95:1e:2e:9c:02:d0:0a:af:14:9c:a3:9d:
                    8f:be:47:90:d2:95:c2:d8:6c:1b:99:2d:ed:6d:52:
                    6e:b5:28:5e:47:46:e9:ed:73:7d:2e:2e:6a:72:44:
                    00:df:c6:28:ff:45:d4:3b:5c:e5:a3:9f:d5:53:6f:
                    89:37:82:1d:b8:24:28:08:1d:ea:e0:be:cd:06:fb:
                    02:e6:6f:42:78:b0:f5:9e:67:93:12:18:bc:44:35:
                    63:0f:54:bf:99:36:3a:d2:e9:96:48:a3:87:93:8b:
                    e3:92:04:4c:f9:8e:7d:76:44:07:47:81:99:a0:83:
                    82:9c:24:86:0b:b5:15:af:ad:64:65:01:e4:5f:fc:
                    7b:11:19:54:18:3d:b9:0a:59:7b:32:a4:d0:a1:e3:
                    86:2d:48:7d:45:5d:9b:e2:c3:80:23:3f:1f:01:0d:
                    60:e5:b0:c6:e8:6d:c3:d6:80:8a:4d:ea:3f:a9:c2:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:51:1C:AA:B1:82:57:6E:5B:3E:83:91:23:D7:51:D1:8E:50:AE
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:96:15:11:bb:a1:65:7c:5c:d8:6a:f4:78:1a:5e:98:8d:
         73:8c:4c:51:d6:f8:54:98:8a:a8:09:9b:cf:af:1a:75:bc:50:
         3d:22:bb:1a:41:1b:f0:41:17:76:ff:d3:1b:a7:f6:60:b3:ea:
         d5:86:6f:d9:fe:84:8e:a1:b2:0a:21:b0:04:bc:9b:1a:6d:4e:
         05:20:9a:d1:55:ec:ee:ca:dc:c8:20:c1:e7:8d:ea:13:ce:8f:
         ba:dc:56:9c:a1:a4:7c:72:08:56:9d:1f:1a:30:9a:29:09:a4:
         ee:62:38:d0:7d:26:d6:be:79:9b:fa:f4:ab:0d:df:4b:8f:ba:
         8a:91:31:0c:bb:53:6f:8b:46:d6:36:81:b1:41:23:67:4a:76:
         3d:3e:4b:92:1d:bc:5c:5c:7c:5a:2c:26:2c:0e:0d:3a:48:5b:
         8b:80:ba:e9:19:6d:fd:e3:87:d0:3d:fe:99:a9:04:b9:e1:06:
         2c:aa:5e:ff:86:1b:4a:96:c5:d7:2b:65:c3:a7:4d:c4:17:45:
         32:ab:69:99:d8:27:65:41:5d:2d:69:76:2a:3a:54:e7:d1:08:
         a7:cb:28:d2:cc:9f:48:09:fa:fd:c0:c3:8b:77:50:d7:39:6c:
         2f:cd:0a:d8:14:d2:28:ae:f9:17:9c:37:a3:eb:e7:a8:ed:a0:
         02:51:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:12:49 2025 by rpki-client