Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
File:                     3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          uWdSscxu5Cg/i60ubSnRpzkXRWPX6zIcYRGy0xKd06o=
Subject key identifier:   30:9F:26:39:2F:F7:65:4A:60:D7:D8:0B:23:A3:35:A0:E9:D2:2E:8F
Certificate issuer:       /CN=944D1D572BAB1051387200BA68477F359EA492CF
Certificate serial:       0B73E8BBFBE682DCE652B6729A33179D9B8B4667
Authority key identifier: 94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
Signing time:             Fri 06 Jun 2025 13:21:24 +0000
ROA not before:           Fri 06 Jun 2025 13:16:24 +0000
ROA not after:            Fri 05 Jun 2026 13:21:24 +0000
asID:                     263444
IP address blocks:        138.36.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 17:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:73:e8:bb:fb:e6:82:dc:e6:52:b6:72:9a:33:17:9d:9b:8b:46:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944D1D572BAB1051387200BA68477F359EA492CF
        Validity
            Not Before: Jun  6 13:16:24 2025 GMT
            Not After : Jun  5 13:21:24 2026 GMT
        Subject: CN=309F26392FF7654A60D7D80B23A335A0E9D22E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:75:06:2a:ed:d7:a5:53:41:40:b5:a9:fc:
                    8b:8a:8f:e0:77:56:e4:06:ab:b2:b9:51:7f:e5:55:
                    e5:7b:4b:c7:92:f3:fc:1b:8a:e5:a5:90:c5:d9:db:
                    3f:ce:25:ec:95:ec:63:95:38:83:ed:7d:90:61:48:
                    8a:58:d7:bd:b5:f0:58:cc:18:98:81:43:78:7e:cc:
                    20:c3:f4:48:9d:de:a2:07:45:07:2d:b4:1a:62:19:
                    47:a1:23:e0:72:c4:f4:7f:76:98:0b:60:ed:e7:fd:
                    c6:c6:3f:85:35:31:a8:63:2d:d9:89:1e:8b:02:73:
                    94:ed:da:a7:c8:2d:61:53:89:74:ff:3b:42:ba:36:
                    9d:37:07:8b:34:22:e4:eb:8b:09:71:27:a4:9e:e3:
                    59:aa:13:dd:a2:78:d8:00:c1:f3:bc:ca:50:76:73:
                    57:5a:ab:7b:4e:5b:9f:2c:b4:1f:76:96:73:89:e1:
                    46:19:37:fb:33:93:ee:7f:46:48:73:a7:f5:67:77:
                    b0:83:c1:5f:ea:55:6c:05:d0:7f:28:1a:f8:1b:47:
                    69:c0:8c:e2:70:f1:46:d3:82:94:84:7c:51:02:c0:
                    12:9e:0b:24:b6:17:d1:d8:7f:8c:9c:90:b0:df:c3:
                    3a:90:50:0c:07:ad:9d:7f:47:76:42:22:ee:2b:08:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:26:39:2F:F7:65:4A:60:D7:D8:0B:23:A3:35:A0:E9:D2:2E:8F
            X509v3 Authority Key Identifier:
                keyid:94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:b6:9b:4a:b4:eb:21:7b:2b:6a:82:fc:1f:de:1f:74:39:
         ef:70:d1:01:54:df:dd:a2:b7:5f:54:09:e8:d5:58:0c:e1:35:
         b3:f2:8b:00:30:01:91:e0:ce:25:83:5a:84:db:79:fe:f6:2a:
         1d:9b:ed:d2:71:94:10:70:a0:90:28:58:26:1a:9d:f5:32:2b:
         12:84:b5:7a:7a:de:11:47:1a:63:36:25:68:5f:1a:3e:c5:6e:
         2d:ef:a6:f4:76:62:b6:38:83:90:a9:e1:d5:b6:e5:f9:2f:b8:
         f2:a8:67:79:eb:0b:f7:e6:df:63:b4:ac:76:07:1a:98:86:1e:
         a3:d1:87:19:ba:f0:ba:0e:18:64:25:19:41:a0:3a:c1:7e:62:
         29:c1:d0:80:44:9e:51:6b:0d:ab:6a:ed:eb:bd:fc:aa:3d:33:
         da:f0:7e:91:f1:e9:d3:73:cc:6b:c7:de:9b:64:04:9e:3c:c6:
         64:51:7e:7b:0f:42:e9:2e:75:44:c3:dd:14:1f:30:f1:25:b5:
         31:3f:60:a3:bb:6b:67:9b:31:df:81:81:bf:13:0f:08:af:b7:
         19:f2:23:90:ea:2a:e5:bf:ca:f1:c0:f5:4d:23:1b:a7:e7:00:
         fc:90:62:7e:b9:3a:78:b9:5b:55:9f:15:de:fe:8c:4d:e7:89:
         21:76:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:06:33 2025 by rpki-client