Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa
File:                     3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          Vv789YYHFaPbwqAZmXurM0ADTKIE59KcC8qcC4wxP1M=
Subject key identifier:   53:CA:5D:EE:AF:D8:AB:1A:94:EF:D5:46:99:C0:11:1A:7E:77:36:4B
Certificate issuer:       /CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Certificate serial:       416F83C56FDDAA7E056FEB64C3233A22BA75985E
Authority key identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 20 Mar 2025 20:42:26 +0000
ROA not before:           Thu 20 Mar 2025 20:37:26 +0000
ROA not after:            Thu 19 Mar 2026 20:42:26 +0000
asID:                     263444
IP address blocks:        138.36.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6f:83:c5:6f:dd:aa:7e:05:6f:eb:64:c3:23:3a:22:ba:75:98:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
        Validity
            Not Before: Mar 20 20:37:26 2025 GMT
            Not After : Mar 19 20:42:26 2026 GMT
        Subject: CN=53CA5DEEAFD8AB1A94EFD54699C0111A7E77364B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:1b:55:86:ae:06:2b:d7:9b:4b:06:2e:7f:
                    0b:de:d4:b2:0a:88:ca:2c:2a:94:57:f2:ed:f2:56:
                    d8:75:44:48:f4:fb:e2:38:a0:1e:ce:eb:1e:b8:28:
                    f3:8e:c0:14:39:dd:c5:80:c2:90:2e:ff:f1:09:cc:
                    bb:2d:50:a4:61:08:0b:6d:41:8e:98:19:c7:aa:94:
                    8a:e6:2e:1e:3e:7e:a3:08:5a:7a:16:4c:1d:aa:79:
                    ed:09:6e:53:f5:e7:23:ee:ba:dc:eb:a3:28:c8:b3:
                    93:91:21:b1:f1:1c:46:dd:2e:e8:38:a1:56:ec:e6:
                    3e:e2:cf:64:46:07:26:e0:1b:c9:89:50:b1:25:00:
                    80:1d:44:b6:d3:01:79:31:36:7c:c7:a4:94:1b:a0:
                    7e:32:19:20:f9:8b:74:6b:3a:f5:88:cc:d5:c9:69:
                    a1:d6:b3:8e:28:17:20:a8:ce:b1:c1:a7:19:82:15:
                    45:3a:14:03:51:93:f4:e8:d9:18:80:d6:5c:12:b6:
                    39:ef:13:3c:72:ac:97:ac:dd:19:a2:cf:9e:22:c0:
                    af:8b:98:4a:0b:2c:a4:c3:c8:e5:0e:cc:a8:86:1b:
                    58:20:e7:01:16:00:85:9b:31:e9:75:e3:95:32:da:
                    2b:61:5c:55:de:b5:d3:d6:06:be:71:2a:a9:5b:40:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:5D:EE:AF:D8:AB:1A:94:EF:D5:46:99:C0:11:1A:7E:77:36:4B
            X509v3 Authority Key Identifier:
                keyid:4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b5:11:3d:2c:47:f1:e1:2f:94:9f:fd:fd:33:10:02:60:ba:
         5b:46:6d:30:2b:85:5a:2e:e3:01:d0:c7:cc:22:22:76:8c:80:
         7b:ff:93:c4:c4:15:cb:4e:4b:7f:71:e8:59:5f:6b:2e:ae:28:
         62:72:61:f5:50:43:2c:fc:f7:2a:08:20:75:c9:fb:b5:b9:1c:
         39:fe:af:c7:7a:92:18:0f:0e:16:9d:fc:8d:c7:25:88:fb:9b:
         d2:7f:d7:b4:2c:32:b7:39:97:fe:86:aa:e3:28:7f:92:10:c1:
         f0:e3:e4:88:79:51:47:15:fc:7d:8c:80:00:03:51:44:6e:09:
         64:84:e7:20:f1:58:44:1c:bb:57:67:a5:33:ee:18:6c:05:d8:
         d5:06:bb:cb:71:0b:6e:24:8e:dc:02:63:ea:10:11:3c:82:ee:
         66:96:73:c0:2a:90:69:67:e8:08:09:e9:62:83:8a:99:f1:5c:
         66:63:5e:26:b1:12:75:b7:73:9e:92:ea:03:be:9e:64:0a:05:
         17:49:c8:0e:5b:c0:27:f2:5d:c5:75:fd:62:2b:f4:cd:5f:3a:
         30:ec:54:ee:b8:17:8b:76:1a:a4:d0:2f:2d:4d:10:1f:9c:85:
         62:6b:b8:11:ea:21:9e:5d:92:2d:df:b0:98:1c:44:99:10:69:
         83:d2:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:12 2025 by rpki-client