Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa
File:                     3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          DrYvbXgeU3gsFGGU9cXLFNaKuaz+oUCT3nb7NAJzhkM=
Subject key identifier:   43:7C:33:0A:16:50:66:18:E7:AD:F3:C6:46:C9:45:ED:B1:AE:7E:7D
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       59A87254E7F3AC2155B2B15002EF206714BDD9E9
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 05 Mar 2025 19:00:20 +0000
ROA not before:           Wed 05 Mar 2025 18:55:20 +0000
ROA not after:            Wed 04 Mar 2026 19:00:20 +0000
asID:                     61639
IP address blocks:        138.219.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a8:72:54:e7:f3:ac:21:55:b2:b1:50:02:ef:20:67:14:bd:d9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Mar  5 18:55:20 2025 GMT
            Not After : Mar  4 19:00:20 2026 GMT
        Subject: CN=437C330A16506618E7ADF3C646C945EDB1AE7E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:12:17:19:38:a7:e8:57:92:9f:ab:ff:78:
                    15:12:8b:73:99:2f:43:d8:f9:bb:13:96:d1:2c:2d:
                    d8:42:a0:db:d4:05:af:89:47:41:34:f4:13:2a:09:
                    e9:a3:d6:d1:f2:f1:a0:e8:22:ea:86:68:0b:6b:81:
                    e1:48:1e:36:42:52:df:f4:47:57:ea:e2:28:a7:46:
                    fe:24:e0:c3:75:5b:84:4b:43:e7:b8:a1:2b:71:04:
                    19:ee:ed:fe:da:f4:94:a2:21:2b:8b:97:1a:9a:fb:
                    b5:b2:39:c1:c2:56:a4:04:a4:65:71:09:88:73:88:
                    c1:39:2a:33:d0:67:42:80:f8:fa:34:96:53:bf:da:
                    48:27:31:af:f6:a4:05:a5:19:f3:97:ba:8f:3c:b3:
                    15:e2:41:d8:7f:99:04:e6:f1:c8:a3:18:0d:82:15:
                    46:cd:90:01:f7:73:aa:76:1c:1b:58:71:16:f5:ce:
                    ee:e4:3a:f8:9c:1b:61:aa:e5:b9:7f:2f:e2:c9:b4:
                    97:c3:b9:fa:73:e2:cf:25:d7:04:6c:39:58:24:d3:
                    9d:2b:b2:1b:77:ab:46:e5:8d:09:57:c3:71:26:ec:
                    02:46:ef:ab:92:e3:a5:eb:58:4e:6c:4e:fe:ed:65:
                    df:b1:a7:ad:f2:20:fe:e4:2a:4f:58:e4:17:41:14:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7C:33:0A:16:50:66:18:E7:AD:F3:C6:46:C9:45:ED:B1:AE:7E:7D
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:87:b5:92:bb:15:28:15:3e:1f:ec:71:94:06:c9:40:b9:
         b0:a4:c2:cb:03:13:d1:af:40:77:89:4e:ea:e3:79:42:94:ae:
         ae:42:bb:58:f5:10:37:50:16:26:37:d4:b6:b9:2a:16:b8:4a:
         f0:a2:8d:6d:4a:d3:61:0d:52:bb:a5:0e:ca:4c:84:90:ce:44:
         46:33:2b:a5:78:d6:7a:96:58:92:e9:80:5a:1e:29:f7:96:e5:
         6e:86:07:22:e1:62:13:69:28:31:68:e8:55:dc:af:1c:3f:21:
         af:48:49:1f:7d:7f:06:83:9a:8d:ad:be:30:a2:3f:c0:ab:71:
         2b:4c:a7:ec:14:cb:4f:07:1b:cc:ef:56:61:41:0c:1c:3a:c3:
         68:93:89:a7:63:f0:16:9b:a8:b0:3f:02:b4:91:7f:69:32:c8:
         b2:15:6b:28:6e:01:30:50:79:b7:e3:67:d4:5f:50:1e:06:75:
         7f:bd:de:70:39:8e:29:19:73:2b:2a:92:5f:57:44:13:85:f7:
         ab:e6:b7:e0:5a:56:b8:d2:bc:df:01:f4:ef:b9:7d:cd:3a:a9:
         e4:18:c7:ba:a7:f5:02:87:a6:80:3f:31:08:47:22:40:1a:7a:
         eb:3c:2a:10:77:0a:80:8e:c2:4d:b5:5e:6a:f0:5b:7e:c0:60:
         2c:42:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:00 2025 by rpki-client