Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          86z/cgpympk74eFsqdwVUBmY1zLRL+b5CbU58z2QKrA=
Subject key identifier:   1E:7C:0A:2C:58:99:6F:B4:91:37:40:0E:1B:F8:20:28:AD:C4:45:4E
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       691DBC9CDDE07671B8A4B280CE9D5F56228933D5
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 06 Mar 2025 02:00:08 +0000
ROA not before:           Thu 06 Mar 2025 01:55:08 +0000
ROA not after:            Thu 05 Mar 2026 02:00:08 +0000
asID:                     263101
IP address blocks:        186.225.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1d:bc:9c:dd:e0:76:71:b8:a4:b2:80:ce:9d:5f:56:22:89:33:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Mar  6 01:55:08 2025 GMT
            Not After : Mar  5 02:00:08 2026 GMT
        Subject: CN=1E7C0A2C58996FB49137400E1BF82028ADC4454E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:41:0a:55:ae:3f:f6:a5:52:a1:7a:2b:05:
                    77:9f:6c:84:e1:b5:8f:72:2d:6b:42:5f:2d:a6:d4:
                    8b:6e:bd:f8:73:76:02:d7:9b:15:08:c2:5a:0d:8a:
                    41:dd:9b:02:7f:3b:f5:4f:00:06:08:34:8f:cb:9c:
                    8f:cf:fa:77:c6:16:ad:83:9d:c6:de:49:40:b9:7e:
                    2a:cf:e1:c3:3a:bd:18:7a:ce:2e:54:88:35:11:1f:
                    32:82:2a:de:a8:1a:d8:cc:df:b0:39:72:01:d7:e9:
                    db:ea:0d:d2:2b:8b:95:66:95:68:f2:9b:5b:7b:7a:
                    f6:bf:d4:22:9f:0d:aa:f6:17:da:8e:ab:f8:1c:fd:
                    42:63:8b:29:4d:f3:bd:82:d6:be:c2:e6:a7:a9:ca:
                    49:cf:93:2a:b6:e5:77:71:99:b4:d2:37:b6:c1:4d:
                    92:c9:0b:d8:c4:c2:5b:02:ba:41:6d:61:ca:2f:cb:
                    60:59:00:e0:81:03:d0:50:6c:f6:12:e1:ac:d8:f8:
                    e6:df:a8:9e:8b:6a:ef:af:c3:68:9c:40:c1:2f:44:
                    00:64:8f:5b:39:d5:cb:ea:b5:7f:4f:7b:49:d3:8d:
                    40:5f:64:ae:f5:94:3b:ea:20:16:92:a6:59:b9:d2:
                    cd:1c:ba:81:27:06:b2:76:b8:ed:1d:6d:4f:a1:b7:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7C:0A:2C:58:99:6F:B4:91:37:40:0E:1B:F8:20:28:AD:C4:45:4E
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:d2:79:81:b5:a0:52:7f:bd:39:e2:88:d0:02:66:15:04:
         0d:88:14:c8:ab:ff:f5:0a:c5:02:30:a5:6b:e8:0f:cc:03:a4:
         71:92:fe:55:e0:3c:8f:e0:6c:a1:75:05:47:9d:98:f5:c3:26:
         e5:d7:6c:91:17:0b:76:c0:05:61:60:68:02:f0:6f:e1:03:db:
         ab:94:25:fa:9d:e7:dd:6a:38:ab:29:b2:d3:7a:9d:bc:6e:39:
         87:50:e0:fd:6d:c6:7b:7a:e9:38:6d:d0:42:7c:f1:ee:99:a1:
         2a:b9:69:ec:85:a0:e3:9c:9a:54:d5:38:b5:a9:78:57:5b:35:
         15:71:3b:1e:df:4d:92:54:60:51:2f:4d:a1:da:8e:bb:fe:46:
         0c:18:ae:a2:9c:12:29:d5:e1:e1:53:76:a9:29:33:51:43:9c:
         29:3c:1c:05:45:67:5c:cb:bc:c7:91:7b:7c:f7:65:1d:32:52:
         2f:85:a0:37:e4:5b:f3:a8:e3:be:ff:9b:74:e4:4c:d3:db:4c:
         25:b9:1f:3d:5e:96:cd:66:e0:b1:5f:5f:73:2f:d6:0c:23:22:
         59:f2:4e:25:b2:8b:5f:f9:a8:4e:06:51:dc:66:c3:d7:28:68:
         25:48:2c:23:8b:cc:02:b1:3f:8b:8b:1d:a3:50:50:b9:61:4f:
         b7:c2:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:31:11 2025 by rpki-client