Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa
File:                     3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (raw, json)
Hash identifier:          CijY/x6+D8joAqsuz8leADzcy10p8WZ0yiPQhbQPUfE=
Subject key identifier:   4F:9C:D1:50:A3:0B:7D:27:40:AB:94:02:25:2A:7C:60:21:15:FE:CB
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       7B2273104E1A0B2CAB0DF57B6B24C2E7A5C7BAFB
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa
Signing time:             Mon 31 Mar 2025 14:21:19 +0000
ROA not before:           Mon 31 Mar 2025 14:16:19 +0000
ROA not after:            Mon 30 Mar 2026 14:21:19 +0000
asID:                     28153
IP address blocks:        186.193.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:22:73:10:4e:1a:0b:2c:ab:0d:f5:7b:6b:24:c2:e7:a5:c7:ba:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Mar 31 14:16:19 2025 GMT
            Not After : Mar 30 14:21:19 2026 GMT
        Subject: CN=4F9CD150A30B7D2740AB9402252A7C602115FECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:74:8f:fd:42:ae:14:9f:18:ad:26:03:5f:
                    01:8c:79:88:87:ce:da:38:bf:ac:d4:a6:a1:78:16:
                    b2:ed:6d:f5:28:16:0e:01:2f:40:e8:9b:90:d3:6c:
                    45:ba:99:88:d1:5d:62:4c:61:52:87:65:32:5d:5f:
                    48:90:72:4d:42:c3:fe:0b:17:94:5f:f9:db:d6:f2:
                    93:1d:51:d8:b6:f7:a9:65:56:b0:ed:6e:e1:cb:10:
                    09:c4:76:25:68:de:a1:c1:00:5c:62:74:d9:5a:e3:
                    5d:20:67:34:27:79:8b:f0:06:e0:7a:ad:84:f3:7f:
                    98:83:32:f3:17:fb:ab:84:fc:ed:42:15:89:46:3c:
                    33:bb:95:f2:cd:1e:39:b4:b9:13:fb:50:6e:19:7b:
                    bc:00:c3:50:96:90:67:57:44:52:fc:72:34:f8:cd:
                    fe:1d:3e:ce:2e:6a:b0:50:6e:fd:8d:78:ed:d3:8e:
                    30:95:d3:89:ec:3c:b1:eb:08:65:57:20:57:00:a2:
                    a1:50:e8:58:8b:a4:7d:2d:30:c2:9f:f5:03:01:96:
                    6a:9f:1a:58:41:82:f9:3b:b0:8c:a5:92:87:d7:ea:
                    53:55:32:bc:17:f5:13:96:c2:4d:f6:90:dc:50:80:
                    f2:20:56:b7:4d:d8:fe:0f:73:c2:d3:f9:80:ca:53:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:D1:50:A3:0B:7D:27:40:AB:94:02:25:2A:7C:60:21:15:FE:CB
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:b0:3f:11:02:14:54:53:60:2c:54:e8:9a:65:ce:e1:cf:d5:
         fa:e7:b6:87:98:dc:47:a1:27:01:c6:f8:59:2c:58:e2:30:10:
         29:45:2d:0b:d8:82:48:3f:a9:61:0a:51:af:8f:a4:93:b9:dd:
         ba:e8:2c:c5:a3:15:f9:b4:3f:60:8e:2b:10:b5:65:95:fa:60:
         9b:de:a0:3a:dd:bf:b0:f7:0e:ee:6c:8d:4f:a8:75:55:70:1a:
         7e:9c:ee:49:16:cd:0b:8b:47:1e:e5:e8:27:3a:8b:2f:c3:18:
         e9:00:ca:5e:49:67:76:ef:db:12:10:57:67:ad:d4:e0:00:96:
         8d:e9:2f:52:e7:39:83:59:d9:2d:31:39:b4:54:a6:fb:86:6d:
         7d:f9:58:43:aa:d0:58:93:b1:16:68:01:87:0d:64:87:ab:84:
         9b:d2:c4:1f:ab:ec:42:89:2a:7b:d6:51:02:96:3c:a2:17:35:
         67:1a:7a:a0:41:f2:7c:6b:98:f5:b4:bf:f3:22:ae:fe:6d:fa:
         02:8f:21:6d:6e:74:f8:01:53:6e:f9:99:dc:91:fc:16:4b:5c:
         14:95:35:cd:39:0c:c0:a0:3d:72:5c:dd:3e:91:62:9f:d2:d6:
         a5:c7:a9:ce:d8:5d:a0:a9:f7:60:9b:f2:3e:8f:1f:6b:72:b5:
         93:d1:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:43:19 2025 by rpki-client