Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130332e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e3130332e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          EiPNZH58GmaG07aFWVxY5rBSKWrtD1mF8bh3frCd3tw=
Subject key identifier:   73:FE:36:B0:BC:24:D0:D7:D6:41:20:22:99:04:23:50:40:5B:EF:9F
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       7754DD8669A8A3B9E1324F0828F9D1695D5C57A3
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130332e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:44:21 +0000
ROA not before:           Thu 02 Jan 2025 19:39:21 +0000
ROA not after:            Thu 01 Jan 2026 19:44:21 +0000
asID:                     264141
IP address blocks:        186.250.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:54:dd:86:69:a8:a3:b9:e1:32:4f:08:28:f9:d1:69:5d:5c:57:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:39:21 2025 GMT
            Not After : Jan  1 19:44:21 2026 GMT
        Subject: CN=73FE36B0BC24D0D7D641202299042350405BEF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6b:5f:5d:f2:8c:10:78:c4:b5:9b:ae:eb:ca:
                    2f:59:ee:10:e2:47:2f:71:85:71:70:1e:49:62:79:
                    79:9f:4a:75:a3:5c:34:23:f8:d1:98:1d:8b:15:8d:
                    66:e6:6a:b2:81:60:21:a1:a8:1c:a3:14:30:d4:90:
                    0b:23:db:02:0f:2b:e6:68:b1:b7:ee:54:ee:aa:c3:
                    8f:6e:b4:4a:89:6d:3b:17:72:4a:68:44:db:7d:7d:
                    0c:39:71:d1:c5:93:7f:52:2d:70:dd:8e:69:58:ac:
                    f8:2b:ea:04:e5:2e:f8:69:a1:c2:62:10:f2:2a:fd:
                    8b:5c:95:5e:83:1a:c8:6c:fb:35:99:6d:ad:c0:ad:
                    ec:c0:f5:80:6f:47:c6:82:61:1d:d0:14:51:0a:7b:
                    1b:11:c6:a5:cd:66:87:cc:11:70:95:d6:44:80:8e:
                    39:b1:bf:31:1d:ca:eb:68:6a:12:bb:73:3f:dd:06:
                    0f:2d:9e:4b:71:a4:3c:f1:ba:ed:39:fb:72:39:1f:
                    11:48:01:95:ad:52:6f:71:74:3a:d2:e3:86:1f:96:
                    da:ae:03:fc:fe:51:f4:2c:56:e3:13:54:d1:ec:c1:
                    e6:dd:46:ff:28:29:95:a0:33:69:ef:81:cb:32:58:
                    27:e0:6e:dc:66:93:e4:cc:db:fa:b0:16:f6:8b:aa:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:36:B0:BC:24:D0:D7:D6:41:20:22:99:04:23:50:40:5B:EF:9F
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130332e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:6c:70:72:25:df:8d:fe:4b:0c:aa:56:08:71:d4:f7:f6:
         c1:d8:b4:7c:b9:39:68:a3:20:41:7c:6c:96:59:96:ae:14:39:
         65:a9:95:89:06:36:b7:f3:d1:63:d8:fb:6d:df:9d:79:7d:99:
         6f:b7:28:8b:0d:fc:e5:31:ec:5f:93:19:c1:de:7a:50:2b:eb:
         49:f3:c3:94:af:87:43:f3:75:2d:d1:d9:00:6a:ab:ee:c7:bc:
         e9:ba:0a:5e:f9:ab:19:f9:1a:f6:b1:a8:a6:42:88:bc:3e:33:
         09:3f:ce:55:9f:ee:c8:e0:ef:9c:2e:5f:15:8e:a8:f9:77:d6:
         1f:9d:8a:21:6c:7f:da:25:0f:30:2f:8d:a4:8d:a5:b3:43:c8:
         97:39:ef:d8:ae:0a:43:be:54:d1:d7:b9:3f:13:72:1d:34:dd:
         cf:92:b9:1e:63:91:ec:6a:5b:33:41:04:ba:39:19:1c:6f:1f:
         9f:b6:fc:94:e6:bc:60:3a:ca:b2:e7:f0:af:ff:06:1b:51:69:
         b4:2c:1b:3e:4c:48:ac:92:3a:9b:c7:26:e5:40:01:38:32:3d:
         3d:ab:d3:22:a8:1c:ab:fe:42:65:cd:00:bc:d8:26:e9:a9:b9:
         6c:53:14:5a:b3:b4:fb:95:81:eb:41:ed:e4:49:9f:e5:d1:67:
         73:4b:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:50 2025 by rpki-client