Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
File:                     3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa (raw, json)
Hash identifier:          6f/JrCsIS/911PrWzhju+B3rEV/TxqS+LO1DubtMYMQ=
Subject key identifier:   BC:D7:E3:7B:BD:6C:31:91:C1:5E:72:85:08:6C:6C:70:39:CA:FD:61
Certificate issuer:       /CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
Certificate serial:       7D54A13B00E5A86234EC3EDFA7DA2FD2825724C2
Authority key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
Signing time:             Thu 06 Mar 2025 10:12:21 +0000
ROA not before:           Thu 06 Mar 2025 10:07:21 +0000
ROA not after:            Thu 05 Mar 2026 10:12:21 +0000
asID:                     264528
IP address blocks:        168.194.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl
                          rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:a1:3b:00:e5:a8:62:34:ec:3e:df:a7:da:2f:d2:82:57:24:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
        Validity
            Not Before: Mar  6 10:07:21 2025 GMT
            Not After : Mar  5 10:12:21 2026 GMT
        Subject: CN=BCD7E37BBD6C3191C15E7285086C6C7039CAFD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:00:f1:f0:90:de:75:fa:b1:10:49:f4:66:
                    5d:84:29:86:8c:7e:25:6a:e4:5b:65:3e:82:6c:08:
                    cf:e3:22:d4:92:e5:83:a2:56:ce:4f:eb:ae:a2:6b:
                    ee:99:b0:76:53:e4:da:70:9c:89:85:be:bc:7e:59:
                    84:7c:19:fc:ae:95:41:d0:60:53:b9:6e:a2:ae:a6:
                    98:ff:dd:a2:a2:1c:eb:d6:77:9f:bb:07:90:23:15:
                    1a:d5:dc:81:35:d0:b1:9a:67:e7:66:c2:07:cd:4d:
                    da:52:f1:d0:42:a0:c8:c1:3d:60:55:9c:d3:65:b7:
                    fd:08:3a:7b:23:46:7f:f9:03:a2:c7:27:e9:5b:99:
                    98:a7:4c:6c:31:35:8e:4a:54:fb:e5:32:a4:ed:02:
                    52:12:f6:d3:07:8f:89:66:99:c9:36:2e:5f:32:58:
                    61:03:b3:8a:b9:57:8a:bd:32:12:fa:95:0c:99:ef:
                    60:1a:ea:8e:36:29:2b:fa:17:20:5a:b9:91:14:e9:
                    49:b6:05:38:a1:4a:f6:a8:9d:85:c5:5f:c7:d4:96:
                    03:74:53:94:1a:0e:0c:e2:ae:31:9e:c4:b5:5c:85:
                    fe:62:97:e2:f0:bc:94:84:ee:bb:a3:83:29:e7:9d:
                    84:9f:8b:1c:46:c6:bc:e8:54:9f:6a:75:f0:34:d7:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:E3:7B:BD:6C:31:91:C1:5E:72:85:08:6C:6C:70:39:CA:FD:61
            X509v3 Authority Key Identifier:
                keyid:2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:42:77:26:81:1b:ed:5f:eb:a8:0e:8d:11:e1:39:2d:3f:5c:
         bf:45:fd:b0:b6:cd:49:34:f5:7c:87:cc:4f:0a:9d:7b:56:70:
         6b:02:9c:c3:fe:71:16:8c:2f:21:9b:7d:42:d5:73:98:0a:76:
         8e:92:de:89:f6:6f:e6:3a:41:14:ae:c6:6a:9c:3a:b2:c7:aa:
         9c:d1:e3:e0:1b:00:0e:bb:46:9f:ad:f5:cb:34:0f:cf:c9:fa:
         6a:03:24:d1:b0:74:10:80:8c:eb:cf:53:ed:7b:03:86:84:d6:
         16:dd:03:9a:df:ef:9e:41:46:f0:77:2a:29:c2:40:f4:3d:13:
         38:24:b6:76:0a:0e:64:3f:eb:7e:d1:31:a6:8f:2d:6f:b7:02:
         5a:8d:75:a8:96:fd:95:b3:ea:21:15:05:2c:ef:53:82:80:1b:
         ca:be:cc:05:f8:df:8c:b9:a7:8e:8e:eb:3b:8b:5c:2b:b9:61:
         63:b1:2a:da:81:e2:96:16:53:66:21:67:e3:85:85:11:72:70:
         b0:70:90:0e:cb:1c:c6:8b:ae:b0:e0:91:1d:d1:c1:55:79:73:
         4f:9e:40:86:ec:d4:1f:62:bc:d2:a7:f5:29:03:ed:44:c4:a2:
         b2:79:2d:9c:43:ac:d0:84:f8:a2:d1:95:06:21:72:d9:49:1b:
         6b:76:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:18:21 2025 by rpki-client