Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3232322e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3232322e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          tTgSNGkTM+6A/QGzX7gcrsEcJLZ9GF7kf9qv8owuYRQ=
Subject key identifier:   1D:A7:C0:89:D6:49:B8:63:05:8A:8C:80:74:05:00:3F:78:7F:B0:FC
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       66E0A0FEE8E6EE506EE4BFEB045926416E7A1E83
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3232322e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:45:52 +0000
ROA not before:           Sun 01 Dec 2024 22:40:52 +0000
ROA not after:            Sun 30 Nov 2025 22:45:52 +0000
asID:                     28296
IP address blocks:        189.36.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:a0:fe:e8:e6:ee:50:6e:e4:bf:eb:04:59:26:41:6e:7a:1e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:40:52 2024 GMT
            Not After : Nov 30 22:45:52 2025 GMT
        Subject: CN=1DA7C089D649B863058A8C807405003F787FB0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:49:f0:05:d9:23:01:e7:4d:2c:d4:7b:df:
                    f2:1c:7d:33:df:80:a6:14:02:ef:69:83:ff:81:b4:
                    48:2a:82:fb:23:c7:d6:27:85:2e:16:b0:75:20:39:
                    0f:3f:b9:01:a9:c2:c1:60:3d:74:3a:3e:d1:b5:f0:
                    01:d4:9e:f1:16:2a:c5:03:8e:cf:d7:2f:29:3b:94:
                    e8:6d:7e:4a:08:41:8b:a4:04:95:16:1d:03:f1:2b:
                    33:e0:1d:2a:36:7a:3c:fb:1e:c4:0e:e6:8c:0f:f1:
                    9f:fb:f6:e9:b8:24:0e:88:f2:63:1e:74:2f:5b:2f:
                    22:ff:de:f3:d1:1a:88:f2:0b:1e:7d:e2:d9:5d:dc:
                    87:57:7f:bc:69:de:d8:65:f2:16:eb:b8:fc:df:0b:
                    92:ef:8d:84:f4:b8:ec:1e:d5:7e:7a:8b:fc:32:4c:
                    c8:1a:31:58:af:b2:85:53:46:4e:c2:01:cc:80:43:
                    0c:c1:52:2e:68:7f:ed:0d:90:ef:2d:47:45:81:66:
                    62:c8:53:c2:76:71:af:99:7b:25:a5:9d:ba:f4:e7:
                    95:a4:a3:db:25:d7:40:c5:8d:f5:9b:14:f6:3f:07:
                    f3:46:bd:aa:0d:18:b2:1d:59:66:0b:1a:f8:44:84:
                    e7:fb:7f:10:7a:fd:e8:66:5a:22:17:1a:49:a6:f8:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:C0:89:D6:49:B8:63:05:8A:8C:80:74:05:00:3F:78:7F:B0:FC
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3232322e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:a5:3f:c3:2d:c0:c2:cc:0a:9b:a4:bc:ab:f0:48:49:aa:
         93:86:25:97:2b:24:72:dc:20:f4:b4:bd:31:b1:70:47:5f:61:
         c6:f5:72:83:4d:36:95:9e:38:5b:c4:62:46:8a:4b:f9:c3:ff:
         65:8d:b3:6d:e2:97:bd:9b:e4:ed:52:26:4c:f4:34:46:c1:2a:
         a9:7f:06:59:c5:45:48:99:ba:a1:95:50:79:ab:ee:1a:71:44:
         9a:58:93:e9:bb:7a:ee:93:b2:5e:ec:5d:c9:0d:6e:49:19:41:
         a3:4a:65:5e:e6:cf:9e:b6:6f:a9:16:42:32:24:c0:88:56:3b:
         97:48:ef:2c:b7:47:07:54:fe:c0:9f:0d:34:83:3a:a3:6e:50:
         c3:ed:b3:a5:55:c0:a4:57:7a:b6:06:81:93:0f:b5:b2:0f:ae:
         25:75:67:20:88:cc:dc:3b:4d:bf:47:6a:5c:f6:38:ce:fd:02:
         fc:f3:94:b3:f6:9f:77:33:c1:ae:40:eb:83:49:95:ac:80:b5:
         03:1a:a1:52:b4:61:ba:ad:09:9c:e6:eb:86:0c:8f:9b:5b:56:
         db:31:f2:9b:ee:87:49:e2:25:d6:1c:4d:6c:5e:fa:54:05:d7:
         13:85:6f:b2:90:53:03:f2:6a:a3:f5:b7:f7:c3:31:1d:d1:01:
         09:3e:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:42 2025 by rpki-client