Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa
File:                     3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          R241NIE5eErEAQdwLYr0SIplvpzgtNrTTFwlfX2dXfY=
Subject key identifier:   74:5B:F6:28:C8:17:5C:E2:58:5E:B9:DF:58:8E:95:48:62:25:38:78
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       7D7CACFD93E652DF7F081C6DB2BA2B2C438CEECA
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa
Signing time:             Thu 20 Feb 2025 11:43:50 +0000
ROA not before:           Thu 20 Feb 2025 11:38:50 +0000
ROA not after:            Thu 19 Feb 2026 11:43:50 +0000
asID:                     263891
IP address blocks:        138.204.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7c:ac:fd:93:e6:52:df:7f:08:1c:6d:b2:ba:2b:2c:43:8c:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Feb 20 11:38:50 2025 GMT
            Not After : Feb 19 11:43:50 2026 GMT
        Subject: CN=745BF628C8175CE2585EB9DF588E954862253878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:59:02:4f:79:ed:a2:e6:07:f3:28:5e:11:
                    63:90:5e:6c:f6:f2:11:cc:66:d3:a3:cf:7b:22:dd:
                    17:f6:05:d0:55:1d:ad:45:30:6c:e1:b3:a6:fd:b6:
                    a8:b7:a4:a1:40:2e:12:15:ac:bd:91:80:53:a4:9d:
                    cf:6a:b0:d6:87:dc:33:be:04:e5:43:74:df:2e:7d:
                    e8:c9:33:84:d2:f5:fc:4e:fc:3f:eb:c3:8f:66:93:
                    4b:5b:ca:04:f4:cf:91:5f:b2:95:72:cb:4c:38:df:
                    f7:0b:37:23:e8:01:ea:6e:33:7b:a3:ce:ed:91:45:
                    51:30:e0:62:82:80:64:ab:ce:93:2c:b4:be:1b:43:
                    a9:61:f5:9a:a4:6f:64:16:15:e1:b5:2d:9e:f3:db:
                    53:29:a1:af:a4:64:98:1c:08:20:93:2f:ac:cb:b8:
                    1a:65:1b:e2:55:25:1d:f0:93:4f:35:bd:61:21:7a:
                    69:bb:ff:97:6d:11:0b:08:be:7c:f3:b2:96:1d:3f:
                    3c:ea:31:58:0f:62:75:de:58:c0:df:3c:f2:82:5a:
                    93:9c:c5:ac:47:bc:ac:e3:ab:8f:68:9f:44:26:51:
                    cc:4a:b2:de:9f:f0:81:94:55:7a:d0:9a:8f:74:f1:
                    64:c1:43:75:45:2b:ed:7b:f7:1c:2d:15:7f:a4:a5:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:F6:28:C8:17:5C:E2:58:5E:B9:DF:58:8E:95:48:62:25:38:78
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ac:b1:40:b6:8a:ac:25:b5:7c:81:dc:a8:6e:99:26:a7:ce:
         03:0b:71:83:79:72:d4:20:6e:a9:7b:ec:8c:2e:53:4b:2e:31:
         94:cb:1d:cf:a0:78:2c:a5:ba:42:50:b8:12:e5:9c:32:10:b6:
         6d:7f:ec:26:ce:09:64:d4:db:e2:36:34:90:f8:51:4d:c6:2f:
         b5:c0:b6:57:c4:e8:9d:b7:e4:cb:44:0e:92:e4:9b:5e:d6:fd:
         3b:0b:05:99:b0:8d:24:ec:54:13:77:99:bb:1f:16:5d:52:08:
         93:1f:6f:79:21:b5:74:08:a3:20:5b:9e:89:4c:f3:19:26:84:
         53:12:6a:67:29:8b:7a:bc:f8:34:76:9b:5f:f4:21:3d:0f:7f:
         6c:c6:bb:54:16:a3:6c:50:5d:00:ab:19:83:16:88:42:f3:57:
         06:fa:d1:5a:a6:35:01:aa:fb:93:f2:e5:83:26:48:61:26:3f:
         d5:96:44:b8:48:d0:47:a2:5c:ab:59:85:24:d8:a1:f8:39:3d:
         68:c0:ef:b4:ad:3d:58:03:07:ca:d2:c3:d6:41:de:f4:24:73:
         d4:48:f8:4a:1c:a7:14:84:10:c8:e5:ab:29:72:ed:e6:57:15:
         f3:a2:c6:0c:94:de:d5:17:05:6b:70:c4:6e:85:d4:a7:27:2b:
         b4:9e:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:35 2025 by rpki-client