Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa
File:                     3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          kIETFEjytc64Ht6Qy7vYApVFlHaiEJUSa+u0ugnHpD8=
Subject key identifier:   69:25:76:DA:57:A8:C6:60:56:2B:96:C4:A4:9A:F4:3B:7D:20:3F:3D
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       2DC4C417A36220B39CE0E5A39FCFE5DAB980EF38
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa
Signing time:             Thu 06 Mar 2025 06:47:36 +0000
ROA not before:           Thu 06 Mar 2025 06:42:36 +0000
ROA not after:            Thu 05 Mar 2026 06:47:36 +0000
asID:                     262979
IP address blocks:        138.186.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c4:c4:17:a3:62:20:b3:9c:e0:e5:a3:9f:cf:e5:da:b9:80:ef:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Mar  6 06:42:36 2025 GMT
            Not After : Mar  5 06:47:36 2026 GMT
        Subject: CN=692576DA57A8C660562B96C4A49AF43B7D203F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c7:4e:b9:07:e4:ca:ff:ee:5f:92:f9:71:35:
                    93:d8:f9:25:74:47:f9:03:98:d4:eb:c1:c9:b5:46:
                    ec:43:63:65:ca:c6:61:aa:d5:82:6f:dc:a3:d4:c1:
                    1d:86:4e:8d:e5:52:4e:1f:cb:ad:db:b3:b3:71:ec:
                    c7:02:a9:50:4b:5e:db:1f:7a:50:72:1d:b1:b0:d9:
                    71:6e:69:03:c1:b9:85:fc:39:d9:c9:b0:a1:d3:68:
                    80:6f:f6:16:65:97:27:00:3f:bd:c9:b7:05:53:75:
                    19:c3:29:1e:0b:2c:61:e5:8e:e8:0f:b5:06:27:c6:
                    23:94:ac:00:ff:e9:7a:a7:86:ce:ba:10:50:9d:ff:
                    d1:26:0c:6f:00:46:d5:6a:96:0e:4a:95:1f:d3:e3:
                    94:e3:39:ca:ba:e1:e8:eb:0e:73:60:81:c2:34:e7:
                    e2:a4:30:19:08:3b:70:b1:0c:f8:26:29:48:35:d4:
                    b4:43:8b:8e:7b:6e:1f:89:7a:55:96:50:6e:41:2c:
                    99:31:67:7e:57:5c:52:c2:44:96:08:b5:9e:d6:57:
                    64:db:aa:4f:2e:89:e6:90:18:4b:1a:2b:c4:7f:42:
                    bf:ca:51:63:96:e3:25:27:f1:b6:bb:5d:df:4a:60:
                    04:ae:a1:31:67:ac:a7:6e:83:80:11:35:2f:61:59:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:76:DA:57:A8:C6:60:56:2B:96:C4:A4:9A:F4:3B:7D:20:3F:3D
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:6e:9f:50:a9:be:ff:c7:85:41:ae:eb:41:23:de:da:66:fe:
         86:26:0e:54:05:c3:d3:58:3e:64:3f:f7:32:2e:06:9d:e4:cc:
         41:f9:fd:f7:e4:db:d8:45:f8:37:e0:d9:5a:33:14:70:41:d0:
         b2:23:51:b5:b3:34:21:49:0c:99:44:ec:5f:fa:7c:b2:4d:c4:
         54:30:aa:f4:1d:f5:86:62:92:67:f4:33:4a:51:4d:fb:66:c1:
         01:0e:67:d5:25:21:e2:1e:89:1e:93:6f:1f:15:77:b6:e4:b3:
         a2:17:f4:46:5a:10:de:11:f9:c5:4e:93:ce:f9:77:04:a9:50:
         fc:bb:17:02:bc:38:a5:e0:7a:54:01:89:a2:8e:6a:ec:d9:ef:
         68:eb:03:46:c0:85:cd:cf:01:d0:da:35:bc:b2:67:e4:05:98:
         75:d5:7a:97:e2:5b:39:59:bb:d3:78:df:5f:3e:6b:1e:33:2e:
         e9:73:6b:ed:64:92:4d:5f:36:6d:59:60:86:ac:a6:90:d9:c3:
         75:44:f7:53:88:13:f5:23:c3:88:a2:ba:c8:3c:9f:47:0c:ff:
         06:0c:3d:70:cf:05:f7:12:fa:18:a8:7d:74:98:52:50:57:22:
         37:d9:38:95:2c:a2:35:a2:86:cb:b7:22:7b:ca:49:8d:4b:60:
         e1:25:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:53:24 2025 by rpki-client