Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          oBuMKTgUrAlANpjROm0J1QuZiuHr/CWdNwTZl0rdecU=
Subject key identifier:   B3:9C:64:C9:46:7D:D9:53:6A:00:B0:6D:32:3F:18:1B:6B:61:5D:37
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       44715497C2706653DE48529E6DDEFD0DDC1688B7
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:28 +0000
ROA not before:           Tue 24 Dec 2024 13:44:28 +0000
ROA not after:            Tue 23 Dec 2025 13:49:28 +0000
asID:                     267513
IP address blocks:        186.251.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:71:54:97:c2:70:66:53:de:48:52:9e:6d:de:fd:0d:dc:16:88:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:28 2024 GMT
            Not After : Dec 23 13:49:28 2025 GMT
        Subject: CN=B39C64C9467DD9536A00B06D323F181B6B615D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:2e:fc:02:b7:a4:58:7e:8c:5d:75:77:4c:
                    dd:f4:ac:b1:15:7d:c3:9b:6f:71:c1:8e:82:8f:70:
                    01:46:c5:a8:df:c5:9a:46:12:f4:b8:5b:2e:d5:27:
                    d4:cc:fc:52:89:1d:69:4b:10:41:43:8e:f2:e6:da:
                    7a:0d:d8:14:a4:28:62:56:38:37:1f:13:7d:56:4d:
                    58:38:50:92:1e:0a:d7:3b:2f:fd:12:d3:88:b8:71:
                    66:2e:ea:92:a1:6d:0d:7d:ac:a6:eb:64:6b:c6:2e:
                    02:b1:eb:13:54:4f:b4:ef:31:0e:04:d0:ce:ee:73:
                    37:5d:87:0d:af:cf:06:1c:c6:3a:ef:df:12:29:f8:
                    60:72:42:d1:c0:61:7b:c1:c2:2d:a4:82:60:6c:57:
                    69:6e:08:39:81:53:db:d3:f8:c1:60:57:59:55:4e:
                    86:68:c4:7a:8b:88:70:6c:bf:84:7e:e0:fc:18:07:
                    29:ec:d6:57:93:4e:ff:5e:89:e4:0f:48:ba:38:7d:
                    3b:2a:5c:96:02:fd:63:ad:a2:81:9a:16:cf:06:7c:
                    55:71:97:21:d3:53:69:d4:8f:98:1e:aa:62:69:6a:
                    a7:b5:c4:6a:8b:b6:69:8a:2e:88:15:44:a3:f4:70:
                    d2:7e:13:f5:9b:25:8c:c1:e9:d3:c3:c4:50:13:f7:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9C:64:C9:46:7D:D9:53:6A:00:B0:6D:32:3F:18:1B:6B:61:5D:37
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:d9:b4:37:dd:b6:34:2c:78:45:86:71:9e:49:eb:3b:84:
         5c:16:81:4b:ce:5d:ef:c9:56:cc:2d:d7:68:e9:80:83:68:1b:
         14:c5:ca:df:da:1c:89:4a:09:43:4b:e0:88:4a:71:6d:cd:cc:
         2f:6f:dd:15:e6:f5:98:fe:02:94:ba:bf:44:3a:2d:00:78:a0:
         c5:19:9c:a3:5f:a5:07:7e:71:0e:f7:d3:85:5f:89:c4:75:aa:
         96:8f:13:97:40:d1:91:cc:df:70:51:de:34:1b:d5:b7:a8:27:
         a9:2d:ff:b8:65:f7:74:23:fc:4c:86:5a:0d:eb:84:b0:46:a5:
         43:96:08:ae:06:2e:26:e2:49:49:05:f0:44:d3:f4:8a:60:4e:
         c2:44:10:be:1f:f9:d5:08:66:9f:80:12:10:1e:be:c1:5e:8e:
         6d:4b:8c:ef:fe:f6:b5:1f:32:6f:5c:8f:ef:80:2c:67:86:01:
         44:86:3b:91:a5:7d:41:2f:86:a5:fb:7f:29:4b:1c:45:50:b2:
         37:37:a2:1d:48:e9:c3:c7:3f:6a:f8:f2:0c:48:34:5a:ea:b6:
         5c:b6:5b:b4:d9:25:ac:65:b3:85:ed:e0:4e:90:2e:5e:22:81:
         07:61:67:f6:a3:dc:90:0d:da:90:3b:c4:c6:33:60:a1:be:a4:
         67:a9:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:32:58 2025 by rpki-client