Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa
File:                     3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa (raw, json)
Hash identifier:          bUF5Q/lPgP+vDEAWXUAAXixRI78mX48Exw4z7Sb/iBw=
Subject key identifier:   C4:AD:E5:C1:97:22:41:10:C9:2E:62:B9:2C:12:32:12:3E:84:0D:7E
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       17071A929CF9395D17BF678BA275DD553B8E0A44
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     270836
IP address blocks:        189.14.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:07:1a:92:9c:f9:39:5d:17:bf:67:8b:a2:75:dd:55:3b:8e:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject: CN=C4ADE5C197224110C92E62B92C1232123E840D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:f5:c6:7e:7f:18:70:8e:d8:3a:98:50:b6:
                    6e:fe:2b:c9:69:81:5a:24:7b:36:40:d2:82:41:88:
                    32:84:83:94:30:a2:e8:ed:dc:79:0c:7e:94:55:7c:
                    ad:87:6c:ab:5c:d0:04:0d:5f:8e:39:a1:23:db:4b:
                    47:11:da:f4:93:b6:fe:9a:e4:eb:ce:37:5f:f9:63:
                    fa:61:30:4f:a4:6b:de:06:65:ff:10:cd:e7:9e:f9:
                    b3:63:64:4f:06:88:d8:df:b2:ce:d4:aa:cb:19:68:
                    c1:0d:3b:86:f3:eb:48:f9:ed:5e:2a:74:54:a4:68:
                    be:3b:55:02:32:08:30:1a:55:14:d9:a5:a2:a2:4a:
                    be:2b:2b:eb:14:bc:fc:26:07:47:c6:63:f4:f1:a0:
                    a5:c2:c6:a5:3f:5e:8e:1c:0d:88:4c:2f:d5:d6:7f:
                    c7:f1:34:02:2c:b8:5f:a3:be:00:97:ad:5c:0d:a3:
                    61:90:27:d8:f2:c2:44:8b:ad:ff:76:e5:0b:2f:1a:
                    2a:b4:eb:0c:a5:0f:7b:af:97:99:1e:19:10:b0:64:
                    fe:cc:e1:15:90:8d:a3:e0:9e:70:ba:36:17:70:ab:
                    ca:18:2e:8d:20:c8:ab:39:67:32:ae:45:a5:cd:cb:
                    4a:f8:47:d3:e9:2f:40:c9:a8:21:26:94:58:37:88:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AD:E5:C1:97:22:41:10:C9:2E:62:B9:2C:12:32:12:3E:84:0D:7E
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131322e302f32332d3233203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:60:f3:cf:1f:c3:38:b0:49:20:6e:85:84:79:f0:05:db:
         32:c3:05:ee:0b:93:84:39:67:b3:7b:34:33:03:3c:53:0b:4a:
         73:f8:01:88:e5:2e:a5:aa:7c:0c:3a:84:ba:76:80:15:ab:f0:
         66:eb:39:88:1d:99:2c:bf:c9:d3:65:2b:db:13:9f:46:8a:71:
         07:46:3f:3d:f0:8a:3e:fe:97:56:eb:2f:6e:f4:c9:38:f9:55:
         ee:ad:e2:43:ed:11:ee:18:49:4b:46:1d:68:21:d3:58:5c:8a:
         e3:d5:da:c1:91:49:ed:b0:db:79:4e:67:1f:48:90:2f:27:12:
         9d:d1:de:ca:5e:c5:a9:93:58:48:bc:64:48:c5:12:5f:4f:74:
         29:64:ae:8e:74:04:ff:3c:55:19:49:4e:c6:d2:af:eb:bf:79:
         de:e9:a5:77:58:d0:17:ac:60:88:3b:a9:54:97:cc:34:4f:11:
         f5:f1:c8:bc:74:f8:b5:7a:89:40:88:49:0d:5a:96:ec:1d:fb:
         65:46:cb:df:6c:6d:3a:ee:21:a1:17:41:12:c1:e2:e8:8f:ae:
         e2:78:7c:84:5b:8d:4f:2f:34:71:c7:dd:15:d6:47:9d:b0:8e:
         b6:6d:31:0b:84:fb:cc:0d:a6:95:1f:c6:65:84:42:05:4e:28:
         d4:1d:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:35 2025 by rpki-client