Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          Ofj+xM1gAPaTVKVJQG/OXEAi/fXLCO57JzPAGjLkCqs=
Subject key identifier:   67:FD:D7:57:49:D8:B7:C8:6D:BA:9F:A0:39:52:40:A8:79:E1:2B:60
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       58C39C41AF945A8C1F7B86A05C1AC2BC976A411F
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264311
IP address blocks:        138.122.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c3:9c:41:af:94:5a:8c:1f:7b:86:a0:5c:1a:c2:bc:97:6a:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A02820101009973CCE3979DC211EE83FB2E3367EE1CE36CE5CC4E4A2CC6E7666BD62C77EDF9F18E81A2C89D5B6C71CA191611683465B46826436DB9BEE9B63757B285C37956F168C882003345EB882E66350B27F68A024CF3C283457A634936199A10E44D002EE224230ECB80330996CD8D6E4F6237BEDF0AECF6B45984109730FD2DE383BAE15F9ABA26845FBEDAAA05585623EFEF6A3B0065BBD181977154641F154AED9D7FC3C9B76E1479E37C3E951BD87C18D760B4C5A34445AFC5D58C0CE84C3F68E280843952228AF78C8A8708153195E8EF54A62238747778DFF9C01C8D977AB1011EB6B6AE70AA6AF6B0E5DABCA76BF3B6CF00EEC912B00E0A77CA8776EA8837D10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:cc:e3:97:9d:c2:11:ee:83:fb:2e:33:67:
                    ee:1c:e3:6c:e5:cc:4e:4a:2c:c6:e7:66:6b:d6:2c:
                    77:ed:f9:f1:8e:81:a2:c8:9d:5b:6c:71:ca:19:16:
                    11:68:34:65:b4:68:26:43:6d:b9:be:e9:b6:37:57:
                    b2:85:c3:79:56:f1:68:c8:82:00:33:45:eb:88:2e:
                    66:35:0b:27:f6:8a:02:4c:f3:c2:83:45:7a:63:49:
                    36:19:9a:10:e4:4d:00:2e:e2:24:23:0e:cb:80:33:
                    09:96:cd:8d:6e:4f:62:37:be:df:0a:ec:f6:b4:59:
                    84:10:97:30:fd:2d:e3:83:ba:e1:5f:9a:ba:26:84:
                    5f:be:da:aa:05:58:56:23:ef:ef:6a:3b:00:65:bb:
                    d1:81:97:71:54:64:1f:15:4a:ed:9d:7f:c3:c9:b7:
                    6e:14:79:e3:7c:3e:95:1b:d8:7c:18:d7:60:b4:c5:
                    a3:44:45:af:c5:d5:8c:0c:e8:4c:3f:68:e2:80:84:
                    39:52:22:8a:f7:8c:8a:87:08:15:31:95:e8:ef:54:
                    a6:22:38:74:77:78:df:f9:c0:1c:8d:97:7a:b1:01:
                    1e:b6:b6:ae:70:aa:6a:f6:b0:e5:da:bc:a7:6b:f3:
                    b6:cf:00:ee:c9:12:b0:0e:0a:77:ca:87:76:ea:88:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:D7:57:49:D8:B7:C8:6D:BA:9F:A0:39:52:40:A8:79:E1:2B:60
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:85:f7:c9:63:0c:6d:a4:8c:f5:ae:df:fd:a1:3c:9b:a5:e5:
         09:61:8c:ec:ea:2c:6e:5f:e4:d5:86:6e:a8:8c:f4:b2:47:1f:
         25:b9:5d:61:9d:72:f1:1b:3a:4d:cf:8d:a9:bf:f2:f1:2e:2e:
         11:2c:06:f6:94:0e:63:33:28:53:78:d9:4d:da:61:69:5f:11:
         bb:08:9e:ac:04:6c:16:a9:11:03:0d:90:1e:ce:08:70:fa:4f:
         4b:10:09:e5:9a:23:d3:55:68:93:28:fb:42:56:2a:93:4a:54:
         36:06:0d:92:7f:19:af:47:a4:1d:c6:12:6b:c1:38:97:e3:4a:
         d8:ae:dd:ee:16:2c:cc:e8:ab:ca:76:bf:97:c7:01:42:5a:3f:
         a1:b3:48:85:87:b8:8f:5f:32:d2:7b:06:98:61:6e:a4:0f:4a:
         a9:52:91:c4:f0:3c:5f:48:7e:38:fe:0d:fa:91:35:ea:94:23:
         ac:17:75:b1:28:da:9d:7c:d4:a6:89:a0:50:01:0b:6b:ed:67:
         13:ed:03:bd:93:74:dc:c6:ac:2c:da:98:f9:f1:cc:68:69:30:
         78:bf:6a:22:7a:31:e4:ff:b8:ae:91:d6:76:f8:a3:6b:b8:09:
         57:cb:c8:f3:6a:d9:75:51:6a:a5:4f:eb:66:b1:40:e9:36:d8:
         6a:1f:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:43 2025 by rpki-client