Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          7TOFINNpCf7jf+QkRxl6dJVizqQ5S+zl40Ir1yrXJww=
Subject key identifier:   72:F3:77:03:5E:98:3F:5C:50:74:66:4D:73:12:A9:B3:E9:66:F3:EB
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       535655D30BFC91211D448657AE33B7F2ECE42A5C
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264311
IP address blocks:        138.122.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:55:d3:0b:fc:91:21:1d:44:86:57:ae:33:b7:f2:ec:e4:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A02820101009AA4823394F0FC62CC5539C9EADA401486DE98ACC6BCD5CA68FA3C5A7A79EFBB6B9AC6A0F68154ACD0F65051FD34279B9AB81C60E7100C3DC1B1A4DA89E6DC1B31307FD9F25E864CF9BD1BD4F240490ABF4CA5970EE5F4D67AE16FCD03F6D967B71E83C2CF96F6BFE6E8197306AA9E277B5B638A58FAA67994960660984181B98C58B8D4E7B3A91CAFF469DA5EF35669243274C626885BE5694982ABA10CE7786CAD65D90FF484478DD95043E23688A5DAB09C3E9D225C9240ED4060FB2AB6D668CBF467E28D0B665182F671F208B650BD53DCE7637E1E1505C3B35BCF0207CF56857A59D869E44ADAAF870BC18EF1CAAD255F9490C83AFC1203C4526BBF66DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:82:33:94:f0:fc:62:cc:55:39:c9:ea:da:
                    40:14:86:de:98:ac:c6:bc:d5:ca:68:fa:3c:5a:7a:
                    79:ef:bb:6b:9a:c6:a0:f6:81:54:ac:d0:f6:50:51:
                    fd:34:27:9b:9a:b8:1c:60:e7:10:0c:3d:c1:b1:a4:
                    da:89:e6:dc:1b:31:30:7f:d9:f2:5e:86:4c:f9:bd:
                    1b:d4:f2:40:49:0a:bf:4c:a5:97:0e:e5:f4:d6:7a:
                    e1:6f:cd:03:f6:d9:67:b7:1e:83:c2:cf:96:f6:bf:
                    e6:e8:19:73:06:aa:9e:27:7b:5b:63:8a:58:fa:a6:
                    79:94:96:06:60:98:41:81:b9:8c:58:b8:d4:e7:b3:
                    a9:1c:af:f4:69:da:5e:f3:56:69:24:32:74:c6:26:
                    88:5b:e5:69:49:82:ab:a1:0c:e7:78:6c:ad:65:d9:
                    0f:f4:84:47:8d:d9:50:43:e2:36:88:a5:da:b0:9c:
                    3e:9d:22:5c:92:40:ed:40:60:fb:2a:b6:d6:68:cb:
                    f4:67:e2:8d:0b:66:51:82:f6:71:f2:08:b6:50:bd:
                    53:dc:e7:63:7e:1e:15:05:c3:b3:5b:cf:02:07:cf:
                    56:85:7a:59:d8:69:e4:4a:da:af:87:0b:c1:8e:f1:
                    ca:ad:25:5f:94:90:c8:3a:fc:12:03:c4:52:6b:bf:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:77:03:5E:98:3F:5C:50:74:66:4D:73:12:A9:B3:E9:66:F3:EB
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:2d:8f:c2:ed:13:ac:5e:9e:8b:1d:95:54:fb:ef:61:ce:
         74:43:e5:f4:18:3d:e1:8c:4a:b6:fd:4d:6c:ff:59:9c:60:30:
         ed:8f:c7:54:cc:b9:67:ce:9a:f4:16:4e:eb:15:e8:20:ba:4c:
         65:e9:b5:04:30:a6:54:7c:9f:73:0c:32:cf:44:83:98:70:e7:
         25:31:e2:03:40:c6:68:69:f9:19:ab:84:15:57:e0:54:25:cd:
         24:d9:73:23:54:1c:7c:fa:9a:4d:ce:48:8c:a7:4d:c9:5e:ec:
         ac:d9:34:72:b3:6b:6d:69:88:01:bc:a5:cd:a0:09:0e:59:e8:
         da:a9:d3:07:a6:07:2b:14:3f:ee:05:10:3e:b3:06:ff:ce:e6:
         74:f0:ad:f4:9b:37:f2:18:4d:64:21:47:8e:b9:25:f9:13:aa:
         75:c9:aa:6c:bf:cd:af:cf:d5:0d:1b:85:3e:98:44:d4:f7:27:
         7f:aa:73:cf:30:70:8e:ad:ea:10:8d:ae:89:0b:f6:be:3c:cb:
         d4:b6:74:31:aa:84:3f:0a:6a:cb:4e:ec:06:34:da:6c:4c:f4:
         4a:5c:d3:a0:4c:ef:3f:10:af:1f:d7:d3:15:f0:63:cf:d6:dd:
         be:9a:65:f3:65:63:9c:ce:b3:13:1a:32:b2:a2:c3:6d:fd:26:
         f7:27:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:51 2025 by rpki-client