Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32302d3234203d3e20313938393439.roa
File:                     3138392e3131332e3131322e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          t3qKugGMGs3NaJZX64w/gM/OlpAdH7/8lWQ30MbRnAo=
Subject key identifier:   51:53:3A:25:84:1D:7D:DE:7E:09:90:2A:99:2A:B6:94:B9:2D:07:B0
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       78C2DC65056C12F43E610E325DB290BFB13F1A58
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32302d3234203d3e20313938393439.roa
Signing time:             Tue 08 Jul 2025 18:39:58 +0000
ROA not before:           Tue 08 Jul 2025 18:34:58 +0000
ROA not after:            Tue 07 Jul 2026 18:39:58 +0000
asID:                     198949
IP address blocks:        189.113.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c2:dc:65:05:6c:12:f4:3e:61:0e:32:5d:b2:90:bf:b1:3f:1a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jul  8 18:34:58 2025 GMT
            Not After : Jul  7 18:39:58 2026 GMT
        Subject: CN=51533A25841D7DDE7E09902A992AB694B92D07B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:b5:ef:74:3b:d8:f7:05:b8:6d:5e:12:c4:
                    1d:1e:45:3d:52:f8:e4:3c:7b:1d:e2:85:86:65:86:
                    e9:fc:a7:82:39:9a:94:55:16:b5:7e:d0:5c:1e:2f:
                    78:5c:ee:30:ff:b2:ad:32:4c:d8:10:ea:37:e3:7d:
                    af:db:8c:11:bb:66:0e:ee:88:32:3d:79:78:12:b6:
                    78:45:e1:27:49:be:09:67:2f:7b:62:de:e0:aa:bd:
                    33:72:22:93:9b:4c:82:9f:f9:ca:6b:21:5c:7b:37:
                    aa:7a:52:a8:da:31:a8:e9:05:d4:72:b3:6a:8a:39:
                    f8:66:2f:2e:b6:bd:f0:2b:20:7c:a4:5a:3f:dd:33:
                    4e:af:e9:f4:8b:42:39:00:46:9c:f6:72:85:29:64:
                    a1:b2:fb:1a:ff:a4:26:46:5b:28:02:4d:89:a7:ba:
                    b9:b4:0a:d5:ba:b7:3a:db:1e:83:e7:a1:7f:4f:e3:
                    f9:54:e5:96:d1:e3:a6:73:57:79:42:87:e2:62:ff:
                    fc:4b:c7:f0:fd:b3:d1:12:18:3f:08:d4:2a:82:93:
                    4d:52:3f:9c:79:dd:61:5c:18:05:4d:a8:40:9e:16:
                    43:04:f7:21:00:09:ee:2e:0f:b4:8d:25:eb:76:c0:
                    7d:5e:36:d1:e0:fa:53:82:7f:4c:04:85:fe:6d:d7:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:53:3A:25:84:1D:7D:DE:7E:09:90:2A:99:2A:B6:94:B9:2D:07:B0
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:46:9a:58:27:7e:bd:31:51:67:82:e5:f4:a4:92:87:2a:04:
         cc:a7:99:58:14:67:98:4d:25:31:29:40:83:37:2d:61:21:19:
         76:aa:d0:c2:a4:14:45:e8:ae:87:a8:bc:61:6a:2a:74:6d:e3:
         9e:65:08:aa:f4:0b:31:10:a8:76:54:39:f7:59:47:53:f6:3b:
         3c:85:34:44:84:c1:d1:b3:01:60:e8:64:34:c7:39:73:f0:d2:
         bf:10:cf:8b:2f:d7:ff:54:93:bf:8e:60:7a:1c:59:a2:41:f5:
         04:be:cd:66:26:5f:9b:26:65:11:b5:b4:34:e8:5f:e9:70:64:
         4d:4c:be:91:6b:a2:7d:09:0f:4f:0b:59:f5:38:7a:4b:e5:b4:
         75:38:35:c9:31:e0:48:dd:42:d7:d6:6f:25:35:b5:09:f8:68:
         5b:c3:50:a7:8a:2a:7b:d5:9f:88:31:f5:67:78:1c:46:9c:c6:
         97:71:3f:4c:0c:d4:f6:7f:3e:b9:0f:f0:a4:fe:c4:0b:3e:9f:
         d2:4c:05:ce:c9:f2:0d:85:6a:3f:60:20:23:c7:c6:20:6f:63:
         49:7d:a4:00:10:6e:63:22:c5:cf:6e:18:5a:9e:a8:c7:47:d5:
         ef:05:da:4d:aa:b9:f8:58:28:53:43:7c:ea:53:92:3f:be:da:
         01:b2:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:01:04 2025 by rpki-client