Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138372e3130332e39362e302f31392d3332203d3e203134383430.roa
File:                     3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (raw, json)
Hash identifier:          FyfHWuY+9899LZebFp3dHC5ejksLfM26zSb/CsLJoXY=
Subject key identifier:   1F:E4:A7:58:5F:E8:D9:9A:41:38:25:50:9C:E3:25:B6:22:DE:F4:33
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       39F78F60D45D328FDCCB67868AF69D8E512F2CF7
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138372e3130332e39362e302f31392d3332203d3e203134383430.roa
Signing time:             Tue 13 May 2025 17:07:04 +0000
ROA not before:           Tue 13 May 2025 17:02:04 +0000
ROA not after:            Tue 12 May 2026 17:07:04 +0000
asID:                     14840
IP address blocks:        187.103.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 02:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f7:8f:60:d4:5d:32:8f:dc:cb:67:86:8a:f6:9d:8e:51:2f:2c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: May 13 17:02:04 2025 GMT
            Not After : May 12 17:07:04 2026 GMT
        Subject: CN=1FE4A7585FE8D99A413825509CE325B622DEF433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:15:d3:cd:c5:6d:da:9d:18:79:5f:db:be:
                    47:08:c0:a4:e0:e9:d0:10:14:d4:63:c4:f8:01:53:
                    97:65:91:7b:9f:1f:5f:70:98:e3:bd:e4:82:f1:62:
                    01:f2:9a:cf:63:f4:60:f8:a4:6e:47:b4:98:3a:51:
                    1b:1b:bd:51:4f:a4:e8:24:50:bc:a9:a2:08:d7:af:
                    6f:ff:1e:93:85:82:d8:6b:f0:dd:42:1f:c8:60:ec:
                    56:7a:c9:38:37:5f:7d:30:43:cb:b8:3e:b1:31:61:
                    f7:90:d1:fe:4d:81:be:27:ac:0e:2a:75:9e:14:0f:
                    0e:96:dc:78:6e:cc:2c:4f:f4:28:ff:bb:56:ba:62:
                    84:2e:14:b9:d2:95:3d:34:b3:f2:0f:bb:ed:f5:2d:
                    a8:2c:93:2c:fc:71:04:1a:da:36:3d:b5:dc:a2:13:
                    19:47:d0:5d:3c:4f:7a:8a:f9:e0:2e:1a:ca:f1:63:
                    64:14:9d:8d:1a:e3:41:73:57:a0:b9:5f:3d:87:ff:
                    1c:95:f1:35:8e:b8:6f:f1:9e:63:27:2d:44:8d:94:
                    8d:1b:70:71:52:bb:14:03:5d:00:11:ce:98:b6:e1:
                    ff:10:c1:a0:d1:ef:0c:2e:0f:d0:0d:f5:64:fd:17:
                    71:41:49:3b:2e:11:ff:2a:57:dc:dd:d5:6f:1c:be:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:A7:58:5F:E8:D9:9A:41:38:25:50:9C:E3:25:B6:22:DE:F4:33
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138372e3130332e39362e302f31392d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:3e:c6:ec:f2:ea:3e:ca:3a:5d:4a:28:d3:09:74:fb:93:
         ec:c5:e5:43:e1:60:42:5e:18:a0:99:d7:7e:b4:dd:d0:a8:dc:
         58:6d:c1:a4:01:c5:8b:10:95:21:b9:83:1d:02:f5:28:44:1d:
         be:56:39:64:df:20:9a:32:48:88:c8:08:c4:9f:00:f2:13:a3:
         8e:f3:95:42:a2:e5:0e:5c:ca:44:99:59:40:8f:79:8e:7e:f7:
         eb:1a:33:ea:7b:69:58:f4:74:ae:90:0d:d0:ec:4c:71:45:36:
         ed:33:81:86:b7:fc:75:21:e5:d8:c4:8d:df:7a:1a:d1:e2:fb:
         8f:ad:ef:bc:73:87:31:e2:fa:2b:1e:81:4f:86:10:32:1b:4b:
         22:e2:12:24:18:28:2a:73:d7:53:6e:e4:6c:ba:ed:4f:a5:21:
         8a:62:56:47:d8:df:6f:f9:da:63:05:1d:7e:b4:0d:4c:53:0f:
         fa:0d:74:43:29:c9:ba:74:fe:ce:a5:46:fa:0b:df:d3:bd:e4:
         97:ce:7f:2f:bc:65:bd:ef:8b:05:66:6e:19:ac:e8:e6:83:a8:
         3e:a2:a0:14:ac:e9:1c:d1:be:96:87:14:7d:98:fe:16:a2:da:
         2b:93:c6:5d:aa:14:44:97:79:b7:8c:f7:ea:97:45:ed:82:d5:
         e6:f5:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:02:19 2025 by rpki-client