Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
File:                     3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (raw, json)
Hash identifier:          WwcDuCD7uWMpF9Sbfr1Je7U/ApOhXAU2mca8b97svMA=
Subject key identifier:   4E:A5:A5:77:F8:84:1F:EC:D9:D4:3B:DC:56:CF:55:D9:29:88:05:69
Certificate issuer:       /CN=D0A1149273197F052C828789EFA0AE353109D430
Certificate serial:       44D1F76C7EE501F9401AFAF5733A61DB3753B6BA
Authority key identifier: D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
Signing time:             Thu 27 Mar 2025 18:02:20 +0000
ROA not before:           Thu 27 Mar 2025 17:57:20 +0000
ROA not after:            Thu 26 Mar 2026 18:02:20 +0000
asID:                     263027
IP address blocks:        186.249.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl
                          rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d1:f7:6c:7e:e5:01:f9:40:1a:fa:f5:73:3a:61:db:37:53:b6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1149273197F052C828789EFA0AE353109D430
        Validity
            Not Before: Mar 27 17:57:20 2025 GMT
            Not After : Mar 26 18:02:20 2026 GMT
        Subject: CN=4EA5A577F8841FECD9D43BDC56CF55D929880569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ae:74:00:41:dd:04:ad:a0:cc:72:68:f4:6b:
                    0a:1a:c5:d0:22:8a:e1:2a:e2:21:ed:a2:f4:3f:ef:
                    f0:aa:43:af:5d:48:83:89:ea:a6:d6:a0:1c:fb:8a:
                    68:eb:4f:7b:aa:67:aa:bb:e0:fd:7c:e4:e5:a4:ff:
                    75:93:59:a1:06:5e:84:aa:21:c9:d4:73:56:94:e6:
                    6b:56:c3:13:3f:7c:c0:50:63:2d:2b:6a:de:b6:b8:
                    3e:ef:0a:1e:59:ba:59:ea:4b:e1:eb:c5:86:f2:18:
                    51:a8:71:e9:87:2b:7f:3e:3a:19:12:e8:fb:b4:d8:
                    f1:99:77:94:b3:3d:14:13:97:1b:65:74:76:8c:4c:
                    93:5c:b7:04:76:16:21:f3:a6:6f:39:69:20:98:de:
                    be:45:af:de:b9:27:21:ba:dc:7e:57:77:6d:40:fd:
                    20:0d:ae:9d:e1:2e:9e:67:06:67:55:59:ff:02:82:
                    57:e1:6f:55:0a:d4:59:cd:c4:a3:5d:24:1d:88:53:
                    db:7a:5d:b1:55:fc:79:4b:c4:b5:9b:02:de:40:df:
                    69:30:70:5f:75:9a:3d:dd:12:dc:e5:23:59:b3:df:
                    49:37:a4:a4:82:f7:9b:20:32:7e:4e:21:98:4b:a4:
                    69:47:fe:45:74:5a:85:0b:45:56:48:e0:46:50:2b:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A5:A5:77:F8:84:1F:EC:D9:D4:3B:DC:56:CF:55:D9:29:88:05:69
            X509v3 Authority Key Identifier:
                keyid:D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:8a:75:c6:6b:31:32:d4:de:01:01:48:29:53:49:5c:3d:
         92:5f:b4:92:e6:61:1b:dc:fa:c3:c2:55:77:69:f0:4e:62:59:
         79:38:b1:78:ef:2e:cb:8b:8c:ae:74:93:6f:45:df:7f:83:6d:
         b0:4f:aa:ae:e3:33:68:16:bb:fb:19:9c:87:69:03:f8:c3:e7:
         1c:2a:9f:aa:e2:be:93:f6:58:91:19:24:c8:1a:1c:e7:3c:22:
         32:d7:07:83:ec:70:fe:54:cc:30:8c:cd:96:96:4e:9e:83:2a:
         8f:a3:fc:60:70:5d:41:2f:17:1c:40:ce:5b:f4:01:49:d1:57:
         ce:cf:5d:d8:59:ac:e6:12:da:5a:8b:47:86:84:d0:0c:4b:ff:
         1d:7b:85:fb:8d:c8:9c:8b:64:7b:e8:e8:e8:15:76:01:2b:74:
         d9:75:3a:13:6a:7c:3d:ae:31:6b:c0:2b:ae:fc:8b:b8:54:fe:
         27:74:29:0d:17:59:b7:a8:ec:b0:aa:3b:5a:db:7c:f1:a7:cd:
         42:03:7b:25:f6:2f:67:98:62:e1:05:a7:b5:43:f2:13:b1:f5:
         4c:7f:12:9d:f6:68:66:3f:ee:e1:f8:6a:f5:cc:4e:da:5f:d8:
         65:65:00:f7:bd:38:d1:7b:a8:fa:d0:77:9a:2f:5a:8a:44:ea:
         97:06:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:02 2025 by rpki-client