Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa
File:                     3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          jp7m+hi+KoBsfG3clAu9CPNSCYaNR5ai9lgzM1Y89VY=
Subject key identifier:   09:63:E1:C7:CE:E6:9E:0C:93:27:0C:20:85:39:A6:57:C1:28:CF:43
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       2B5096DF79BF87E4DC5EEA0CF5B5635B15C5E1D9
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa
Signing time:             Thu 05 Dec 2024 13:23:18 +0000
ROA not before:           Thu 05 Dec 2024 13:18:18 +0000
ROA not after:            Thu 04 Dec 2025 13:23:18 +0000
asID:                     262998
IP address blocks:        186.224.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:50:96:df:79:bf:87:e4:dc:5e:ea:0c:f5:b5:63:5b:15:c5:e1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Dec  5 13:18:18 2024 GMT
            Not After : Dec  4 13:23:18 2025 GMT
        Subject: CN=0963E1C7CEE69E0C93270C208539A657C128CF43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:77:a7:50:1d:0b:26:9f:cd:19:d5:52:d0:
                    24:6f:f2:37:2a:68:25:d7:7c:17:b4:10:17:c9:72:
                    c5:70:9b:bf:53:3d:24:3a:6b:ad:8b:4f:78:f4:57:
                    33:41:64:90:01:f9:e6:a1:5f:71:b5:20:45:7f:8e:
                    79:00:b7:2c:f3:43:4c:fe:41:b7:49:0b:a8:38:f2:
                    f1:16:55:d6:43:bb:78:60:a5:b1:33:88:e8:f1:c4:
                    bf:93:51:6d:75:8c:c1:62:e1:b2:f7:af:bf:69:24:
                    4e:c3:de:b3:d8:7a:a3:8a:79:90:6e:55:99:65:4f:
                    77:c0:00:c1:c1:92:a6:fd:09:e4:65:ee:9f:df:1c:
                    dc:c0:a5:41:e9:19:a2:22:66:0e:e7:4d:18:7a:d1:
                    94:dc:df:21:1c:63:d3:58:cf:0b:66:e9:b0:26:aa:
                    fe:fa:2f:6f:a1:97:15:b5:72:7b:6d:bc:08:e4:4c:
                    0b:c2:91:04:f8:80:e9:27:de:1a:01:2a:59:ba:fd:
                    f2:60:08:e5:85:d2:b1:0f:c9:af:58:ad:ee:fd:b9:
                    51:7b:a5:5c:a7:2b:9c:92:b6:94:d0:79:35:a3:05:
                    26:6e:53:04:50:49:73:89:05:8e:41:cd:82:48:a3:
                    92:b1:8c:fa:89:df:49:93:ce:de:6e:e3:8b:88:e3:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:63:E1:C7:CE:E6:9E:0C:93:27:0C:20:85:39:A6:57:C1:28:CF:43
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:52:bd:d0:c0:32:ce:57:b0:2f:83:4a:79:05:d0:6e:03:9b:
         b2:4b:b9:0e:6c:b3:47:84:9b:74:62:84:a4:8d:ef:43:24:8f:
         9b:c5:47:df:f2:92:24:fd:dc:d9:50:7d:69:a1:0c:83:0b:93:
         db:5e:0b:bc:39:c1:b6:5e:e7:44:d2:95:bf:b4:1e:73:8e:c5:
         56:0e:3b:2b:86:77:f7:d7:b1:b1:95:a6:c5:44:f4:c2:2e:b1:
         9c:75:93:98:b8:78:2b:5d:4d:30:5b:03:c8:85:2f:8c:a7:4d:
         91:3f:3b:1b:74:08:68:27:ff:16:e8:36:7c:ff:c9:69:9a:c8:
         05:44:d1:1b:0b:ab:83:28:9c:8d:3e:ab:85:86:c7:54:03:eb:
         2b:5d:7a:64:08:c0:ef:8d:63:fc:b5:05:23:a6:ab:58:61:54:
         d7:aa:62:15:8f:a5:2e:17:dc:21:cd:d4:13:6d:47:d3:19:6c:
         22:dc:05:15:04:31:ba:d7:f7:f0:a1:e0:94:bd:9f:06:f9:c0:
         73:99:7d:de:8c:17:1d:76:08:b6:5e:85:5d:71:d7:a8:e3:9a:
         8f:29:b7:b6:c6:06:82:2e:c0:bd:ac:8c:cf:e8:37:3b:e2:dd:
         3f:fd:5e:6e:03:ab:f0:13:a3:ff:1e:60:c8:30:c2:19:f4:fc:
         8f:ec:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:37 2025 by rpki-client