Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa
File:                     3133382e35392e3132342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          mqIWJ2GiEj77aSPP+JRzeQwVKlTbYf8rUfSAOLVNEUM=
Subject key identifier:   15:DD:BC:CC:74:5C:1D:E0:A0:5B:F1:77:26:A1:11:92:BF:FA:66:AA
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       3020FC25F32FF4A902C516ADF875EDC856C02F97
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 06 Mar 2025 09:00:38 +0000
ROA not before:           Thu 06 Mar 2025 08:55:38 +0000
ROA not after:            Thu 05 Mar 2026 09:00:38 +0000
asID:                     61588
IP address blocks:        138.59.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:20:fc:25:f3:2f:f4:a9:02:c5:16:ad:f8:75:ed:c8:56:c0:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Mar  6 08:55:38 2025 GMT
            Not After : Mar  5 09:00:38 2026 GMT
        Subject: CN=15DDBCCC745C1DE0A05BF17726A11192BFFA66AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:f7:3a:78:c4:5d:24:f2:3c:a8:87:e8:b2:
                    67:aa:9e:85:b1:66:77:32:dc:73:18:a4:21:16:71:
                    65:0c:36:7c:a8:a9:29:6b:39:0a:2c:c2:21:dd:7f:
                    77:a4:ce:91:97:8b:5a:83:42:05:af:10:d3:1e:b6:
                    78:ff:71:41:ed:fa:52:3e:53:46:68:f3:99:db:40:
                    34:c0:99:93:bc:a3:5b:91:8f:82:cf:cf:65:2c:7b:
                    3f:16:d0:6f:06:02:9f:8c:2e:9d:7c:70:6f:ad:6c:
                    b0:30:2d:6d:a8:73:cc:37:20:1c:4c:35:d8:48:da:
                    4e:fc:78:fc:4a:a4:2f:e9:4f:0b:53:95:bd:e7:44:
                    c3:0a:ae:a1:19:48:d3:83:cc:86:d8:f0:2f:c2:6d:
                    01:29:0e:2f:56:57:92:ec:9a:26:e4:83:15:eb:51:
                    cf:28:48:2f:c1:77:59:8c:1f:18:ee:03:6f:9e:d1:
                    e2:4e:d4:6e:56:f7:90:5c:ab:63:81:0a:29:f0:e6:
                    29:b4:f7:1f:8c:67:08:e3:a8:87:d6:04:c9:d1:d6:
                    cc:a2:8b:3b:ea:4f:29:af:75:0f:2a:c0:ef:5f:63:
                    14:46:62:85:e6:9d:85:e3:b6:19:f9:4e:a9:5c:53:
                    ae:e5:3a:87:67:7a:02:90:1b:67:f9:17:68:10:55:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DD:BC:CC:74:5C:1D:E0:A0:5B:F1:77:26:A1:11:92:BF:FA:66:AA
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:c3:66:90:ab:b0:58:73:22:48:3c:ce:da:22:2b:aa:e7:
         15:5a:eb:50:a9:95:ac:70:2b:7c:29:eb:23:9d:90:f3:fe:44:
         2a:4d:d5:ee:c6:fb:2c:5c:55:2a:e7:bf:d4:20:b2:d2:01:d3:
         62:cf:96:ee:b1:cb:82:a0:ea:34:05:04:fd:73:24:5d:67:81:
         bf:c2:a9:ec:3f:27:20:68:21:89:ed:a9:7f:5c:d6:64:f9:6d:
         e3:46:b0:bc:28:c5:4c:38:26:12:9f:a4:8d:21:e4:0f:ac:ac:
         c3:8c:fe:ba:eb:6c:4f:a9:63:84:66:70:49:f9:e0:9b:7e:ae:
         32:90:14:0f:eb:0b:3d:94:4d:3f:91:c8:f6:9a:f3:8e:d2:55:
         b0:ee:6b:de:5a:af:0a:7d:01:fd:f8:11:85:5c:fd:c1:c7:b6:
         b3:ac:0c:7f:5d:98:24:82:a4:bb:03:8c:32:d3:58:fb:e5:17:
         1b:d2:78:ec:47:ac:62:86:a6:3b:c3:7b:31:4a:e6:64:39:4a:
         ad:12:db:a0:a9:e1:07:b8:91:cf:d0:b3:a7:2a:7a:f4:0e:3f:
         1c:01:b2:90:e8:70:ed:5c:a8:92:29:e2:1a:c7:9a:c7:30:9d:
         96:2b:c2:0e:50:9c:bc:30:72:80:77:b2:ab:92:3d:52:f3:54:
         b1:5c:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:09 2025 by rpki-client