Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa
File:                     3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          E/B4o9FtqM/JhugxBc5V9HRaDRKvbPz++BHBNalDAdA=
Subject key identifier:   69:94:6B:E3:9A:B7:9B:A6:83:67:06:E1:5E:A8:DD:6F:0D:49:20:C4
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       03B7A0EFEE888276CC38CDC22F6666895410C945
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 06 Mar 2025 09:00:38 +0000
ROA not before:           Thu 06 Mar 2025 08:55:38 +0000
ROA not after:            Thu 05 Mar 2026 09:00:38 +0000
asID:                     61588
IP address blocks:        201.148.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b7:a0:ef:ee:88:82:76:cc:38:cd:c2:2f:66:66:89:54:10:c9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Mar  6 08:55:38 2025 GMT
            Not After : Mar  5 09:00:38 2026 GMT
        Subject: CN=69946BE39AB79BA6836706E15EA8DD6F0D4920C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:68:be:4d:37:b8:46:00:8c:42:e5:40:f4:
                    ef:23:f7:e5:65:54:3e:52:da:36:0a:2f:99:47:2c:
                    ad:27:7e:9e:80:54:2e:fb:d0:bd:3d:ab:d2:1f:81:
                    25:76:bc:a8:fc:11:01:1c:f3:84:70:85:7a:ed:d9:
                    8b:8d:2a:33:fa:03:14:49:7f:20:ce:e3:86:ea:73:
                    92:47:3d:2a:9b:2a:a7:9e:77:95:15:3d:51:c6:ec:
                    70:84:b2:7f:10:85:be:49:a0:35:18:86:10:fc:56:
                    6e:01:26:f3:36:59:68:b3:68:66:e9:77:4e:74:f4:
                    a6:0b:68:07:a8:0c:5e:2f:a2:83:bb:8a:a7:12:5f:
                    2b:03:58:a7:b8:cf:c9:88:8f:4d:6d:6b:25:29:8e:
                    55:18:f0:36:ce:70:c9:49:99:d0:d8:ea:bd:68:e8:
                    ca:77:28:e2:17:ee:c2:53:e2:4b:70:c5:7d:7a:9c:
                    1b:9e:8a:36:c0:39:fe:83:12:ab:e0:3e:0f:23:4c:
                    56:ba:83:b8:80:af:7c:f3:57:91:b6:41:56:ea:31:
                    a3:da:5d:39:e2:7c:e5:45:8c:94:2c:d5:7d:40:e1:
                    a0:a2:07:1b:70:d3:eb:39:71:2d:1a:44:b3:48:c1:
                    02:7f:58:84:82:c8:01:02:9c:bc:ad:95:14:16:36:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:6B:E3:9A:B7:9B:A6:83:67:06:E1:5E:A8:DD:6F:0D:49:20:C4
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:84:64:97:fc:6d:68:d0:7c:0d:b6:05:ea:a5:8f:66:1c:fc:
         b7:43:03:6f:22:82:58:ea:32:00:24:cd:05:6d:67:88:23:ea:
         c7:97:d4:14:a2:50:5c:45:69:56:d8:03:34:ed:f5:bb:77:3e:
         54:5c:e8:ec:8b:d3:cc:24:e1:a0:09:8a:69:2d:e2:b4:bc:5a:
         2c:7d:63:b7:ba:f5:dd:22:91:9b:fe:ed:53:d0:11:d7:58:39:
         cc:1e:12:2c:18:93:e6:7a:af:53:f0:d0:bb:38:0d:5c:97:47:
         66:af:03:97:6e:69:94:68:ce:0c:44:bb:a7:06:f9:33:a2:12:
         13:bd:c6:a8:2b:ac:7a:9a:32:e6:ad:5f:56:0a:22:bc:19:9e:
         1e:a0:11:7a:66:bc:4c:a6:cd:28:47:e1:b9:39:f1:f7:5b:cf:
         a9:0d:6e:2a:c8:81:81:31:15:c7:e3:4e:9e:3a:11:b7:df:ec:
         1e:c7:86:fb:e6:6f:8e:c2:89:d2:ab:ef:9f:e6:45:2d:53:63:
         14:0b:da:b9:a1:59:f8:11:eb:0f:56:33:6d:8f:fe:0f:58:c4:
         fe:38:c0:57:78:f7:6b:2b:a6:75:4a:aa:4c:97:76:a0:b2:44:
         cf:ac:7d:07:87:c8:21:01:8c:f5:2c:b7:1a:89:96:1b:e7:11:
         1c:ff:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:00 2025 by rpki-client