Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa
File:                     3133382e33362e38342e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          +WsA14xJJWp7LQyjLNrn3/TTUfEaH1lucbdcmV1hBgg=
Subject key identifier:   B4:81:1F:A1:68:59:F3:34:56:DA:47:28:DC:BB:6D:AF:D3:04:FE:22
Certificate issuer:       /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial:       441E480839EE0FF56BC89B393D554AFC3E9A2AAA
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa
Signing time:             Sun 26 Jan 2025 20:11:48 +0000
ROA not before:           Sun 26 Jan 2025 20:06:48 +0000
ROA not after:            Sun 25 Jan 2026 20:11:48 +0000
asID:                     264193
IP address blocks:        138.36.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1e:48:08:39:ee:0f:f5:6b:c8:9b:39:3d:55:4a:fc:3e:9a:2a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
        Validity
            Not Before: Jan 26 20:06:48 2025 GMT
            Not After : Jan 25 20:11:48 2026 GMT
        Subject: CN=B4811FA16859F33456DA4728DCBB6DAFD304FE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:47:74:0b:64:dc:7a:00:19:31:eb:32:6d:
                    82:4a:97:d7:d8:96:9b:bb:d3:11:11:31:bf:4e:55:
                    a3:80:71:c8:da:7b:2d:3a:d7:8c:08:2c:78:7b:06:
                    5b:a1:5c:28:d6:ab:b4:33:04:f2:20:02:06:df:5b:
                    83:74:39:7c:fb:15:af:0c:e1:3d:07:15:e4:59:bb:
                    17:82:fb:b1:54:32:4c:bf:12:68:c6:0d:bd:4a:a1:
                    6a:5e:17:d8:60:d1:30:65:d4:6d:c0:44:c5:a4:cb:
                    53:d5:c2:d1:39:2e:ee:37:31:dd:21:55:97:b9:eb:
                    72:c1:47:c3:8d:46:66:bf:c9:1a:2d:f2:dd:7d:c9:
                    6a:c7:25:3d:03:72:ec:cb:4a:d1:88:21:cd:08:43:
                    c7:9a:03:1a:1e:3a:09:c6:1d:1e:63:62:93:b1:0a:
                    7a:63:ed:4e:9b:79:78:28:17:39:08:ac:8c:cb:31:
                    fa:8f:65:f3:6b:43:5e:47:3d:73:8b:04:a3:8e:4d:
                    66:ee:47:6a:39:15:20:84:d6:82:50:4c:f6:a7:4f:
                    3a:66:e3:04:e0:e5:ca:fa:5f:85:43:2f:24:05:80:
                    f8:5c:66:7e:78:91:f3:75:fa:1d:8f:a5:1a:fd:c0:
                    0d:bf:0b:88:35:36:25:12:78:fb:f4:e7:a7:76:d7:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:81:1F:A1:68:59:F3:34:56:DA:47:28:DC:BB:6D:AF:D3:04:FE:22
            X509v3 Authority Key Identifier:
                keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:50:50:d2:a7:a3:57:09:47:4d:82:a2:08:ca:e7:b8:b2:
         7c:eb:d3:93:c4:10:89:d1:43:44:07:28:85:8d:47:66:b5:52:
         cd:8f:94:f0:f9:46:46:70:8f:92:ec:93:b7:ef:18:8f:2b:fe:
         b1:26:43:bc:6b:94:18:d7:67:2b:01:44:ef:73:31:76:6b:d8:
         3c:57:6b:12:b1:24:e7:2b:b1:d1:b4:84:40:41:b5:3c:31:cf:
         8d:de:0d:bd:3b:57:b9:ae:94:9d:cb:25:7f:96:5d:6a:09:7e:
         24:63:b5:87:59:e3:48:9e:14:0d:6d:fe:40:34:61:5d:39:b4:
         98:77:be:53:c0:38:09:30:bf:ad:65:20:9a:62:8b:a8:63:3a:
         69:70:34:f7:b9:c6:b6:b7:15:60:f4:99:7c:5c:d2:4f:53:1a:
         d5:5f:90:3e:29:7b:a3:5f:6c:48:0f:af:f5:a1:71:c2:4d:51:
         11:b9:bc:75:44:ac:86:44:29:1d:93:db:48:9a:53:1e:81:28:
         9c:cf:ca:32:ae:2c:6e:68:92:dd:f5:6b:ee:75:01:e3:57:99:
         94:42:b4:4e:f6:95:aa:3f:d4:de:64:f4:e4:19:49:3d:85:9e:
         69:2b:c4:c0:4f:ab:1f:f9:94:64:fb:7e:5f:f4:09:65:7f:30:
         63:39:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:51:17 2025 by rpki-client