Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa
File:                     3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          BFvqPObB6q/hiR/DVOcFkLzSPmv2G6jUPdLrNaY/VtU=
Subject key identifier:   9C:F2:A5:F8:0A:6B:C5:72:AE:AE:64:DA:98:26:54:50:3B:6F:39:91
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       434DA3FD1A091237EFD48C8E397F2DBCEDF03BBA
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 14 Mar 2025 14:10:00 +0000
ROA not before:           Fri 14 Mar 2025 14:05:00 +0000
ROA not after:            Fri 13 Mar 2026 14:10:00 +0000
asID:                     52974
IP address blocks:        167.249.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4d:a3:fd:1a:09:12:37:ef:d4:8c:8e:39:7f:2d:bc:ed:f0:3b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Mar 14 14:05:00 2025 GMT
            Not After : Mar 13 14:10:00 2026 GMT
        Subject: CN=9CF2A5F80A6BC572AEAE64DA982654503B6F3991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:e6:20:8f:ff:ae:cb:21:7c:f4:50:bc:0f:
                    1b:0d:8c:94:c2:f0:af:bd:b4:fc:05:30:ca:1c:3d:
                    59:bc:6a:23:4d:2c:15:dd:59:84:70:2f:9d:7e:9a:
                    95:55:5c:6a:6b:b5:02:59:66:93:31:7b:4b:1f:6e:
                    30:e1:0d:7e:e4:f0:d7:01:3e:d3:e6:25:a4:ae:7f:
                    8a:b9:48:40:60:ca:d1:67:a8:f4:96:d0:d6:25:8f:
                    01:0a:4a:9d:72:d0:30:ca:33:eb:30:99:81:ee:19:
                    3e:dd:95:16:31:d1:c7:d7:ec:1b:26:a3:e7:d6:76:
                    08:f8:41:72:76:07:16:c6:a6:3c:eb:47:d5:87:b7:
                    f5:11:a2:eb:31:89:74:46:dc:c4:49:36:06:bd:7d:
                    6f:02:17:21:cd:0c:7f:bc:f4:be:e4:b7:5b:13:ff:
                    eb:88:5b:75:af:18:82:1e:82:ed:5b:3e:a8:e6:58:
                    f2:33:12:63:ac:a3:91:9a:2f:18:7a:2f:08:70:ac:
                    4a:b2:91:c6:ad:a5:31:07:59:09:82:17:50:0d:d1:
                    42:a3:69:f7:1b:8f:3e:8f:89:00:39:18:3b:b3:39:
                    aa:f0:13:bf:bb:57:52:94:25:d0:a4:2a:28:8c:ce:
                    95:57:9c:6d:2d:26:a3:37:f8:8e:30:d5:4f:e1:7f:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:A5:F8:0A:6B:C5:72:AE:AE:64:DA:98:26:54:50:3B:6F:39:91
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:6d:a3:82:23:b7:ff:79:44:63:6d:68:90:94:3b:55:d4:
         de:a9:30:8a:68:f9:62:cd:a4:e4:1c:e3:b9:52:b9:e5:ee:30:
         f4:7c:b0:bf:4f:df:20:2c:eb:53:b6:5a:86:31:44:1e:da:6d:
         0a:95:c1:2f:7a:b5:fa:dd:d0:6e:f2:fd:f7:f9:d5:66:23:04:
         bf:97:6c:e8:42:29:ae:01:db:51:17:8d:5f:ce:84:23:37:6b:
         29:dc:93:7b:16:6e:a5:52:68:0a:b4:b5:88:9f:ee:52:f2:1e:
         85:36:75:bc:63:c4:a1:08:e1:31:a4:42:36:48:7c:9e:00:5d:
         33:ef:85:cc:43:ee:0c:5f:58:cc:2d:ef:4b:f2:51:58:f1:1d:
         4f:18:d9:a0:39:55:41:50:73:32:05:f5:8d:2c:76:3d:9f:fa:
         5a:1c:11:d9:54:37:c5:7d:ca:22:1a:e3:ad:06:bf:4f:c0:58:
         38:f4:b3:2b:33:85:7d:bb:97:dd:4d:56:f0:f7:80:9e:27:da:
         47:18:c9:f8:fe:89:45:30:1f:b1:c9:17:10:12:23:8f:b4:d2:
         74:2b:9c:a2:0b:57:7c:75:b9:bd:90:de:8c:72:c4:45:9b:4f:
         d7:3f:bb:4c:da:b0:32:42:c6:9a:88:2f:65:b0:3a:50:51:28:
         d1:24:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:25:31 2025 by rpki-client