Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e3132372e36342e302f31382d3332203d3e203232333831.roa
File:                     3138392e3132372e36342e302f31382d3332203d3e203232333831.roa (raw, json)
Hash identifier:          w4HA1Ke6esRi/Etne2vZ5hoUcoP3l8GTZpA4YzWMw3k=
Subject key identifier:   4B:93:77:7A:04:19:95:FE:EA:C6:6E:9A:67:5D:20:8C:41:96:09:A9
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       0C27E2CEB31041898D1C428E95DEC165022416A5
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e3132372e36342e302f31382d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 20:11:32 +0000
ROA not before:           Fri 07 Mar 2025 20:06:32 +0000
ROA not after:            Fri 06 Mar 2026 20:11:32 +0000
asID:                     22381
IP address blocks:        189.127.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:27:e2:ce:b3:10:41:89:8d:1c:42:8e:95:de:c1:65:02:24:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 20:06:32 2025 GMT
            Not After : Mar  6 20:11:32 2026 GMT
        Subject: CN=4B93777A041995FEEAC66E9A675D208C419609A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:41:fb:d4:43:df:e6:4d:b6:1c:b1:00:26:
                    ee:10:c7:a5:77:15:02:2b:ef:aa:95:af:9a:fc:bf:
                    82:de:f0:09:7c:16:6f:bb:9c:eb:9f:bb:1b:5e:dc:
                    82:4b:43:00:c0:54:84:50:22:5a:78:1f:57:64:45:
                    58:c4:1c:4b:07:4d:c9:35:ee:05:72:df:b7:8a:e9:
                    2f:7e:4b:96:6d:a5:a3:4c:53:d9:04:be:ff:f3:b1:
                    55:f3:47:99:f8:8b:d9:db:a9:0c:b8:61:c8:15:2d:
                    01:f9:13:cc:7f:dd:75:e2:66:6b:fb:c0:b6:cb:1d:
                    36:d1:fe:6b:b1:d5:80:81:6a:3d:f1:0d:10:f9:b7:
                    30:01:8b:47:29:80:99:9f:ab:88:f8:17:d6:32:12:
                    bb:67:f4:3e:41:12:52:4d:81:fc:da:a4:60:ce:8a:
                    4c:09:fc:23:1e:38:d2:f1:1e:03:0b:de:d9:48:35:
                    99:1c:2e:42:6b:1c:7c:f1:98:67:8c:3d:8c:4e:9d:
                    24:cc:60:e9:88:bf:bb:7d:5b:1f:6b:52:a7:de:e8:
                    11:81:1c:67:cd:7d:74:ab:a6:5d:09:90:6b:bf:c1:
                    34:10:27:6e:16:c4:dc:ea:59:f4:49:7a:a8:8a:ab:
                    5a:9b:1c:11:00:ad:28:ad:7e:b9:57:dd:7b:76:f3:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:93:77:7A:04:19:95:FE:EA:C6:6E:9A:67:5D:20:8C:41:96:09:A9
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e3132372e36342e302f31382d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:50:85:07:f7:58:c3:0e:23:14:30:14:6a:4e:ba:b2:1f:4a:
         00:95:ab:3b:c1:45:79:ee:a3:7f:db:70:94:8f:95:ce:ec:bf:
         46:b8:9f:32:1c:78:7b:49:08:1e:8a:6d:0d:17:3c:9d:81:dd:
         e5:e4:ef:e4:99:d8:1c:38:97:08:77:3e:ee:e5:3f:8a:09:e9:
         98:dc:37:16:b4:47:92:5a:0b:1e:dc:5e:6d:e0:6e:7b:b8:de:
         fe:b6:66:b3:e7:0d:9a:ba:dc:22:85:f1:3a:1e:68:a6:b8:d8:
         bb:2f:68:a8:52:c1:70:f8:96:65:7a:9c:54:56:23:e0:35:e8:
         20:c4:80:56:58:a8:f4:6e:ac:e3:64:9e:70:30:22:f0:0c:bf:
         fb:ce:e0:85:34:3b:de:55:be:dd:97:bc:e1:dc:23:1d:4f:03:
         7d:54:4c:30:c4:82:14:26:da:a9:40:91:e6:3a:ad:49:d2:bd:
         ab:c0:3c:a5:dd:a6:2f:3b:88:59:a3:7c:40:e3:27:9f:e9:c0:
         6b:a5:84:06:c7:bb:3d:91:7b:f7:74:cd:5d:5a:85:1b:7a:8b:
         fc:af:bb:58:4b:9a:75:87:be:42:46:ab:ca:21:86:fc:6a:f1:
         8c:75:f3:94:98:a2:c7:35:9b:92:b2:e1:f6:10:66:31:8f:ad:
         f4:5a:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:58:33 2025 by rpki-client