Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e33362e3136302e302f31392d3332203d3e203232333831.roa
File:                     3138392e33362e3136302e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier:          lqE94S+dilxaSI7qZZTLQTDFsp3/EdwmNIOB/ommXfM=
Subject key identifier:   0C:BC:CB:D1:59:08:11:22:30:9A:59:71:9F:4F:4E:DD:79:CC:D6:15
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       039BCF2AF13D78976898DE8085D8B551E56F9A49
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e33362e3136302e302f31392d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 20:09:51 +0000
ROA not before:           Fri 07 Mar 2025 20:04:51 +0000
ROA not after:            Fri 06 Mar 2026 20:09:51 +0000
asID:                     22381
IP address blocks:        189.36.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9b:cf:2a:f1:3d:78:97:68:98:de:80:85:d8:b5:51:e5:6f:9a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 20:04:51 2025 GMT
            Not After : Mar  6 20:09:51 2026 GMT
        Subject: CN=0CBCCBD159081122309A59719F4F4EDD79CCD615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:07:4a:8c:ec:f1:71:4a:e3:32:9f:10:3e:
                    44:f2:97:55:be:90:76:d3:77:e2:ae:1d:99:f6:2f:
                    34:dc:44:69:cc:e8:bd:f7:5f:d5:7f:b1:95:76:38:
                    03:e1:35:36:76:81:a1:11:3e:18:13:ee:70:15:25:
                    9d:87:97:d7:cd:17:a7:5a:d6:d4:07:40:59:38:e2:
                    ef:12:42:43:30:b4:7a:57:53:37:ef:74:e5:53:ee:
                    34:4a:0f:73:f0:e4:fb:da:a5:ed:24:5d:86:37:73:
                    23:e9:ac:f5:c0:1d:49:a1:51:29:75:eb:90:51:74:
                    ea:62:c7:bd:5e:7c:d5:ae:f8:e2:cf:a4:8f:33:75:
                    57:c9:c1:e2:27:c3:8d:f1:71:21:c7:32:85:7b:a0:
                    23:ca:9f:72:92:20:c0:df:b9:93:30:ea:f7:29:a8:
                    e0:4b:11:2c:4f:d0:85:f7:25:54:f3:0c:b6:52:2e:
                    fe:94:43:20:76:54:a6:78:e0:4b:bb:44:26:5d:11:
                    f8:ff:f0:e7:97:48:11:e8:82:1c:be:5d:c3:64:d2:
                    8e:59:7f:fd:73:ae:3b:fa:34:6f:a6:ca:a0:e3:5e:
                    6f:c8:24:83:22:82:1b:92:b9:50:fa:69:5d:92:8b:
                    fb:b8:42:d3:d0:45:19:8f:17:10:6d:a2:00:4f:1b:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BC:CB:D1:59:08:11:22:30:9A:59:71:9F:4F:4E:DD:79:CC:D6:15
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e33362e3136302e302f31392d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:12:aa:03:2b:36:c9:24:4e:07:e0:34:2a:5d:7a:3b:a2:a5:
         eb:c6:f4:c6:52:26:df:0e:40:ab:a5:98:2c:2f:93:83:b1:06:
         ae:58:77:64:a4:fe:c2:4f:66:6b:a2:2b:40:3c:5c:6c:f0:17:
         6f:b6:9c:6b:58:f1:df:7f:34:f3:e9:35:ed:cc:b9:0f:65:9b:
         b7:f0:e0:bb:40:46:1b:08:5b:da:38:93:86:bb:94:1d:9c:73:
         2d:6e:e1:ff:c2:33:fc:58:db:5f:2a:5b:db:48:8a:3f:f8:0a:
         27:0d:c5:4c:03:ef:c2:d8:c5:f2:14:f2:b4:14:56:29:d0:0f:
         8c:98:d6:56:55:9b:24:a0:ea:d1:f9:e7:d0:25:58:59:9a:ed:
         78:6d:b4:ad:da:ed:7b:99:a7:43:86:27:e8:84:89:3c:af:37:
         92:70:cd:35:5b:71:bf:90:03:a0:0d:91:86:e1:f4:50:7b:0d:
         39:cd:74:b7:5e:b0:c2:2c:95:82:ca:fa:9a:c3:11:1d:95:29:
         a5:24:2d:20:b7:d5:38:8d:e9:e8:30:a3:3c:29:c7:06:21:64:
         aa:a9:27:91:4a:0b:19:a2:5c:d2:a1:a2:96:be:f1:68:6f:d6:
         bc:35:2b:8a:1f:b5:51:98:b0:80:14:d1:6b:bd:5c:13:9a:a1:
         d1:ca:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:15:23 2025 by rpki-client