Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e35312e3232342e302f31392d3332203d3e203232333831.roa
File:                     3138392e35312e3232342e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier:          qF4SeU4mwR1DB6+xA2tvPot4jkpt2APLslWSW3DLstA=
Subject key identifier:   DE:09:E4:87:82:1D:77:97:96:1A:79:63:7B:D9:69:54:51:E2:86:D5
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       4F798B1F8DD216A14723A5319FAE232B2B8D22D0
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e35312e3232342e302f31392d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 20:10:02 +0000
ROA not before:           Fri 07 Mar 2025 20:05:02 +0000
ROA not after:            Fri 06 Mar 2026 20:10:02 +0000
asID:                     22381
IP address blocks:        189.51.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:79:8b:1f:8d:d2:16:a1:47:23:a5:31:9f:ae:23:2b:2b:8d:22:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 20:05:02 2025 GMT
            Not After : Mar  6 20:10:02 2026 GMT
        Subject: CN=DE09E487821D7797961A79637BD9695451E286D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:85:27:6c:c9:ed:d3:e4:0c:ca:2c:f4:96:
                    ee:f5:73:5f:f3:cf:3e:a3:1e:0f:41:38:74:cd:0c:
                    50:ef:f4:e2:34:ce:b6:cc:80:7a:0d:21:e3:c0:30:
                    4e:dd:f6:c1:1f:cb:86:15:fe:4d:18:33:dd:68:d0:
                    d9:33:a5:26:94:10:7e:02:39:18:c2:89:fb:ca:49:
                    b5:c7:84:7c:bd:95:63:54:80:f9:26:bf:b8:eb:c0:
                    24:7c:aa:84:97:14:f8:dd:cf:15:9a:f0:73:d0:96:
                    f9:b8:d5:97:fe:e1:d5:8a:28:0a:60:43:c1:ad:a1:
                    b8:01:8c:65:7d:50:76:ef:3a:c6:ad:b4:75:0a:e2:
                    bd:e8:58:2b:fd:35:90:d8:6d:18:3a:cd:7d:1f:bc:
                    38:4e:82:4c:24:dd:18:e2:64:03:cd:50:fc:01:7e:
                    2e:47:70:c2:bf:76:ac:29:a2:28:ad:43:cd:96:2b:
                    76:0f:42:1f:62:63:6e:e2:bb:20:e5:b7:e8:15:4d:
                    c2:42:a9:68:12:76:68:08:f3:75:31:8b:a3:28:93:
                    9d:db:12:a0:ee:b5:8b:38:9b:d4:fe:50:78:2f:47:
                    9c:09:53:fc:f0:83:a8:98:1c:74:e8:99:58:17:47:
                    84:be:2c:2a:b9:22:28:28:d9:45:70:3e:e6:49:e7:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:E4:87:82:1D:77:97:96:1A:79:63:7B:D9:69:54:51:E2:86:D5
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e35312e3232342e302f31392d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:78:be:6b:4f:41:29:fb:5a:3e:07:b1:ad:8f:a9:1b:df:
         4b:b8:97:20:e5:1b:bd:7b:8f:3f:a1:47:f3:bb:6f:9f:e5:b7:
         66:9e:ac:0c:01:40:01:66:cc:b5:92:dd:24:5e:cb:ea:28:b8:
         93:cb:ae:13:54:5c:02:df:d6:eb:82:50:75:d8:50:8c:19:e6:
         7f:8b:6b:a9:87:22:b2:bc:36:f5:87:88:2f:f4:17:b7:a2:68:
         0c:d5:52:bb:99:d4:10:18:47:56:86:1a:de:cd:ab:bb:97:30:
         0e:93:2d:1c:1f:02:79:2d:f9:19:35:72:bf:f1:62:06:33:06:
         0c:f4:a2:55:18:01:9c:a1:2a:ae:98:27:05:15:ba:60:6c:7f:
         c0:a0:0a:cd:82:1d:1f:86:34:44:77:64:66:b9:5e:a6:0c:68:
         5d:08:95:21:f0:64:b7:93:35:43:d7:33:50:44:1a:8f:2d:94:
         bf:d4:47:32:ea:21:bd:69:85:44:bb:e8:37:cd:34:a8:43:9d:
         33:25:6c:77:c4:e5:4d:8d:2f:30:fa:c0:ba:9f:40:e0:73:96:
         68:19:9b:24:3b:b5:2c:aa:1e:ed:4c:97:1e:a6:75:d9:a5:30:
         8d:c8:8d:e1:1a:19:bf:b1:e6:d0:12:d7:50:00:dd:bb:ef:e5:
         38:ea:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:07:38 2025 by rpki-client