Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          QYTF92fbCNTVsjvg5ai31LW8ATdruZjqS14c7ecbVrs=
Subject key identifier:   CC:B7:CD:5A:4D:AE:EC:63:F0:73:88:B8:74:4E:D8:59:38:0B:3A:6E
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       6EAA8CA8F0DD9DC4B2CCD8728DCAD847861883E5
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:45 +0000
ROA not before:           Tue 27 May 2025 20:29:45 +0000
ROA not after:            Tue 26 May 2026 20:34:45 +0000
asID:                     263920
IP address blocks:        138.185.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:aa:8c:a8:f0:dd:9d:c4:b2:cc:d8:72:8d:ca:d8:47:86:18:83:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:45 2025 GMT
            Not After : May 26 20:34:45 2026 GMT
        Subject: CN=CCB7CD5A4DAEEC63F07388B8744ED859380B3A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:77:ea:bb:88:9a:3e:d0:24:8a:c1:95:f3:
                    b7:47:a5:2b:9a:e2:93:44:b2:59:30:5e:de:9f:57:
                    ed:6c:1c:11:59:ec:b4:f7:6e:da:11:1d:da:1b:82:
                    a0:ae:8d:19:f7:ea:14:bd:2d:54:2c:36:94:e6:23:
                    8b:87:59:6f:7d:f0:51:3e:14:2a:04:4d:f0:8d:9b:
                    53:13:06:f0:cd:22:4d:b4:b0:24:23:70:25:8d:a3:
                    15:ef:f1:32:dc:0c:30:46:86:9d:a1:6a:77:9d:30:
                    ee:99:b8:1c:b7:92:4b:73:32:2e:6c:c2:d7:73:d1:
                    51:51:4e:83:a1:0c:69:99:70:d3:67:22:88:c5:49:
                    4a:17:1a:d3:9c:59:94:6d:ea:38:5a:51:bd:24:bd:
                    60:91:a8:1f:c0:0d:f9:0b:e2:fd:54:79:c6:11:a6:
                    7f:b5:95:1a:c2:24:f5:c2:64:c8:71:32:8c:15:1c:
                    16:8f:5f:af:d9:1d:0a:4f:19:60:19:c4:5d:05:15:
                    fd:cc:36:b2:96:39:42:2d:48:0c:e1:49:fc:57:9b:
                    02:6f:a5:3f:98:fe:9e:b3:c1:e0:aa:98:c5:40:1c:
                    67:a9:66:67:7b:0f:01:81:f9:de:dc:03:bc:09:51:
                    97:4a:84:c5:4b:ea:f0:89:35:89:12:82:08:2c:0c:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:CD:5A:4D:AE:EC:63:F0:73:88:B8:74:4E:D8:59:38:0B:3A:6E
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:b0:09:10:f9:b2:65:49:fb:60:25:cd:38:1c:df:4a:eb:
         c4:fc:2b:fd:3e:db:35:ca:b9:13:76:6e:11:06:7d:e1:40:01:
         f7:38:37:f4:9b:db:f0:ff:3f:5c:bf:fe:9c:6c:be:88:f8:d9:
         be:fc:99:8b:cf:96:8f:4a:bd:97:eb:83:50:b5:22:64:d9:13:
         1a:55:47:fe:f6:a4:fb:df:b8:27:90:a9:07:52:5b:0b:e4:c7:
         0e:89:7d:b8:23:ea:dc:b1:2b:b9:be:8c:87:e3:8f:b1:26:09:
         06:85:c9:3d:51:bb:b1:5d:b4:ba:5b:d4:75:cc:83:bc:1e:70:
         2c:79:55:d6:b3:32:1d:ac:73:9f:45:4e:d6:4f:9b:15:68:38:
         56:b0:87:cf:38:fd:63:5d:00:75:35:81:8a:60:98:4e:31:25:
         0b:75:8b:98:95:c0:08:b6:f7:a0:63:75:11:fb:f9:36:3c:a6:
         84:ee:16:6e:d7:1e:a0:79:f6:16:ac:90:f8:5b:39:ca:e5:9f:
         a0:90:d1:21:3c:00:f2:9a:d7:38:7d:bb:1a:7f:49:ef:ba:d7:
         5c:fd:3d:fc:7c:d1:db:23:d8:3d:40:03:44:4f:fa:b7:b0:4e:
         a8:42:a3:bf:94:d0:c2:84:73:9c:e9:85:0a:e0:8b:11:75:c3:
         d1:64:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:19:59 2025 by rpki-client