Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          hkr5733TIPwJUfp29mS4lKyGuM1XMixClVUiS0HyQks=
Subject key identifier:   20:6D:6B:2C:91:4A:AF:EB:DA:EE:16:3D:E9:08:B9:2A:A8:A6:F9:C2
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       3C8B706133420428ABE6DA823C493E4A71445786
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa
Signing time:             Wed 12 Mar 2025 13:08:34 +0000
ROA not before:           Wed 12 Mar 2025 13:03:34 +0000
ROA not after:            Wed 11 Mar 2026 13:08:34 +0000
asID:                     262828
IP address blocks:        186.251.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8b:70:61:33:42:04:28:ab:e6:da:82:3c:49:3e:4a:71:44:57:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 12 13:03:34 2025 GMT
            Not After : Mar 11 13:08:34 2026 GMT
        Subject: CN=206D6B2C914AAFEBDAEE163DE908B92AA8A6F9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:94:94:fb:7f:d6:b8:19:04:32:f3:57:4c:
                    e3:73:ea:b5:65:a0:1b:8a:24:0f:02:47:a4:44:de:
                    ea:f2:34:aa:5d:09:e1:d8:db:c1:c6:3e:61:63:89:
                    7d:71:46:d4:7f:41:83:31:70:5b:34:6c:a9:0e:5c:
                    7a:d8:14:8a:8d:04:b7:27:91:03:f9:52:fe:dc:a0:
                    f9:1d:4c:8b:0d:0f:93:f3:19:b2:37:c5:f6:d5:31:
                    20:74:79:ce:e2:f5:ee:cc:e2:04:a3:35:79:38:2c:
                    d5:a7:59:e4:89:3e:e9:25:24:3f:32:63:8d:7f:00:
                    c5:ac:ef:12:65:1e:96:4c:e9:f4:4d:a7:6e:85:b8:
                    39:35:ff:03:1e:bc:eb:1c:53:b7:32:70:b8:40:b7:
                    89:3a:39:b0:41:e2:3a:40:d7:d3:1b:85:8b:1c:36:
                    65:9c:ce:06:dc:33:78:26:9f:6a:81:ed:e1:ff:a5:
                    e3:da:27:b9:a2:fd:de:8a:f4:31:b8:19:84:b1:d8:
                    ea:81:3c:28:b7:da:89:31:e4:15:d5:db:46:ad:41:
                    a7:36:d9:22:f4:8e:d1:0c:6e:a3:67:dc:ac:a9:cb:
                    d2:f4:81:69:bc:d3:d8:4a:8b:90:76:34:80:6f:3b:
                    72:60:41:93:8a:56:ae:f6:d4:f3:2f:0a:36:3c:d6:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6D:6B:2C:91:4A:AF:EB:DA:EE:16:3D:E9:08:B9:2A:A8:A6:F9:C2
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:ba:68:a3:ea:a6:03:90:1d:7b:d6:61:a2:3f:17:33:8e:
         47:70:15:9a:c8:ba:89:2e:e2:48:aa:e9:f2:16:d2:0f:59:ae:
         3f:36:e2:8f:77:36:1d:f5:10:42:ab:ec:95:95:bb:4c:80:82:
         68:b8:ac:c5:7c:13:24:8e:15:d7:3b:5e:78:38:d3:35:aa:51:
         36:4f:1c:d8:2c:0b:4c:a0:bf:0d:42:ab:9a:64:ba:2a:04:bc:
         de:6a:67:3e:91:e2:b9:f4:5e:fb:86:9e:66:59:91:44:97:51:
         5f:5c:3a:12:ec:ca:e6:1d:2e:aa:68:6f:e1:12:4a:b4:b4:74:
         b3:ff:d3:78:49:dd:b8:c0:0b:29:72:3d:b9:63:cc:4b:6b:d6:
         69:b5:d3:8d:1b:66:2a:cf:5f:e5:e4:e4:b9:ed:53:15:a0:55:
         b6:9a:bd:f3:f3:01:79:70:c9:9a:97:8f:3d:8a:57:23:e4:63:
         d3:2a:0b:f0:3e:4b:f7:ce:0b:5a:f6:28:b9:a7:11:9d:30:f0:
         fb:1d:1d:f3:e9:83:14:8c:42:e2:6f:8e:da:97:77:05:37:e0:
         c5:8c:70:fa:3e:19:8b:41:56:7b:1a:61:53:03:1c:44:8e:98:
         a5:e4:af:51:9b:ac:d7:8b:01:59:be:62:3c:ba:3c:c7:50:a2:
         4f:06:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:18 2025 by rpki-client