Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130302e3134382e302f32322d3232203d3e20323733363833.roa
File:                     3133312e3130302e3134382e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          6p4ups+TAY0a5G/r1QlcYGXUGRvUTMBIFTGU2WHVaG8=
Subject key identifier:   1B:85:F9:3A:42:E4:E8:57:33:31:7F:EC:C8:0A:60:3B:BD:CD:74:7E
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       071EC5A0947200E4F10484FC2A0D1DBB54790F5E
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130302e3134382e302f32322d3232203d3e20323733363833.roa
Signing time:             Tue 19 Nov 2024 07:33:23 +0000
ROA not before:           Tue 19 Nov 2024 07:28:23 +0000
ROA not after:            Tue 18 Nov 2025 07:33:23 +0000
asID:                     273683
IP address blocks:        131.100.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1e:c5:a0:94:72:00:e4:f1:04:84:fc:2a:0d:1d:bb:54:79:0f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 19 07:28:23 2024 GMT
            Not After : Nov 18 07:33:23 2025 GMT
        Subject: CN=1B85F93A42E4E85733317FECC80A603BBDCD747E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:55:83:e0:fc:e9:d5:9c:44:67:2e:c0:31:
                    9c:48:bd:d7:60:8a:41:1d:d8:81:90:2f:9e:73:14:
                    32:33:32:d0:a4:82:63:e1:4d:d1:9c:ec:89:27:16:
                    64:dd:50:63:48:03:c6:2a:d1:4b:e2:7f:55:a9:7a:
                    3b:0b:09:e9:ef:dc:75:b9:d3:0a:6c:fa:18:11:b9:
                    7a:c2:d5:c7:a7:86:92:32:04:e3:97:63:a0:72:ce:
                    8e:cb:b7:1a:9c:ac:ec:15:62:96:04:4d:1a:a3:76:
                    9f:c9:ae:2f:4b:4e:18:a9:cb:39:bd:eb:4c:0e:f7:
                    7b:da:23:3b:59:95:84:55:1a:69:b2:85:35:f0:dd:
                    cb:66:a5:2f:6c:cd:65:ed:00:5c:c3:be:bd:34:c8:
                    d0:14:1a:a6:56:5d:5e:b4:15:02:49:17:94:8b:5e:
                    71:c0:e2:5f:5d:fb:bb:c4:e2:9f:49:5a:87:d1:7d:
                    5d:2f:6a:a9:78:29:e6:18:d0:bd:e1:f0:02:4d:15:
                    00:44:29:0c:ed:66:51:a5:89:0c:bd:df:ac:7e:61:
                    70:7a:a0:d7:e6:85:32:c4:e2:5a:b6:7b:4d:e1:0f:
                    e1:ba:f0:15:a1:0e:08:5f:8f:70:fc:11:0c:b9:77:
                    37:80:1f:3f:6d:05:a0:20:81:ef:84:82:e8:5f:bc:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:F9:3A:42:E4:E8:57:33:31:7F:EC:C8:0A:60:3B:BD:CD:74:7E
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133312e3130302e3134382e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:2b:12:81:14:6b:5d:86:f5:46:85:6c:40:79:64:a9:cd:
         dd:24:73:aa:8f:61:92:d7:bc:5d:4f:be:be:d3:56:3e:46:e4:
         e3:58:b0:51:8a:4a:07:5c:fc:16:11:87:d3:19:f6:a8:af:22:
         27:0a:8c:78:98:42:da:a5:c7:a5:3b:eb:dc:e5:d6:d3:4b:b0:
         d2:81:a7:cc:e7:0c:21:67:b4:76:bd:bf:94:de:2f:88:3d:7b:
         fa:33:06:de:22:bb:de:f6:d5:c0:4b:24:5a:9c:06:65:07:58:
         ba:2c:62:e2:fa:c7:4b:48:f4:55:83:f7:c0:5d:70:db:25:bd:
         67:cd:54:b9:80:84:29:ce:3a:f7:c8:4f:a4:2c:2a:b6:8f:19:
         3d:fb:37:5d:44:91:7f:83:3c:e6:69:3b:c7:33:78:9f:2f:54:
         dd:43:b4:15:de:a7:af:c7:d3:8f:8a:62:6d:8c:c2:72:d5:b7:
         c7:38:b5:b6:ed:15:a1:40:61:8b:3c:cf:07:3c:a0:42:b1:2b:
         67:02:2e:0c:c5:ab:c0:fb:f4:fb:0d:48:7f:74:db:8f:49:f1:
         2b:de:6f:5a:82:e5:63:f2:fc:e7:9c:13:36:f0:5a:00:cc:de:
         f1:2b:c1:13:a3:99:3d:cf:4e:8e:60:1c:7c:63:1e:34:b5:05:
         bf:09:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:39:47 2025 by rpki-client