Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/3133382e33362e34302e302f32322d3332203d3e20323634353730.roa
File:                     3133382e33362e34302e302f32322d3332203d3e20323634353730.roa (raw, json)
Hash identifier:          6uyXJwqSocVbcKC/bl8XV7C+nbLVKfvfsGI1iFqYtow=
Subject key identifier:   A3:09:5C:55:47:61:8D:FF:6E:5D:57:5D:7E:D3:5A:E3:2D:2C:01:22
Certificate issuer:       /CN=7A105C6DEE41508A10CDA040ABF8B86CE1683847
Certificate serial:       08F802E53A3B3A28CD663E782E08D1D432613A78
Authority key identifier: 7A:10:5C:6D:EE:41:50:8A:10:CD:A0:40:AB:F8:B8:6C:E1:68:38:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A105C6DEE41508A10CDA040ABF8B86CE1683847.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/3133382e33362e34302e302f32322d3332203d3e20323634353730.roa
Signing time:             Fri 03 May 2024 21:35:20 +0000
ROA not before:           Fri 03 May 2024 21:30:20 +0000
ROA not after:            Fri 02 May 2025 21:35:20 +0000
asID:                     264570
IP address blocks:        138.36.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/7A105C6DEE41508A10CDA040ABF8B86CE1683847.crl
                          rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/7A105C6DEE41508A10CDA040ABF8B86CE1683847.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A105C6DEE41508A10CDA040ABF8B86CE1683847.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 14:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f8:02:e5:3a:3b:3a:28:cd:66:3e:78:2e:08:d1:d4:32:61:3a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A105C6DEE41508A10CDA040ABF8B86CE1683847
        Validity
            Not Before: May  3 21:30:20 2024 GMT
            Not After : May  2 21:35:20 2025 GMT
        Subject: CN=A3095C5547618DFF6E5D575D7ED35AE32D2C0122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:82:cf:34:3b:6d:51:f4:68:78:ad:28:df:
                    aa:38:20:6e:0b:a2:f2:21:47:72:3d:93:d7:67:2e:
                    71:5c:a7:c2:23:f5:3f:03:8d:f0:a9:21:23:93:d7:
                    79:25:28:6a:5c:ff:c5:cb:2b:40:cb:40:9d:13:2d:
                    49:b8:12:67:d3:dc:be:74:a7:19:6c:d5:91:06:65:
                    ba:68:75:27:54:f8:3d:ec:59:e8:3c:2e:83:61:bf:
                    4d:88:2d:86:ff:77:73:54:f6:39:aa:c4:c2:2a:de:
                    49:8b:84:3c:da:95:99:0e:a0:d3:b9:f1:37:8b:51:
                    bc:eb:90:27:ec:a2:14:0b:b4:97:21:c1:38:11:c5:
                    75:8f:19:3a:d5:c0:ff:d5:b1:cd:b6:3d:07:1b:b6:
                    e6:2b:dc:19:ae:99:2e:83:70:67:b3:46:7d:bd:a3:
                    8f:c5:6d:fa:81:71:09:9f:41:26:94:66:81:c2:5a:
                    31:f3:47:f9:a3:10:d7:2d:3d:66:10:fb:d6:1d:94:
                    10:fd:11:37:65:7c:50:a9:d3:06:08:70:1c:3a:f0:
                    8d:b8:a7:1b:3d:2f:85:c6:2b:0a:53:40:b0:7f:64:
                    d8:f0:f7:1b:44:e4:c3:5d:26:ae:ca:f4:30:83:6d:
                    22:27:8a:23:0c:e3:51:9e:84:43:c2:f0:c7:8a:59:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:5C:55:47:61:8D:FF:6E:5D:57:5D:7E:D3:5A:E3:2D:2C:01:22
            X509v3 Authority Key Identifier:
                keyid:7A:10:5C:6D:EE:41:50:8A:10:CD:A0:40:AB:F8:B8:6C:E1:68:38:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/7A105C6DEE41508A10CDA040ABF8B86CE1683847.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A105C6DEE41508A10CDA040ABF8B86CE1683847.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/3133382e33362e34302e302f32322d3332203d3e20323634353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:58:28:1d:8c:85:fa:18:92:9f:0e:0b:97:a6:de:94:f4:
         88:63:84:24:62:eb:d8:3f:c4:0b:62:42:d2:fe:d2:f8:ab:97:
         cc:a5:43:78:24:77:df:6d:43:91:65:d2:b1:c3:dc:00:01:70:
         ee:49:b0:ed:d5:d9:b4:b8:ba:5d:da:7e:f2:b0:4c:36:8f:8e:
         ee:a2:33:ea:70:c5:23:0d:f4:d5:0d:00:13:00:ef:01:7d:c9:
         fa:9d:55:79:a9:56:a8:57:fd:3d:3f:7e:65:03:17:65:72:e4:
         41:56:d8:2f:5a:6a:96:cd:fe:e2:91:c5:80:96:08:a6:03:b9:
         92:d6:6c:0f:d8:6e:05:c8:35:9c:6f:41:8a:c6:42:f5:1e:07:
         74:36:bc:ff:67:2d:f6:ce:1d:14:b9:69:24:d9:f4:0b:1a:98:
         49:bb:0c:c3:fd:f9:da:df:11:e9:0d:ea:fb:6e:3b:70:46:d2:
         41:26:7e:b2:63:55:08:89:f5:5e:fd:33:22:db:03:fb:f7:f5:
         5f:c5:20:fb:87:d3:0c:4c:76:b3:9b:72:c4:2c:66:20:3d:14:
         69:16:f6:0a:ef:c4:cf:90:76:42:ca:e8:11:02:e9:bf:d7:2c:
         b1:12:9e:d9:ab:39:97:aa:d5:80:72:7e:0c:8a:51:e6:8d:fe:
         91:f2:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:49:06 2025 by rpki-client