Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32322d3232203d3e20323634313830.roa
File:                     3133382e39342e3136342e302f32322d3232203d3e20323634313830.roa (raw, json)
Hash identifier:          DNmTuRI1l2PNlq++mC6U57p3Qs3kJ5IOxAB8iLaXz14=
Subject key identifier:   A9:36:78:B3:DA:05:C6:08:13:43:63:F6:F0:6C:35:14:B9:44:C1:BB
Certificate issuer:       /CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
Certificate serial:       2D7413B9DAC40A6847BB94DBD2DCF918204BC417
Authority key identifier: 98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32322d3232203d3e20323634313830.roa
Signing time:             Tue 21 Jan 2025 16:45:26 +0000
ROA not before:           Tue 21 Jan 2025 16:40:26 +0000
ROA not after:            Tue 20 Jan 2026 16:45:26 +0000
asID:                     264180
IP address blocks:        138.94.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.crl
                          rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:74:13:b9:da:c4:0a:68:47:bb:94:db:d2:dc:f9:18:20:4b:c4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
        Validity
            Not Before: Jan 21 16:40:26 2025 GMT
            Not After : Jan 20 16:45:26 2026 GMT
        Subject: CN=A93678B3DA05C608134363F6F06C3514B944C1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:e5:e5:46:e6:fa:e5:1b:45:ea:13:2a:32:
                    b4:19:dc:be:fa:28:72:4a:de:56:09:a5:b8:0b:a3:
                    13:9a:29:16:55:5b:da:c1:96:2d:20:3f:56:73:08:
                    a5:29:69:e5:ad:0a:8a:db:d8:30:f2:ac:ab:50:35:
                    7d:98:4a:94:c7:cc:90:dc:60:01:89:af:e2:ec:a9:
                    f5:8b:39:a0:da:c3:74:5e:8a:91:fd:0b:42:be:dd:
                    75:eb:81:f2:73:5b:9a:32:c7:fc:bc:f3:c0:6a:e2:
                    af:36:dc:55:ab:57:cc:2e:54:4a:4d:7b:9f:02:48:
                    1e:99:76:b5:a5:06:1a:54:bb:06:42:42:80:5d:69:
                    14:69:69:fb:8d:6e:d1:fe:58:2f:e6:88:88:fb:56:
                    b0:a5:f1:04:1a:fc:57:6a:11:93:b9:31:a2:9a:41:
                    5f:4f:ed:64:59:b2:d1:d4:e9:4e:2e:0d:71:c7:30:
                    56:0f:48:d6:cb:16:f9:ad:5f:9c:03:3b:3c:41:59:
                    3f:a4:f9:7c:a2:7b:de:1b:8f:27:f1:d9:64:57:ed:
                    a7:e6:6c:ef:1c:26:5b:be:cd:7f:19:7e:17:16:1b:
                    83:bf:ce:96:06:9e:14:d1:97:4e:01:33:70:81:c7:
                    92:06:9e:ae:6d:30:93:db:21:4b:eb:f1:8e:f0:28:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:36:78:B3:DA:05:C6:08:13:43:63:F6:F0:6C:35:14:B9:44:C1:BB
            X509v3 Authority Key Identifier:
                keyid:98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32322d3232203d3e20323634313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c6:42:73:4e:39:1f:6d:ae:c8:5d:b9:4f:bb:29:b1:ce:ad:
         43:e5:c4:04:4c:17:df:d7:9d:65:3a:bc:d4:4b:57:45:52:65:
         5f:1d:45:b6:5b:34:51:21:b1:99:a7:c3:1d:a1:ca:90:28:b0:
         d6:29:a5:07:a2:a2:24:7d:ec:a1:ec:a4:8e:de:56:4f:2a:94:
         59:77:31:02:87:18:bf:72:2f:c7:2d:2b:e7:a4:70:94:b7:79:
         b9:c9:28:72:a1:a6:ff:01:43:45:a2:b7:6a:34:55:5d:b3:ee:
         45:cc:86:72:db:b7:01:db:70:87:c8:f8:3d:bd:91:e1:c9:dc:
         9c:ec:1e:87:8f:41:c6:64:13:98:dc:8b:3f:45:c2:42:94:b9:
         17:01:09:3f:b0:e9:42:5b:a4:e9:0f:2f:db:cd:7e:73:a7:ad:
         0b:46:4d:4c:20:7b:5e:51:81:93:8d:2a:35:e5:ba:2c:56:fe:
         16:0f:22:4e:03:7e:f7:bd:eb:95:5e:bd:36:8a:6b:2c:fa:b2:
         e5:ee:d2:d3:45:73:5d:5b:83:94:28:52:f1:44:2a:67:9a:0b:
         2f:24:10:bc:c4:20:b0:b3:68:8e:4b:93:5e:ad:17:cf:2b:3b:
         ef:0c:05:b6:9b:3a:fb:ce:5f:76:40:2f:7a:a0:e7:84:89:48:
         ef:e9:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:46:38 2025 by rpki-client