Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          9AOgP+yaJyh3yEDw7PFI319zeFk86CLgh8l3HWNXLTQ=
Subject key identifier:   B4:3C:02:38:F3:E3:B5:44:99:BC:52:0A:64:F3:22:F6:7A:6D:68:7A
Certificate issuer:       /CN=612546079777C83995107BFA129E54CE43A50026
Certificate serial:       4D69B6A17A36FED97D7ED2F8B1B28AE4F60B405F
Authority key identifier: 61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 04 Jun 2025 13:21:56 +0000
ROA not before:           Wed 04 Jun 2025 13:16:56 +0000
ROA not after:            Wed 03 Jun 2026 13:21:56 +0000
asID:                     263887
IP address blocks:        138.204.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:b6:a1:7a:36:fe:d9:7d:7e:d2:f8:b1:b2:8a:e4:f6:0b:40:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612546079777C83995107BFA129E54CE43A50026
        Validity
            Not Before: Jun  4 13:16:56 2025 GMT
            Not After : Jun  3 13:21:56 2026 GMT
        Subject: CN=B43C0238F3E3B54499BC520A64F322F67A6D687A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:e7:ce:00:f9:df:fd:52:d8:96:35:ea:08:
                    81:95:c5:93:10:7d:db:71:e0:d0:13:ca:02:d4:d2:
                    63:e8:e6:85:1c:3e:0d:f1:8c:c1:90:0d:86:a7:c6:
                    b3:47:0a:25:d3:20:76:3d:18:92:c6:b1:a6:00:b8:
                    a8:67:90:4a:c6:4d:2c:54:b2:93:03:37:cc:d2:07:
                    3b:25:86:fa:b7:e3:a9:e1:7c:da:74:15:f1:bf:53:
                    99:50:f4:4a:5f:51:dd:16:e7:88:d3:9c:fd:e6:c3:
                    50:05:eb:3e:37:fe:34:dc:e2:1a:a6:4d:ac:fd:75:
                    13:04:62:ab:e1:e3:d1:81:55:f4:88:0b:17:77:25:
                    c1:e6:9f:20:b3:5e:4f:81:45:a4:8f:91:8b:f7:9a:
                    c7:90:98:27:1f:3a:4a:ba:f3:e3:bf:8e:b8:2b:d9:
                    22:c1:03:0d:71:23:ed:f8:17:d1:3c:9c:89:78:0b:
                    e5:d5:36:12:58:16:12:c8:bc:41:9c:b4:e5:ba:49:
                    98:d8:53:be:9d:cb:40:29:be:f1:12:cb:2a:96:24:
                    2b:ea:38:62:e0:bc:b4:74:10:20:57:c1:0b:21:9a:
                    de:b3:8f:0c:8e:72:96:2a:25:9e:bf:40:fa:9d:02:
                    3c:a9:06:9f:b0:1f:99:45:5d:2d:bf:a0:5c:17:02:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:02:38:F3:E3:B5:44:99:BC:52:0A:64:F3:22:F6:7A:6D:68:7A
            X509v3 Authority Key Identifier:
                keyid:61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ef:fd:bc:39:de:14:48:4b:67:62:d8:2f:e3:01:86:e8:3e:
         b5:72:37:45:50:81:b8:24:1e:03:b8:b1:87:d4:12:3a:bf:dd:
         8b:84:07:0a:7f:0c:91:03:81:06:bb:3b:93:4f:14:25:35:7d:
         2c:7c:2d:7f:71:40:fb:fb:ee:87:66:d2:9c:9e:8b:6a:bb:c7:
         e0:66:df:d9:49:69:35:8f:af:4c:d4:30:74:9a:fc:ef:da:19:
         99:33:ce:d8:e1:f9:1d:6b:36:56:6c:b3:07:ec:eb:02:ee:c8:
         85:f7:18:a7:75:c2:5e:b0:ac:c4:9b:0e:5e:f2:e8:08:38:df:
         18:75:e6:30:7c:f3:c9:55:7d:32:80:1b:49:f3:be:f6:44:9f:
         50:8c:10:b3:fb:47:5b:c9:fa:07:cf:42:b9:9d:77:38:43:f3:
         a5:e7:17:11:e1:ed:7f:90:a0:ec:73:b3:26:ea:4c:10:6d:06:
         bd:8c:c6:8d:d5:54:38:67:d9:34:94:d4:14:6e:10:98:67:08:
         1c:03:5f:f9:3e:dc:05:ad:50:b0:b0:a6:0b:4d:e5:06:85:6e:
         c0:37:63:e8:f7:fe:46:b4:22:25:74:a8:d2:72:e3:76:ad:fe:
         5d:15:9b:03:87:6b:7a:06:4f:d8:53:e7:10:25:a6:84:2b:55:
         f5:b5:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:49 2025 by rpki-client