Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa
File:                     3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa (raw, json)
Hash identifier:          lPJjLuVhTZVFYU/7NggN4Bbgbr0hkUVqfLVrE0WH4FI=
Subject key identifier:   46:FD:1B:19:3C:4B:21:79:44:3D:BB:D6:94:D0:80:CC:C5:4C:94:BE
Certificate issuer:       /CN=3492DE65EB92D5FE7D46E9F2771B9852C7110E21
Certificate serial:       4391B67713A51D52FC763C1247855A610F24804C
Authority key identifier: 34:92:DE:65:EB:92:D5:FE:7D:46:E9:F2:77:1B:98:52:C7:11:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa
Signing time:             Wed 02 Apr 2025 14:45:23 +0000
ROA not before:           Wed 02 Apr 2025 14:40:23 +0000
ROA not after:            Wed 01 Apr 2026 14:45:23 +0000
asID:                     264119
IP address blocks:        138.59.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.crl
                          rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:b6:77:13:a5:1d:52:fc:76:3c:12:47:85:5a:61:0f:24:80:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3492DE65EB92D5FE7D46E9F2771B9852C7110E21
        Validity
            Not Before: Apr  2 14:40:23 2025 GMT
            Not After : Apr  1 14:45:23 2026 GMT
        Subject: CN=46FD1B193C4B2179443DBBD694D080CCC54C94BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7e:b3:7a:4b:64:eb:e2:9c:22:dd:a7:89:58:
                    f7:a9:d9:f7:98:5d:af:3e:35:f8:45:95:d9:9a:5a:
                    75:c1:51:93:28:a8:33:99:6c:5f:93:1a:30:37:3d:
                    9d:80:99:06:df:b9:46:e8:a9:60:a5:ff:a8:56:bb:
                    ad:00:6c:46:8e:6f:4a:6e:a5:ff:3f:14:eb:55:1f:
                    9f:d4:c3:f8:e2:50:76:30:8a:09:f1:e4:93:f4:ff:
                    01:e2:f1:f3:74:40:15:99:07:aa:22:6c:f7:5b:09:
                    4e:35:52:c2:71:89:33:64:fd:c6:73:02:6e:95:79:
                    41:96:2d:2d:d2:70:46:08:77:cb:98:51:60:34:47:
                    c4:a1:f1:a0:02:94:00:fe:88:d9:ee:39:44:0b:7b:
                    06:b4:b5:69:73:da:a9:7f:62:d3:f3:a9:64:46:d1:
                    39:95:44:42:e2:b9:89:df:1a:e9:51:0d:6d:c9:03:
                    fc:d2:5d:44:be:3a:fa:5e:d8:5f:0c:69:a5:cd:c4:
                    a3:7d:92:60:a8:1d:c6:4b:cd:d2:1d:08:9a:18:5b:
                    e7:60:7e:c3:f7:3d:97:7c:46:a6:8a:d7:fb:d1:74:
                    f5:c7:9a:cd:d4:43:ff:14:e1:6b:71:e2:f7:81:6d:
                    b0:b3:0e:6c:0d:26:5b:88:d8:32:28:ba:85:67:43:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FD:1B:19:3C:4B:21:79:44:3D:BB:D6:94:D0:80:CC:C5:4C:94:BE
            X509v3 Authority Key Identifier:
                keyid:34:92:DE:65:EB:92:D5:FE:7D:46:E9:F2:77:1B:98:52:C7:11:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b8:6d:de:44:f6:f6:1d:81:46:a4:6f:30:c7:4a:97:74:11:
         65:ca:c9:30:49:70:83:2a:b5:f6:e0:71:38:81:64:61:10:2b:
         da:bb:4a:74:c3:76:e2:35:06:bf:13:c4:ad:12:b6:86:91:d1:
         cd:64:ff:d5:98:00:61:04:78:58:e3:04:3b:1a:09:f0:d6:76:
         73:ba:f8:83:dd:a8:b5:28:e1:b9:00:b3:7d:d7:db:c9:fa:75:
         33:fa:7c:2f:cb:d3:93:dc:c0:47:c7:29:94:2e:05:fe:93:41:
         69:8a:67:8c:c1:44:2b:66:ea:49:af:35:57:4e:dd:65:9d:f0:
         77:c0:49:9a:da:e9:a2:f7:53:46:b4:8d:be:c6:c0:4b:42:0d:
         7d:07:77:24:96:b5:f0:3b:da:8f:be:be:d2:3e:32:d6:dc:90:
         19:43:11:64:5e:7e:52:90:9d:72:20:75:23:e8:b7:1b:a5:24:
         67:f4:36:44:66:8c:ee:44:30:21:35:28:c5:22:4c:c9:97:79:
         ba:3a:5c:fc:7f:1b:68:ef:f1:f7:55:97:58:bf:0e:86:90:00:
         c3:31:70:55:ee:8d:74:66:93:ce:8b:68:c0:29:90:4e:60:54:
         d7:4b:72:0a:64:ab:91:23:8c:4a:54:3d:a8:3f:55:be:e1:a9:
         0b:b8:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:28:27 2025 by rpki-client