Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31352e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e31352e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          /ZwNxwWmE2iIPI3QQT2N6W4yScUxvMqA5TXGUKRB++M=
Subject key identifier:   3C:35:0C:7F:A6:E1:75:29:48:CC:9C:FA:FD:7F:94:48:DA:5E:78:21
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       23E4FFDC65B1BDA19C4499D8F0A2B8A885C0E3F0
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31352e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:47:14 +0000
ROA not before:           Fri 04 Apr 2025 11:42:14 +0000
ROA not after:            Fri 03 Apr 2026 11:47:14 +0000
asID:                     53156
IP address blocks:        186.211.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 00:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e4:ff:dc:65:b1:bd:a1:9c:44:99:d8:f0:a2:b8:a8:85:c0:e3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:42:14 2025 GMT
            Not After : Apr  3 11:47:14 2026 GMT
        Subject: CN=3C350C7FA6E1752948CC9CFAFD7F9448DA5E7821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:7b:9f:07:27:a4:74:df:2d:f1:b6:d2:97:
                    b6:8e:29:36:0b:9e:b0:d9:66:5f:43:18:6d:03:d0:
                    2e:8b:9f:92:32:e9:90:7c:aa:07:ad:48:7d:c4:31:
                    7c:8d:f0:ee:b7:bd:6b:98:d7:5c:bb:5c:b7:e3:bd:
                    ed:43:d5:68:6f:6d:7d:88:f1:16:a4:77:78:55:14:
                    96:7a:41:ff:25:20:77:75:29:48:f0:73:62:58:40:
                    e2:93:5c:5d:c5:cf:5e:45:8a:fb:5b:fd:39:c7:b8:
                    88:84:7b:31:51:53:fb:83:1e:5f:c5:d8:c6:a5:e2:
                    d4:85:59:09:6d:3c:da:8e:89:d6:64:13:9e:fe:42:
                    80:da:21:88:9d:94:68:04:80:b8:ca:52:cc:2a:c2:
                    19:d7:dc:6a:a7:04:06:3c:ba:48:71:f9:bc:a4:34:
                    4c:3b:3f:a6:73:1b:5c:fc:af:d1:02:8b:21:cb:b7:
                    a5:dc:bd:18:dc:e0:13:7f:ac:d8:c2:1e:46:0a:7f:
                    8e:25:5a:69:8b:78:e4:01:ce:c4:c9:4c:83:8c:f5:
                    03:23:ff:8f:4b:12:39:ef:57:59:17:cb:51:56:18:
                    71:6d:7e:10:bb:65:9a:f4:78:5f:9e:fc:20:7e:be:
                    89:01:1d:a2:df:b5:91:3c:ea:8f:92:ae:68:ee:85:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:0C:7F:A6:E1:75:29:48:CC:9C:FA:FD:7F:94:48:DA:5E:78:21
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31352e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:58:7b:f3:2e:84:e6:f6:f5:4e:9d:3d:2b:61:4d:67:ef:
         88:a4:17:3d:c3:39:e7:91:07:05:8c:bf:1b:3f:52:52:8e:38:
         a8:2a:8c:7b:83:e7:7e:df:e5:2a:ca:1f:78:71:d8:de:dc:29:
         73:5e:15:08:1f:09:53:8c:c8:20:6c:59:fe:f8:94:af:dd:ac:
         81:38:cb:6f:9c:2a:fb:fa:ff:39:20:0e:13:3f:ba:68:7b:ff:
         36:c8:52:fa:7e:0e:f3:cc:d0:f8:f5:49:ce:3e:7c:26:4e:b9:
         b2:b7:91:7b:e7:6c:c5:6c:08:9e:8b:23:22:48:7b:e6:2c:73:
         2a:0b:7c:a2:80:37:e5:7e:8c:f6:7e:56:07:3f:64:49:5a:6b:
         9a:c9:ab:ea:d9:e5:bd:9b:a7:ca:23:8e:24:86:70:9b:03:f6:
         50:1b:69:65:8d:76:b6:88:d9:c0:42:4f:4a:c2:b6:02:f4:b7:
         90:59:15:31:43:d9:54:0e:0d:78:07:36:0d:d1:a3:93:b5:88:
         2c:d3:54:92:89:c5:ae:5f:a3:75:97:89:bc:44:bf:d7:5a:be:
         30:f3:3d:aa:71:c1:aa:fe:c6:c0:fd:d3:70:6a:ee:9f:8c:71:
         89:20:4a:62:e1:2e:93:9d:77:b3:eb:c7:15:60:e1:e6:3c:05:
         0d:96:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:36:38 2025 by rpki-client