Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139362e302f32322d3234203d3e20323634323136.roa
File:                     3133382e39392e3139362e302f32322d3234203d3e20323634323136.roa (raw, json)
Hash identifier:          OX9TTEMV3ymeiKJrKyD5SMOVqI+yyNpgRKqIPdkp8iQ=
Subject key identifier:   BA:C0:AC:A6:18:9D:D0:6E:2A:D7:5C:13:CE:82:2A:BD:B1:9B:7B:98
Certificate issuer:       /CN=4F3C63A4C583A15ECA112E14A2ACE28AFE972053
Certificate serial:       44148DA054C77DDD1F49CB3C9CC30CE3496278E0
Authority key identifier: 4F:3C:63:A4:C5:83:A1:5E:CA:11:2E:14:A2:AC:E2:8A:FE:97:20:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139362e302f32322d3234203d3e20323634323136.roa
Signing time:             Fri 09 Aug 2024 19:24:39 +0000
ROA not before:           Fri 09 Aug 2024 19:19:39 +0000
ROA not after:            Fri 08 Aug 2025 19:24:39 +0000
asID:                     264216
IP address blocks:        138.99.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.crl
                          rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:14:8d:a0:54:c7:7d:dd:1f:49:cb:3c:9c:c3:0c:e3:49:62:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3C63A4C583A15ECA112E14A2ACE28AFE972053
        Validity
            Not Before: Aug  9 19:19:39 2024 GMT
            Not After : Aug  8 19:24:39 2025 GMT
        Subject: CN=BAC0ACA6189DD06E2AD75C13CE822ABDB19B7B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:ef:13:75:d0:de:89:44:1b:6a:a2:7e:b2:
                    9a:ce:1c:c7:8e:ce:61:14:e9:c6:a8:94:37:22:74:
                    b6:2e:90:31:4e:d0:87:20:c5:1d:f8:6c:5a:9d:1f:
                    73:60:79:b3:62:6e:2a:b7:8e:17:15:32:7b:c7:2c:
                    03:57:18:1b:a7:da:ce:8f:27:74:07:f1:9d:ed:59:
                    39:95:fc:f7:ef:a7:30:f2:5a:a3:f9:ec:db:cf:68:
                    f1:4e:ca:fe:73:42:c9:0d:e6:87:7f:c7:bf:c8:8d:
                    44:3a:b9:66:e4:4d:af:83:bb:16:21:1c:10:12:9c:
                    b3:62:03:31:70:e1:3c:f8:60:f3:97:55:83:18:73:
                    85:7e:2a:8e:d3:fe:81:51:c1:70:62:9f:36:e9:33:
                    59:07:79:f9:00:3c:ec:12:b0:95:a9:ef:2d:5b:84:
                    c6:f3:a0:a9:a8:9d:1a:92:f9:cc:d9:a3:aa:c3:04:
                    60:6c:ad:19:0d:eb:bf:03:cf:94:72:bd:f4:96:05:
                    ef:eb:0d:69:e9:9a:90:96:53:64:65:44:24:47:02:
                    ed:0a:08:c4:e1:63:e3:50:79:03:80:f9:cf:82:df:
                    ad:9c:71:9f:54:5f:c7:63:0e:06:b3:42:90:f0:47:
                    20:ab:12:62:49:ee:5b:f2:9d:37:13:04:67:41:38:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C0:AC:A6:18:9D:D0:6E:2A:D7:5C:13:CE:82:2A:BD:B1:9B:7B:98
            X509v3 Authority Key Identifier:
                keyid:4F:3C:63:A4:C5:83:A1:5E:CA:11:2E:14:A2:AC:E2:8A:FE:97:20:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3133382e39392e3139362e302f32322d3234203d3e20323634323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:c5:17:ca:13:2c:2f:e2:ff:c8:bf:3e:e5:a8:87:21:28:
         24:e2:e9:61:08:fd:e5:f1:17:75:8c:8c:d2:ff:d5:12:f5:b4:
         e5:b7:cc:63:f2:92:a6:ed:8c:f2:45:a4:99:b2:b9:6a:44:64:
         48:b2:8a:46:b6:8a:35:60:79:fb:60:d7:61:f3:27:fb:ef:0c:
         82:2d:73:d4:b6:4e:37:56:f1:d8:fc:45:7c:7c:ae:1d:be:da:
         9e:b1:85:7a:af:0a:7a:72:01:42:29:96:b2:34:8c:c8:87:38:
         b5:b0:59:32:95:ba:1b:e6:82:bc:34:04:67:9f:0a:b5:b8:2b:
         85:23:4b:49:9a:c0:13:c7:2f:84:5a:5b:55:b8:11:00:af:78:
         e6:ed:4f:b8:93:af:bc:93:8f:bb:5c:09:16:fc:67:2b:18:f6:
         67:6e:48:e7:09:b7:84:cc:61:09:d8:24:f1:c3:c1:3e:6e:bd:
         24:28:30:b6:9f:45:d2:93:f3:a3:62:42:c6:11:27:97:92:3a:
         65:9d:27:7e:39:74:ec:d7:f0:cb:3a:c2:b1:7f:59:f1:59:70:
         3e:b7:0c:bc:6a:4f:9b:0e:8d:af:46:3c:7b:88:42:37:d7:4a:
         60:87:c1:37:d7:e9:bc:24:ab:70:9d:13:1d:cb:8a:59:6d:99:
         cb:f1:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:56 2025 by rpki-client