Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa
File:                     3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa (raw, json)
Hash identifier:          tDcbkEF9S2gMEvsjoKAcK1bAV+++XgkXo6l2vxzGxP0=
Subject key identifier:   B5:22:65:2D:05:7A:FF:A7:F9:67:F6:1E:E1:A8:9A:7A:3B:C9:63:70
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       4C0ADCD790E600A548A7D652CB88720D921671E5
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa
Signing time:             Tue 04 Feb 2025 12:10:29 +0000
ROA not before:           Tue 04 Feb 2025 12:05:29 +0000
ROA not after:            Tue 03 Feb 2026 12:10:29 +0000
asID:                     61796
IP address blocks:        201.159.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 04:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0a:dc:d7:90:e6:00:a5:48:a7:d6:52:cb:88:72:0d:92:16:71:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Feb  4 12:05:29 2025 GMT
            Not After : Feb  3 12:10:29 2026 GMT
        Subject: CN=B522652D057AFFA7F967F61EE1A89A7A3BC96370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:73:16:4e:18:95:81:35:39:e6:41:81:84:
                    bf:f3:b4:0c:56:50:df:96:8c:37:6d:cc:46:ab:a6:
                    47:c2:96:1c:7e:c8:b8:26:a7:00:a8:1d:38:de:97:
                    76:fa:54:2a:9d:69:77:68:6c:40:6c:e5:a7:dc:cb:
                    9e:d1:9f:e7:89:04:c6:1d:b4:f8:e5:6a:6c:79:52:
                    f3:a0:8b:3a:40:bd:15:05:16:70:e6:e6:2c:b8:87:
                    aa:e7:ea:e6:a0:ab:3b:62:32:a5:34:58:b5:d9:61:
                    fd:b8:a5:b9:fe:b5:c7:41:e6:44:8e:3c:1b:5d:60:
                    bd:76:61:0b:8a:be:b0:e4:c9:19:b9:fd:4a:40:ea:
                    f6:6d:f4:88:98:1c:96:dc:8c:ab:c7:72:92:a0:2c:
                    20:3a:24:df:dd:67:c0:d6:13:dd:7f:00:25:8a:d1:
                    47:d8:c1:a8:68:a2:85:e7:b0:87:3a:e7:57:a9:3b:
                    ce:c4:1e:f8:c0:9b:68:62:cf:4e:7e:08:93:54:24:
                    44:fe:ac:0f:b2:fb:e2:fc:84:3b:f7:53:cc:4b:22:
                    e8:54:24:cd:60:c7:0e:ba:40:79:a6:82:4f:f9:81:
                    70:bd:f4:e6:38:fb:30:3f:46:65:d5:35:f2:53:89:
                    1d:f3:27:cb:a2:f3:a4:fe:9f:2d:1f:e4:88:00:ce:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:65:2D:05:7A:FF:A7:F9:67:F6:1E:E1:A8:9A:7A:3B:C9:63:70
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:1d:e0:0b:a8:bf:a2:cc:dd:23:bc:95:0f:96:88:ce:b0:
         96:a4:1f:1b:6f:f3:d7:db:7b:d6:03:44:4f:e8:4e:eb:ce:51:
         1f:6f:55:b1:f1:f6:1e:72:f9:0f:a3:04:55:88:d0:f6:1f:27:
         70:9b:81:ea:46:ac:95:27:6b:11:dc:00:05:06:69:12:74:97:
         4d:1c:97:de:c1:4f:6c:39:39:ab:b4:f5:00:a2:0a:a7:6f:e9:
         66:e6:ec:23:66:20:8f:5a:ff:36:1a:39:08:ac:46:be:d8:87:
         97:b9:41:49:f1:39:88:ea:56:ed:bb:36:49:1b:d3:ac:b5:c9:
         48:30:ad:6f:55:88:87:1d:9c:f1:bc:b2:6e:84:d8:1e:d8:0b:
         a8:ad:f3:4e:71:94:4a:36:c4:db:fc:9a:a5:5c:1d:7b:46:b8:
         95:29:8d:b7:db:db:52:ce:c8:c6:8e:ed:c9:d6:6e:04:07:7c:
         eb:66:96:fe:15:a6:f0:ef:54:a0:b2:74:3f:63:5d:28:35:70:
         85:48:fb:6f:77:eb:7c:6e:f8:4a:a3:52:89:1e:e2:30:f0:53:
         13:7f:a0:da:ee:1b:ce:44:86:8d:5e:fe:e7:7e:d9:c4:ff:d6:
         1d:f3:01:42:78:fd:cb:08:65:0a:1c:9b:b8:91:33:b8:d6:cb:
         fa:e6:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:29:23 2025 by rpki-client