Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa
File:                     3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa (raw, json)
Hash identifier:          VsTVn5vhDfMkoJ5vIqkqm8Pcl+TcYk3SoqARUbsJanM=
Subject key identifier:   2D:01:FA:1F:AB:47:43:B2:09:0F:8E:6C:BE:0C:D4:3D:73:61:2D:94
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       1F4A79058AF009E78E6689E5C788AB10EBE88E25
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa
Signing time:             Thu 06 Mar 2025 19:04:23 +0000
ROA not before:           Thu 06 Mar 2025 18:59:23 +0000
ROA not after:            Thu 05 Mar 2026 19:04:23 +0000
asID:                     264479
IP address blocks:        138.117.32.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4a:79:05:8a:f0:09:e7:8e:66:89:e5:c7:88:ab:10:eb:e8:8e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Mar  6 18:59:23 2025 GMT
            Not After : Mar  5 19:04:23 2026 GMT
        Subject: CN=2D01FA1FAB4743B2090F8E6CBE0CD43D73612D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bd:22:0b:5e:6f:46:56:0f:9e:f9:d7:37:60:
                    72:93:77:c2:ad:3a:79:8b:29:48:71:a2:3e:9b:7b:
                    24:3f:e5:16:f1:5b:7e:fd:55:2d:68:06:99:83:3f:
                    ea:33:b6:67:ab:c4:50:59:e1:f5:9c:c9:90:e4:bb:
                    a5:8e:d3:29:d2:93:25:2d:25:e4:1e:89:dc:1d:ca:
                    90:1b:61:3d:c5:8e:4f:f4:11:1c:34:09:47:ba:f6:
                    91:1c:57:f6:c1:92:0c:38:58:13:22:64:88:c4:dd:
                    b1:06:ae:4e:65:4e:69:02:b1:ff:3f:2e:b8:18:d5:
                    83:5f:53:19:17:91:aa:1c:c1:85:61:1b:13:74:c6:
                    0d:75:16:f0:ed:05:b7:55:b5:33:dc:54:e8:b6:09:
                    a6:df:09:17:69:da:e0:57:b9:f0:70:6d:a6:4d:23:
                    7c:65:1f:4f:5c:c1:76:60:a5:9e:6c:dd:5a:10:80:
                    9e:0f:c4:73:a6:de:f1:83:96:f4:3e:8a:64:6f:ea:
                    1d:79:b0:a6:0c:69:43:21:2f:92:fc:61:df:8e:59:
                    f0:30:ef:16:17:50:b4:0f:73:d3:7e:69:0a:98:f6:
                    2a:57:b2:10:f9:22:0e:9d:43:c0:4d:37:73:14:4e:
                    34:17:fe:0d:7d:3d:17:db:0b:83:36:28:3c:ed:ce:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:01:FA:1F:AB:47:43:B2:09:0F:8E:6C:BE:0C:D4:3D:73:61:2D:94
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:97:38:d5:21:95:91:10:b4:78:b4:14:1c:fe:d7:33:5e:34:
         ed:78:ff:84:6a:f5:af:a7:52:67:37:9e:44:11:17:6f:6c:fb:
         e6:3c:a7:bf:52:73:c6:d1:74:31:58:1c:1c:15:34:82:56:bc:
         59:f4:27:a2:33:61:85:36:a9:30:c8:f1:5f:b1:62:10:a6:7a:
         b0:73:1b:aa:a0:f3:c1:16:b4:f9:aa:c0:a3:c2:92:21:8c:5d:
         5f:ab:a7:eb:9f:79:29:52:d1:bc:f9:5a:b6:e5:18:29:ed:4c:
         a3:0f:87:c8:11:03:20:22:6a:e6:c4:ea:21:b2:9f:3d:4b:4a:
         a7:63:81:0d:2f:81:9c:50:31:66:4b:93:46:41:e8:42:3b:27:
         1b:4e:e4:23:72:6a:eb:73:35:19:7e:34:44:0e:b7:4f:68:73:
         f7:eb:9d:5a:2d:b8:89:fd:b1:89:0e:5e:b8:fe:0d:53:29:dd:
         90:b7:de:e7:9c:42:09:ea:20:a2:28:bb:51:54:43:17:5f:9a:
         93:20:28:ff:bf:5d:59:ac:42:65:f1:22:26:73:37:e5:5c:37:
         8c:e7:ba:60:2f:61:d5:86:11:00:fa:b7:22:86:05:04:48:77:
         03:f9:5d:6e:94:7d:d4:f5:a5:df:e3:0b:f3:d5:82:48:85:09:
         af:34:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:11 2025 by rpki-client