Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          qO7xQ+9nyDudOnayOCd1OcF+D4cd4nneBYjVHrcHnPQ=
Subject key identifier:   42:A8:27:2B:9C:C5:0F:F7:F0:57:4D:BE:FC:88:37:20:0E:79:0B:63
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       196682F2DF7DBE5E425BA150B500B2EAA2091BC1
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
Signing time:             Thu 06 Mar 2025 02:51:47 +0000
ROA not before:           Thu 06 Mar 2025 02:46:47 +0000
ROA not after:            Thu 05 Mar 2026 02:51:47 +0000
asID:                     266256
IP address blocks:        192.140.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:82:f2:df:7d:be:5e:42:5b:a1:50:b5:00:b2:ea:a2:09:1b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Mar  6 02:46:47 2025 GMT
            Not After : Mar  5 02:51:47 2026 GMT
        Subject: CN=42A8272B9CC50FF7F0574DBEFC8837200E790B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:2d:30:de:68:d6:b4:65:c9:d1:a6:ca:34:
                    41:5a:b7:0e:84:7f:35:df:d3:04:87:2a:ba:65:55:
                    26:aa:02:2e:ca:35:ba:d9:34:01:28:01:c4:8e:cd:
                    ca:b4:37:39:a0:ff:ed:fa:5e:31:f3:fd:5d:42:0d:
                    63:6e:ff:c0:d2:0a:5c:0a:03:fa:05:c8:de:25:34:
                    fe:73:3e:69:76:0c:08:58:a3:dd:71:5f:61:2d:a2:
                    ad:4c:ec:5b:3b:e1:a4:78:ee:c5:8b:53:6a:d6:22:
                    52:3b:7c:a2:71:ad:bf:5f:2d:fa:fd:11:8d:9e:43:
                    a2:c7:b2:47:fb:40:5a:18:31:2e:9c:a9:ac:df:65:
                    f3:51:14:2b:6b:45:85:82:ba:d0:0a:d8:9c:ca:f8:
                    a9:ca:4b:35:ba:d4:d6:65:97:0a:be:d0:95:e4:9a:
                    e6:99:c2:6a:de:d2:0b:76:d9:58:f6:46:f3:9e:42:
                    af:ca:1a:4b:eb:22:9e:0e:db:80:2d:6e:d3:49:38:
                    e5:c6:87:2b:9b:a3:6f:76:60:e4:16:3e:ea:19:86:
                    ea:55:77:9a:6a:87:13:0e:58:51:23:0a:61:dd:ff:
                    48:d3:d8:9f:98:d4:ae:06:77:fe:79:90:51:16:e1:
                    7f:7e:45:26:d0:23:39:c1:08:44:20:e7:3d:e1:39:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A8:27:2B:9C:C5:0F:F7:F0:57:4D:BE:FC:88:37:20:0E:79:0B:63
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:65:80:e3:49:1c:12:ff:45:6b:1d:93:20:92:7f:51:92:
         e3:9a:1f:01:fd:d7:25:cc:f1:03:01:82:bd:32:7f:ac:a2:59:
         61:77:63:80:77:7c:2e:de:4c:3c:a3:78:c6:a4:07:5c:f3:d3:
         cf:d4:03:e3:2d:93:3d:99:05:25:cc:1c:d2:91:1b:e4:61:d7:
         8e:eb:d4:64:0a:72:27:3e:ae:9e:e7:55:97:7b:f1:b9:f3:bc:
         2a:71:62:fd:35:39:46:ca:a2:5e:cb:ef:9a:21:46:e0:29:56:
         09:ba:d2:fe:d0:35:a7:b5:40:68:8b:6c:f1:86:4c:a2:cb:e3:
         23:ff:06:e3:d4:b4:96:de:f9:d4:ac:58:71:bd:a2:ac:41:ea:
         6c:be:d9:04:31:2f:84:9a:07:63:24:6c:94:8a:48:23:cf:aa:
         34:8d:5b:2d:ed:25:0d:2d:17:22:5a:93:a3:64:e5:0a:38:2a:
         73:7b:e9:cc:58:6f:38:37:25:c2:2c:50:d5:37:4e:6d:8f:e1:
         84:86:af:cd:93:01:05:28:b5:08:e3:11:77:c3:dc:01:89:8e:
         fe:5c:d6:de:3c:b2:1a:d7:86:cf:15:ee:d4:51:9d:63:43:84:
         9a:60:d0:62:d9:b9:85:2e:a5:ff:76:ea:60:ca:87:7c:82:43:
         5e:62:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:04:51 2025 by rpki-client