Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/3138392e38342e35342e302f32332d3233203d3e20323731363835.roa
File:                     3138392e38342e35342e302f32332d3233203d3e20323731363835.roa (raw, json)
Hash identifier:          KtmeHUCbWnIXtNtwGd6SKuNNTX6tDaZEnxlYg/KMDso=
Subject key identifier:   41:A1:CD:40:1F:78:13:83:A7:68:B3:35:1D:CD:B7:C1:16:76:A4:B1
Certificate issuer:       /CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6
Certificate serial:       0B51E5551F7384E8D75DB24396022B5AC85D9496
Authority key identifier: D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/3138392e38342e35342e302f32332d3233203d3e20323731363835.roa
Signing time:             Tue 17 Jun 2025 16:27:56 +0000
ROA not before:           Tue 17 Jun 2025 16:22:56 +0000
ROA not after:            Tue 16 Jun 2026 16:27:56 +0000
asID:                     271685
IP address blocks:        189.84.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl
                          rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:51:e5:55:1f:73:84:e8:d7:5d:b2:43:96:02:2b:5a:c8:5d:94:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6
        Validity
            Not Before: Jun 17 16:22:56 2025 GMT
            Not After : Jun 16 16:27:56 2026 GMT
        Subject: CN=41A1CD401F781383A768B3351DCDB7C11676A4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:bc:6e:77:ea:3a:3b:32:29:9f:55:97:10:
                    3e:b9:15:58:36:bd:46:23:4e:ca:a9:4d:ab:17:bc:
                    85:de:83:c9:64:53:66:e3:8d:f3:9c:97:37:de:f2:
                    b3:e4:70:83:97:c7:8d:7f:fa:1b:f3:d6:e2:54:ff:
                    c4:ff:2e:3b:8b:cd:57:45:9b:1f:e3:fc:33:dc:19:
                    2c:54:8e:b0:d6:f3:63:54:94:0e:5e:e1:57:c9:9c:
                    e7:e5:00:ab:4a:6a:ae:8a:00:44:84:1a:a1:0f:d5:
                    6f:81:e6:90:f9:00:64:b5:d4:a4:34:20:20:a5:f6:
                    bf:4a:52:60:42:5e:ed:df:10:48:f3:ad:2d:2e:42:
                    7f:0c:2f:9d:95:69:54:21:71:3f:a4:5b:05:92:58:
                    11:64:18:44:23:57:06:c1:de:27:6b:e7:ea:e7:e8:
                    3c:33:f3:c9:44:a3:94:a3:e6:60:b9:73:c8:cc:d6:
                    47:24:a3:5f:bd:87:d7:8e:09:fc:77:26:b2:26:d1:
                    32:a1:73:52:ae:49:71:e4:ea:d8:2f:26:8d:11:f9:
                    13:18:1e:01:fb:60:03:01:4d:1c:db:fa:16:ef:a1:
                    08:06:a0:9e:4c:0f:e6:dd:2e:e9:cf:be:22:a6:e2:
                    15:04:ff:d8:54:a6:ed:8d:68:5b:7e:3d:6b:4b:71:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A1:CD:40:1F:78:13:83:A7:68:B3:35:1D:CD:B7:C1:16:76:A4:B1
            X509v3 Authority Key Identifier:
                keyid:D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/3138392e38342e35342e302f32332d3233203d3e20323731363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:4c:2c:e7:fb:bd:e1:a9:dd:91:a8:f7:7a:f8:df:c7:ff:
         55:09:f5:a2:0c:f2:c1:cb:e8:17:e2:d5:f5:78:fd:a3:90:b8:
         a1:3d:75:e4:8a:b6:dc:cc:fd:87:bc:13:ea:10:58:6e:1c:a3:
         60:fc:5e:c5:2a:18:79:8e:9d:03:ab:72:86:f7:28:fb:51:7c:
         f1:4d:4b:db:66:8d:8f:63:5e:0c:35:35:50:96:61:a8:42:aa:
         98:36:aa:e7:b1:9b:f1:bc:e2:b9:65:bf:bc:c4:81:77:97:fd:
         49:ca:09:84:9f:74:21:9c:68:78:3d:24:2e:83:1f:66:89:c9:
         22:78:05:24:ad:7a:16:80:fc:34:f5:e9:5a:76:5e:84:9f:a7:
         82:c8:48:4e:a6:a4:1a:1a:37:b3:a8:8b:aa:b4:74:f7:ef:38:
         26:f6:4e:47:63:28:56:b5:da:e2:bb:f3:35:3f:9c:d4:2e:f5:
         26:ed:67:b6:09:54:7f:50:a6:1b:a7:99:c9:a8:00:66:a2:a8:
         cd:24:53:a5:87:e5:18:58:53:3b:a6:21:f6:d7:ff:d5:8d:50:
         c4:75:3c:84:4b:59:18:0d:c8:27:38:5a:c9:e2:b1:09:25:cd:
         42:c0:76:1c:65:df:c2:82:a5:30:31:e6:4d:38:aa:6d:71:65:
         e7:27:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:41:37 2025 by rpki-client