Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa
File:                     3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (raw, json)
Hash identifier:          UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=
Subject key identifier:   6E:BA:0C:F1:76:34:87:93:D8:D1:C9:5D:22:01:04:53:19:35:E2:BA
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       3EA2AE2AA031B5E61DFD39742FE498973369CBA8
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa
Signing time:             Sat 25 Jan 2025 14:23:34 +0000
ROA not before:           Sat 25 Jan 2025 14:18:34 +0000
ROA not after:            Sat 24 Jan 2026 14:23:34 +0000
asID:                     270551
IP address blocks:        189.50.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:ae:2a:a0:31:b5:e6:1d:fd:39:74:2f:e4:98:97:33:69:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Jan 25 14:18:34 2025 GMT
            Not After : Jan 24 14:23:34 2026 GMT
        Subject: CN=6EBA0CF176348793D8D1C95D220104531935E2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:e7:0f:78:d1:ba:27:82:37:6a:07:38:fb:
                    3f:62:a7:5d:65:75:cc:f0:b5:93:9d:a5:aa:ed:92:
                    95:12:14:cc:d6:23:14:5c:f0:d4:9f:70:6b:3a:28:
                    56:f3:a9:61:02:a4:cf:4f:70:a6:17:cb:2a:47:fc:
                    d4:e0:d2:8a:a2:f1:dc:36:9c:d7:b6:ee:14:75:c6:
                    75:a3:23:1a:c5:7a:85:63:ff:41:a6:36:23:39:25:
                    f2:4e:f3:cb:81:78:39:f7:8b:28:37:7f:ec:8e:82:
                    f3:da:94:9e:4f:b3:1d:af:f7:c5:b8:0a:35:fd:79:
                    35:fb:13:c7:4e:de:5b:03:09:af:23:1e:05:f6:e1:
                    40:65:2d:2d:ea:15:86:3c:87:eb:28:27:ed:19:b3:
                    07:d5:a3:57:9b:92:43:c7:40:d8:ec:a0:9c:79:fe:
                    97:72:aa:f8:83:91:3a:50:75:6b:5e:29:63:67:50:
                    18:8a:67:11:9a:24:b1:a0:38:9a:84:ac:45:af:6d:
                    5a:14:a8:cf:cd:a4:bb:63:e6:8c:50:45:3d:ab:6e:
                    2e:47:01:13:3d:ce:0f:8c:90:83:ab:12:01:c4:1a:
                    90:c2:4a:bf:24:52:98:6d:3f:b7:2d:da:a9:cf:ae:
                    24:36:78:9f:d6:57:27:b4:43:b4:7d:b5:c0:73:cb:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:0C:F1:76:34:87:93:D8:D1:C9:5D:22:01:04:53:19:35:E2:BA
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:36:38:35:17:96:38:92:a5:4f:ee:68:e6:12:19:e3:16:c1:
         c1:f9:a0:98:8d:92:da:6f:01:57:3c:6e:60:28:dd:b1:15:72:
         7c:3c:1e:13:62:1c:aa:7b:ef:76:78:3c:83:0b:0d:15:58:e9:
         70:37:9f:41:9c:4b:bb:06:71:3a:a2:b0:79:1f:9e:d1:f0:3f:
         01:e1:5a:b8:02:03:10:be:68:d2:f6:1b:40:de:0e:5e:30:83:
         6b:98:fc:41:fa:98:40:68:be:17:c7:97:52:41:cf:86:ad:ed:
         20:67:aa:2b:19:52:c6:3c:23:bc:75:29:c9:39:7b:a0:ee:48:
         31:98:73:f0:1d:95:2e:a1:7f:04:4e:ea:2a:f2:5c:66:43:4e:
         57:8f:0c:c6:0b:a1:f8:ed:7b:06:35:ba:65:fe:0c:1d:10:28:
         ae:27:22:08:f3:3a:df:c2:ab:9a:95:d0:cf:83:25:c3:95:c0:
         2a:e3:60:f4:cb:fe:a5:69:b0:54:2e:1e:fd:f0:b1:56:ff:e9:
         c9:e2:ea:06:08:8c:98:49:92:89:4b:e1:63:b3:1a:3c:80:82:
         e9:49:e5:60:f4:76:25:5b:21:ea:23:2c:42:1c:0a:7f:47:48:
         13:b3:25:70:47:30:7d:44:3f:03:98:49:41:19:20:23:5e:08:
         aa:ab:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:40 2025 by rpki-client on console.sobornost.net