Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
File:                     3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (raw, json)
Hash identifier:          FfS5AdltD+bYy6tMSQEon9HbbkIAv8M2kl+4KD/wENk=
Subject key identifier:   20:90:31:22:28:3E:EA:69:C7:B8:DD:FC:27:75:FF:D7:CB:CF:4C:B8
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       4B32226635FC3818085742CA1DFEA9D0BA1894F5
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
Signing time:             Thu 06 Mar 2025 11:34:08 +0000
ROA not before:           Thu 06 Mar 2025 11:29:08 +0000
ROA not after:            Thu 05 Mar 2026 11:34:08 +0000
asID:                     52771
IP address blocks:        138.186.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:32:22:66:35:fc:38:18:08:57:42:ca:1d:fe:a9:d0:ba:18:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Mar  6 11:29:08 2025 GMT
            Not After : Mar  5 11:34:08 2026 GMT
        Subject: CN=20903122283EEA69C7B8DDFC2775FFD7CBCF4CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2f:cd:7d:64:78:ee:d8:97:e5:ed:a3:49:d7:
                    49:fc:d5:13:c6:81:a1:ce:2f:8f:46:b0:0c:f3:34:
                    f4:f3:97:37:94:80:a8:70:55:a3:93:84:ac:52:04:
                    13:5f:3f:f6:b9:ec:7f:07:6d:57:30:34:04:fd:48:
                    e9:ca:48:af:b6:37:64:1f:04:5f:9a:e5:b6:6c:77:
                    52:ab:1b:b9:0e:fc:32:e1:81:4d:e0:e9:50:6e:77:
                    b8:9b:98:82:42:8c:63:f3:47:20:ab:de:c3:3d:e6:
                    68:ef:7c:33:c3:fc:15:6d:b9:23:1f:f7:5a:2e:2a:
                    ea:75:b8:de:a2:cb:f2:f7:9d:e9:8d:7b:e2:b3:46:
                    7d:59:d2:54:e6:39:da:64:d6:07:52:20:da:68:a9:
                    e2:aa:8c:2c:84:00:e2:7c:e5:1b:a9:78:44:c7:46:
                    7a:fb:50:59:7b:f8:86:8d:b4:dd:84:32:cc:0b:38:
                    f8:3d:19:0f:a5:79:09:ed:c6:0f:18:ae:6e:eb:9a:
                    fe:ae:fa:73:30:d7:31:a2:21:91:0c:d4:e0:a3:8c:
                    f2:cc:4b:88:e3:3b:47:79:33:21:12:0b:05:75:07:
                    22:27:72:01:13:55:9f:77:fb:fb:b8:fd:24:f2:69:
                    16:e9:e7:22:dd:35:df:f9:04:a4:30:02:b3:c1:ad:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:31:22:28:3E:EA:69:C7:B8:DD:FC:27:75:FF:D7:CB:CF:4C:B8
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:65:6b:4c:c6:97:fd:62:ec:b2:c0:2d:bb:8b:f7:89:7c:
         c7:a6:bc:77:84:5a:d3:51:39:fa:cd:2d:36:af:bc:1b:c6:c0:
         60:6d:0f:21:57:65:5c:25:23:b3:58:39:46:5f:e1:16:77:ce:
         88:f5:da:29:a7:47:7b:db:fa:6d:af:4e:7b:94:3f:ef:b4:22:
         fb:6b:8b:d9:69:a2:f9:2b:53:b0:7e:07:2a:3f:00:d9:82:be:
         ed:89:e6:c9:24:81:56:28:b3:21:5a:13:30:0e:51:02:bb:c8:
         0b:49:39:e8:a1:af:e8:1e:41:bd:41:d1:9b:50:3c:35:78:d9:
         86:a5:67:e3:e3:97:2c:69:99:08:ed:63:22:87:bd:71:02:93:
         04:2e:42:cd:0e:7e:f9:2f:06:8a:ad:79:28:39:15:8a:6e:58:
         df:66:d1:0a:9c:94:d2:ac:12:2e:f2:63:1c:01:95:0b:7d:ba:
         a0:67:cd:aa:ec:ab:f8:01:ae:e3:e7:f8:ec:b8:8f:84:e2:e9:
         b3:60:a7:ea:b7:d0:b9:3e:1b:ce:72:46:7c:6a:f5:15:17:1e:
         a8:3e:97:d9:77:89:f9:ac:7d:6f:8c:2e:fe:94:87:fe:75:d3:
         9e:ec:5f:13:58:c9:d9:f1:13:ab:04:76:c1:61:50:0b:41:71:
         9a:d6:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:26 2025 by rpki-client on console.sobornost.net