Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33342e302f32332d3234203d3e203631393030.roa
File:                     3133382e39372e33342e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          Pr46Y4bW8Knc3u0QaekZlbi2ib9xBOrEicDtDGrw4wU=
Subject key identifier:   BF:15:59:FA:06:FD:04:91:8D:99:2C:DA:68:C3:28:28:2D:F0:D5:49
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       160E4AFA19AA519BFC996910E463E62B12C49CB1
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33342e302f32332d3234203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 18:34:41 +0000
ROA not before:           Wed 16 Apr 2025 18:29:41 +0000
ROA not after:            Wed 15 Apr 2026 18:34:41 +0000
asID:                     61900
IP address blocks:        138.97.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0e:4a:fa:19:aa:51:9b:fc:99:69:10:e4:63:e6:2b:12:c4:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 18:29:41 2025 GMT
            Not After : Apr 15 18:34:41 2026 GMT
        Subject: CN=BF1559FA06FD04918D992CDA68C328282DF0D549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:af:a3:c8:46:93:b0:c4:5e:20:25:55:4d:
                    0f:cd:81:3b:38:e7:bd:28:8b:e6:fb:82:30:f8:ac:
                    6e:1d:d8:5a:c0:da:89:27:1d:42:c1:2f:a2:e6:df:
                    b8:03:46:40:ed:14:10:e1:64:b4:eb:eb:7e:39:b1:
                    f9:e4:ba:43:64:45:17:2e:a2:f4:1c:8e:72:ec:da:
                    f0:39:e3:e0:fc:46:60:f0:be:d1:4b:87:b2:74:94:
                    88:dc:ad:bd:2e:da:df:af:e6:7d:ca:3a:7f:69:4d:
                    db:04:27:d2:40:15:04:3c:4b:b0:52:42:64:d8:5a:
                    2a:73:d6:1b:08:5e:2c:00:5b:5d:9e:1a:de:9c:aa:
                    fe:72:0a:71:af:e7:41:8c:93:c4:7f:c3:f0:ca:8a:
                    5a:b4:dd:b8:42:c3:d5:0b:d9:7f:96:ba:b2:d1:32:
                    86:5c:7f:e5:0b:b7:1d:0f:64:a9:e4:70:24:6d:6f:
                    dc:21:ce:b5:9a:9a:c9:e6:4c:10:34:05:00:83:f9:
                    4b:32:c4:2b:13:01:b1:21:e7:da:19:b6:1f:54:43:
                    2c:91:ef:ef:5e:b3:75:cb:4a:27:2f:c0:aa:dc:76:
                    aa:27:e2:03:4d:34:53:52:a9:b4:54:87:3a:29:8e:
                    ca:20:e9:ee:ba:76:10:9f:21:17:36:bd:28:88:d4:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:15:59:FA:06:FD:04:91:8D:99:2C:DA:68:C3:28:28:2D:F0:D5:49
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33342e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:07:68:88:23:51:da:08:15:40:47:ea:a8:45:f3:a2:25:42:
         14:42:24:17:9f:ba:8f:59:f7:a5:23:14:a1:9d:3a:b5:49:3e:
         8a:e9:e5:11:5c:2f:37:d2:0f:1c:cc:f4:40:26:ca:cb:bf:be:
         53:cd:fb:60:8c:23:ad:23:79:a8:73:09:03:d2:ee:e9:aa:3e:
         b0:e5:67:25:b6:45:d2:e7:14:1f:e0:23:a3:07:45:ca:11:91:
         b3:06:b2:77:22:bf:10:30:68:59:46:dd:77:6c:32:8b:e6:18:
         84:0d:8d:73:b8:99:21:11:2c:9c:a1:5d:f8:1b:42:70:fb:9e:
         f3:2f:2e:7e:3b:ba:dd:89:cf:4f:f4:bf:ae:0a:a6:25:17:cc:
         c7:52:10:c0:ee:0d:05:7e:94:c1:1f:d7:f5:38:18:51:a8:35:
         7f:3b:4b:a6:9b:6a:47:96:97:8d:d0:24:f5:41:30:90:6f:2e:
         6d:b8:3a:4a:24:48:fe:84:e7:46:fe:d6:33:c3:54:d5:e0:c8:
         06:70:8a:f0:a6:79:16:8c:29:b8:60:7e:2a:b2:2a:23:8f:51:
         d3:45:d8:f3:a3:ef:e0:ae:80:03:e0:ac:c8:35:0b:38:24:b0:
         74:11:2b:94:da:06:a1:cf:9f:95:d2:be:3e:40:14:63:53:b5:
         d8:cb:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net