Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
File:                     3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (raw, json)
Hash identifier:          LXRmb4zfD6o3B7/VmuFOKShUsVwwF+Iq5iC0r91FsZM=
Subject key identifier:   73:76:5C:BA:5A:DE:27:7F:0E:A0:12:5E:83:B7:42:05:3D:E3:C0:11
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       06221AB455B1192085117F88E72729DE8D3812F4
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
Signing time:             Thu 06 Mar 2025 22:10:33 +0000
ROA not before:           Thu 06 Mar 2025 22:05:33 +0000
ROA not after:            Thu 05 Mar 2026 22:10:33 +0000
asID:                     263650
IP address blocks:        138.255.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:22:1a:b4:55:b1:19:20:85:11:7f:88:e7:27:29:de:8d:38:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Mar  6 22:05:33 2025 GMT
            Not After : Mar  5 22:10:33 2026 GMT
        Subject: CN=73765CBA5ADE277F0EA0125E83B742053DE3C011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:a9:38:44:81:4d:84:45:ed:e1:92:8a:2e:
                    77:bd:b9:65:ae:04:de:b1:d2:1e:eb:4b:72:63:d3:
                    7b:4a:28:99:3f:89:a8:e6:87:ed:1c:b2:d9:e1:49:
                    54:56:b4:64:ee:0b:1b:d3:4e:91:a6:1b:47:00:ed:
                    99:58:09:c7:aa:e2:5c:b4:0c:dd:c8:f4:e1:a8:c1:
                    31:1c:8c:de:08:55:f7:89:3d:26:2b:0a:3b:bd:3f:
                    20:a3:02:4f:b8:a4:f4:25:9c:07:65:f8:a9:31:ce:
                    99:27:44:61:d2:9e:29:65:e6:7b:ed:9d:92:94:f8:
                    3c:25:4e:72:b5:f7:49:60:d8:e4:80:c0:51:79:9b:
                    1e:29:f9:03:b7:9a:29:1b:07:3a:95:7e:ce:42:38:
                    78:d3:ed:48:87:0f:10:4b:30:c2:9b:a5:01:fe:71:
                    c2:81:e5:62:d5:00:74:d2:cd:ac:7a:80:c5:43:16:
                    26:0f:26:8a:fb:34:c2:c8:a3:12:28:7f:11:f9:d2:
                    5f:6f:10:11:12:5d:01:f8:93:91:31:2c:ad:2a:13:
                    c8:0b:47:30:89:68:6c:93:a4:81:1e:97:4d:72:ca:
                    f8:90:34:45:97:8d:55:67:a9:bf:79:75:0d:14:55:
                    1f:32:c2:2c:01:a7:62:53:da:47:16:aa:ff:dd:3c:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:76:5C:BA:5A:DE:27:7F:0E:A0:12:5E:83:B7:42:05:3D:E3:C0:11
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:07:c4:8e:87:8a:a8:46:e7:f4:2e:99:1d:68:15:ff:39:30:
         11:e5:92:b5:6b:f9:75:96:01:3c:8f:ba:c1:77:a1:b3:f8:a1:
         e0:f5:12:fd:b6:b8:15:9b:23:7c:d2:5c:d8:dd:3a:4f:35:cf:
         60:d5:17:a8:53:c3:77:72:e5:17:7f:a8:32:06:90:2b:74:3d:
         44:90:e3:5e:a3:e0:4d:3d:0e:97:53:5c:63:82:d8:27:a5:09:
         21:2b:59:e4:a6:90:f0:d3:51:5e:b0:e4:49:3f:3d:56:e3:59:
         f1:8d:ad:08:d8:24:71:09:aa:0e:cd:78:a9:83:08:c9:ff:9d:
         17:6a:0a:86:83:17:31:8a:b3:88:ce:52:0d:17:7d:a0:f3:fc:
         17:40:22:2e:6c:34:67:e1:a2:2f:5e:5f:e6:38:13:1c:1d:32:
         a9:e7:c1:ee:4a:c8:bb:df:c7:0c:52:4f:b6:72:d0:a0:e9:b8:
         9f:e1:ca:a5:e1:ac:c4:73:47:4f:c4:37:e6:24:a8:b3:3d:36:
         09:38:99:57:f8:d3:80:44:dd:18:f3:7b:10:98:db:cb:fd:a2:
         32:56:bb:93:82:00:3b:ee:fc:34:35:7f:5f:de:98:9e:49:26:
         96:9a:e5:35:50:19:54:c9:75:d4:22:42:e1:e4:ac:fa:70:ce:
         78:75:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:09 2025 by rpki-client on console.sobornost.net