Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/3133382e39392e3135322e302f32322d3234203d3e20323634323035.roa
File:                     3133382e39392e3135322e302f32322d3234203d3e20323634323035.roa (raw, json)
Hash identifier:          VfTQ6fke+FHbeHWRz2OKgaOCEqqGpef93NXqM3A/+fI=
Subject key identifier:   4C:4B:90:2B:20:B5:F5:EB:DB:E2:3F:1F:72:AA:4B:BB:94:B0:E9:30
Certificate issuer:       /CN=C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0
Certificate serial:       2876964639C07B2B117A5223303C36D3A5A8F1BA
Authority key identifier: C5:36:F8:C5:CC:F1:0D:FD:8F:FD:C5:30:4A:B2:9C:6F:44:DE:13:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/3133382e39392e3135322e302f32322d3234203d3e20323634323035.roa
Signing time:             Fri 06 Dec 2024 04:16:33 +0000
ROA not before:           Fri 06 Dec 2024 04:11:33 +0000
ROA not after:            Fri 05 Dec 2025 04:16:33 +0000
asID:                     264205
IP address blocks:        138.99.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.crl
                          rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:76:96:46:39:c0:7b:2b:11:7a:52:23:30:3c:36:d3:a5:a8:f1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0
        Validity
            Not Before: Dec  6 04:11:33 2024 GMT
            Not After : Dec  5 04:16:33 2025 GMT
        Subject: CN=4C4B902B20B5F5EBDBE23F1F72AA4BBB94B0E930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:a5:a9:6a:67:eb:29:78:77:ef:33:38:8d:
                    3d:f2:d5:2a:66:d6:0e:14:8b:7d:78:84:8b:35:28:
                    db:b8:ee:46:89:08:7d:53:74:7c:1e:bb:0f:9e:3c:
                    72:72:0c:27:82:0a:15:89:58:65:43:6e:1a:81:4d:
                    dd:a7:f5:ae:4b:6a:c2:fb:10:b0:3b:cf:71:51:c7:
                    0e:25:9a:4b:c7:5a:98:9e:cd:bc:de:e1:6e:ec:c7:
                    50:d9:77:88:e6:05:19:25:f3:52:04:fb:e7:d6:bb:
                    ab:70:8b:ab:20:cc:2f:f6:1f:09:0b:da:5e:82:40:
                    27:64:40:31:0d:61:d8:1f:57:7e:ee:09:27:2c:89:
                    1a:92:36:98:b2:31:ad:9c:15:35:0a:c5:ac:92:5f:
                    46:63:04:7f:4a:4e:d1:d1:d9:e7:97:24:22:f6:9b:
                    83:f9:aa:9a:2c:30:71:d5:d2:bd:54:46:03:f0:83:
                    48:0c:30:91:50:3f:5b:a5:95:ad:f8:b9:fd:9d:8e:
                    07:3f:5b:3e:48:3e:b0:25:81:33:30:0b:b5:91:ad:
                    a6:9d:67:fc:01:0a:71:d8:d0:2a:98:70:ea:9e:71:
                    dd:3d:30:96:9f:b4:31:18:a7:6a:de:9f:4c:33:62:
                    07:0f:3d:9a:a0:f2:3c:12:1a:de:9c:30:e3:ab:54:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:90:2B:20:B5:F5:EB:DB:E2:3F:1F:72:AA:4B:BB:94:B0:E9:30
            X509v3 Authority Key Identifier:
                keyid:C5:36:F8:C5:CC:F1:0D:FD:8F:FD:C5:30:4A:B2:9C:6F:44:DE:13:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/3133382e39392e3135322e302f32322d3234203d3e20323634323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:2a:b1:07:3d:b2:8c:b6:2f:d6:f6:5e:09:c2:d2:19:58:
         50:b6:af:42:d5:20:32:fe:29:34:b8:ba:9b:21:64:21:26:8d:
         bd:37:18:28:47:46:b9:dd:61:02:1b:58:20:8d:65:a6:ef:1c:
         bd:16:e4:62:e2:e2:26:d8:a9:64:8e:c7:3b:f5:af:15:6a:f7:
         43:6f:97:3a:73:e0:dd:5b:59:9e:6d:6b:58:10:3a:37:45:f9:
         8a:5b:2e:7c:8c:82:16:aa:9c:9c:c3:3f:08:5a:7d:e0:c3:22:
         d2:8f:4e:9b:9d:93:4e:26:04:e2:d6:f4:e2:7a:b7:b0:dd:91:
         59:ff:6f:f6:8b:49:d7:be:1f:3f:cf:f7:05:65:4c:50:76:48:
         9d:0f:a3:e4:f3:e2:d2:45:bf:d7:d5:f7:18:21:c1:ff:d4:16:
         d7:b7:98:8c:0c:f4:be:6a:fb:f7:85:f9:f4:a6:1f:4e:6e:54:
         04:cb:12:39:10:41:73:da:6d:95:8e:3c:80:f4:5e:cf:76:8c:
         97:87:65:c2:e7:2b:7a:05:09:ef:3c:2e:19:14:fc:cd:ff:ba:
         80:57:c7:bb:a1:42:aa:61:61:00:af:75:82:94:cf:1f:3b:83:
         c3:aa:6c:54:92:ff:5a:5c:c1:e5:8a:17:78:23:ca:31:37:13:
         59:8f:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:52 2025 by rpki-client on console.sobornost.net