Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          x/CDR4mYR42cKhCzFyZYGNGDahKpPTtQcNIeClK+Zw0=
Subject key identifier:   98:1D:DD:64:94:B1:2E:36:8F:AE:1A:1D:67:EF:0F:44:C5:FB:B8:80
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       576B17D1D3B976E72151D4133C4AED71A86F7A72
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:40 +0000
ROA not before:           Wed 16 Apr 2025 15:00:40 +0000
ROA not after:            Wed 15 Apr 2026 15:05:40 +0000
asID:                     264422
IP address blocks:        131.221.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6b:17:d1:d3:b9:76:e7:21:51:d4:13:3c:4a:ed:71:a8:6f:7a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:40 2025 GMT
            Not After : Apr 15 15:05:40 2026 GMT
        Subject: CN=981DDD6494B12E368FAE1A1D67EF0F44C5FBB880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:17:3e:90:9c:2b:19:03:18:e1:75:37:2c:
                    42:d4:a6:94:c3:76:4f:75:5b:4e:66:ce:a8:6a:69:
                    52:ca:c7:b0:9b:db:8c:e1:b9:5f:fb:06:f3:1f:4d:
                    c2:8f:78:71:f4:f4:5b:18:36:a6:8c:50:fe:18:cc:
                    b2:a5:87:29:ca:86:ae:30:b0:a8:99:24:5e:d9:93:
                    bb:af:e5:b7:a7:c8:fb:75:f4:f9:cc:c1:05:f7:37:
                    6f:f1:42:b3:8c:cc:3e:fe:47:16:b8:74:06:66:a2:
                    31:1a:ec:a1:2d:6f:86:ac:b3:42:0b:cb:50:d9:72:
                    03:33:66:02:9a:32:75:f2:28:73:96:d6:84:d1:64:
                    7b:90:7d:b1:bc:fa:20:39:4c:f1:ef:40:af:40:a4:
                    62:4d:fa:dc:a9:fc:0b:f9:02:89:8d:01:4d:e7:26:
                    f4:23:17:fb:5f:36:50:bc:d3:89:4e:22:33:5c:e8:
                    7c:f3:f1:4a:29:f3:03:9d:ca:2d:1f:9c:ef:d1:0c:
                    8e:3a:57:b4:6f:a2:a0:0f:1a:0e:12:e1:6d:c5:30:
                    7a:68:7c:5f:b5:b7:e4:b0:d8:d7:55:e3:1e:a2:1c:
                    47:98:0d:02:7b:82:b6:b7:d2:99:b4:0b:9f:3a:be:
                    a6:9e:e8:35:78:90:b7:2c:e3:bc:35:1e:cf:4d:8a:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1D:DD:64:94:B1:2E:36:8F:AE:1A:1D:67:EF:0F:44:C5:FB:B8:80
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137342e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:45:99:89:ec:cb:10:06:e3:b3:c6:a6:86:ae:41:7a:6a:78:
         33:ba:4c:62:ac:07:48:51:fd:4c:a1:8c:85:fc:d9:b4:d1:49:
         dd:d3:7f:56:cc:2e:d2:13:5b:b8:28:80:48:fd:05:b1:b8:bc:
         c7:e8:ef:a7:6c:61:ee:d5:59:af:f4:72:55:2e:71:56:c4:06:
         db:d4:44:b0:9c:9f:99:20:b1:a8:7b:37:da:31:f6:f7:2f:32:
         29:e6:78:81:5d:70:82:7f:4d:f7:61:54:c2:00:2f:24:cc:cc:
         95:31:af:16:a0:0d:ed:e6:11:ed:5d:80:f6:fb:b3:74:e9:f5:
         cb:58:76:61:1e:a8:c8:73:13:09:07:12:16:6c:43:61:b5:8c:
         c4:b6:c0:0f:2c:df:d9:61:10:09:a4:ed:6b:e8:fb:d6:01:40:
         16:63:15:03:f8:04:8b:99:fe:dd:f9:f6:85:b7:c7:b8:3b:8b:
         0f:5c:2d:36:46:73:37:ba:ee:c6:c7:a0:c5:c7:25:3a:22:2f:
         3f:a9:5b:4d:2f:86:07:f3:57:94:98:e7:32:69:0d:72:41:1f:
         98:85:ce:e4:c6:b1:4e:e4:a7:61:81:a2:29:81:2c:25:9d:8c:
         d9:19:44:3c:4a:16:45:56:6e:04:de:99:07:27:f9:bf:9e:f5:
         54:e9:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net