Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
File:                     3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa (raw, json)
Hash identifier:          OOoAw6ZgxmVuWbhgGKAFESeBISIAoSOG3xN0GfAvfCI=
Subject key identifier:   D0:BA:0E:4D:F5:9F:D1:82:B5:60:EA:84:CC:17:3F:0B:F9:0B:5E:DC
Certificate issuer:       /CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
Certificate serial:       04DFCC117AF1E5A6F2180BEF8FDA42E57850201B
Authority key identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
Signing time:             Wed 23 Apr 2025 14:52:29 +0000
ROA not before:           Wed 23 Apr 2025 14:47:29 +0000
ROA not after:            Wed 22 Apr 2026 14:52:29 +0000
asID:                     262820
IP address blocks:        138.117.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.crl
                          rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:df:cc:11:7a:f1:e5:a6:f2:18:0b:ef:8f:da:42:e5:78:50:20:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
        Validity
            Not Before: Apr 23 14:47:29 2025 GMT
            Not After : Apr 22 14:52:29 2026 GMT
        Subject: CN=D0BA0E4DF59FD182B560EA84CC173F0BF90B5EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:09:31:87:7f:dd:dd:ca:9f:2f:71:84:b6:
                    e8:3e:95:f1:d5:f5:37:09:65:6b:38:7f:66:4b:da:
                    27:4f:7e:bd:00:88:8f:17:a4:5e:a9:7c:e1:07:c1:
                    1a:2a:15:cf:ef:aa:47:25:9c:d5:d0:14:b7:f8:e1:
                    5b:3f:c0:af:70:01:b1:8c:82:67:e7:89:42:c0:bb:
                    43:c4:73:e8:95:38:c5:5d:40:71:8b:c2:79:d2:99:
                    85:b1:86:40:34:9c:97:f8:a1:a9:b4:18:a7:44:dd:
                    b6:fa:9d:07:70:eb:b5:fc:ce:e6:12:82:25:c6:40:
                    ce:6f:08:72:79:44:5a:b0:7b:5f:73:94:4b:54:f6:
                    da:7a:e3:2a:e2:d1:3d:45:3f:6c:95:ca:4a:9f:10:
                    d1:3c:3f:03:8b:50:f0:57:d4:af:d3:1a:33:f1:0e:
                    2e:3f:e3:88:f5:00:93:02:90:e8:72:3d:10:27:47:
                    89:b2:00:d4:10:6f:53:07:e4:3a:4f:a7:30:44:70:
                    e3:ea:d5:1d:aa:f4:ec:ab:50:3a:66:01:47:a7:ac:
                    49:c9:bd:a0:5c:f3:07:be:35:e2:c7:ef:67:d4:3b:
                    b0:4d:f0:f1:97:20:ad:6e:2b:82:d1:ee:c5:46:ab:
                    48:b3:8b:9c:80:1f:47:7f:19:51:ae:28:97:63:f2:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BA:0E:4D:F5:9F:D1:82:B5:60:EA:84:CC:17:3F:0B:F9:0B:5E:DC
            X509v3 Authority Key Identifier:
                keyid:F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:74:d4:f8:01:91:c4:af:d4:75:79:4a:22:d9:c1:7c:e5:
         cd:ac:39:ea:0f:44:5c:cb:49:9b:6f:b0:b7:3f:05:a8:26:54:
         4a:ae:81:ca:c8:71:f0:40:2e:52:f1:5c:e4:7b:1f:c3:f3:d1:
         82:5a:5d:f6:15:2a:7a:ef:24:dd:10:76:aa:00:9c:e6:f8:dd:
         0d:59:b7:be:3b:48:d2:84:81:73:9f:52:f9:b7:eb:20:93:1b:
         77:d2:88:20:1e:23:fa:1d:72:0f:a6:0b:42:78:3d:40:74:7a:
         96:07:04:1d:75:ee:0e:8a:01:94:94:6e:ed:20:e2:07:8e:d1:
         de:b5:64:a3:9b:04:a4:b8:39:e2:ed:aa:c7:af:71:89:6b:3c:
         f5:af:2c:fc:9b:a9:e7:09:a8:9b:38:1b:6b:1e:f0:ec:0c:d7:
         60:f9:a7:d5:6e:0a:ff:da:47:f8:59:28:f7:4e:36:30:64:0c:
         69:2a:19:71:27:b8:6d:e3:37:5d:a5:b2:06:b4:db:ea:5d:1d:
         29:2f:48:47:56:91:7a:8c:8c:4f:38:8b:43:de:54:be:ed:a0:
         90:1a:9a:2f:ae:f3:0f:5e:0c:5d:0e:2a:f9:27:9d:eb:92:ef:
         ce:b8:86:08:f6:15:ce:fa:72:e8:1f:94:a5:3c:b8:52:08:c0:
         7a:11:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net