Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa
File:                     3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa (raw, json)
Hash identifier:          r7g1cqPV9vkb9Mey/tAwmxXDoTMAh+dnONJYXrZUG80=
Subject key identifier:   7C:42:EF:C3:C6:1C:80:CB:B0:73:56:58:36:82:19:FC:D2:A8:04:3D
Certificate issuer:       /CN=39E9C8F360117C7F207DEE7951C1AD935707A727
Certificate serial:       7AF1B76CCEB90F45CA34F6685BEEFBFB8839BA8A
Authority key identifier: 39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     262630
IP address blocks:        131.100.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl
                          rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f1:b7:6c:ce:b9:0f:45:ca:34:f6:68:5b:ee:fb:fb:88:39:ba:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E9C8F360117C7F207DEE7951C1AD935707A727
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:78:43:8a:22:eb:a9:d7:76:4d:ce:f8:26:
                    d7:44:09:1d:ec:01:12:45:0a:4b:a8:4a:51:5d:4a:
                    32:80:bb:5e:a2:53:53:e5:9c:d8:fa:8e:ae:e2:af:
                    e9:a3:ec:c8:fe:c7:8c:89:86:f7:af:21:fd:2d:ac:
                    d8:31:ed:f9:3d:1b:13:14:2e:66:e7:ce:4a:bb:75:
                    9e:88:3b:74:dd:ff:4b:1d:e5:d5:03:a1:b2:49:10:
                    8c:38:39:56:30:da:50:43:f5:fb:05:b6:ab:72:76:
                    2b:18:9a:c9:ae:e4:2e:0b:52:7b:15:85:ab:16:15:
                    01:c5:db:46:92:5a:67:c4:f8:70:49:7e:ae:a4:bc:
                    3a:16:90:07:6b:e4:47:ca:62:f8:86:1b:39:13:86:
                    fb:5a:4c:37:4f:81:27:75:27:8f:24:f0:3c:52:b3:
                    f0:55:53:1e:88:3f:79:83:34:05:ac:2e:fe:87:7b:
                    04:e1:9d:6e:4d:1c:fe:6c:25:86:f8:00:b2:e8:0a:
                    c1:f3:0c:f0:d1:3d:ed:a9:ed:c0:ac:f6:36:d4:6f:
                    73:0b:b6:23:50:e9:5d:6c:47:26:85:7d:78:cb:6d:
                    8f:65:3b:80:ee:cf:77:17:96:40:17:a1:58:04:af:
                    ec:e3:9e:6d:bd:87:18:61:43:be:5a:d6:11:3c:09:
                    c9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:EF:C3:C6:1C:80:CB:B0:73:56:58:36:82:19:FC:D2:A8:04:3D
            X509v3 Authority Key Identifier:
                keyid:39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:52:95:83:e4:29:73:47:72:3c:c7:2e:fa:4b:90:83:82:72:
         08:2f:0b:33:e7:ed:a3:57:fb:52:97:d3:69:e8:ef:f4:48:ad:
         33:5c:b3:03:fd:6a:c1:18:c5:0f:c2:74:3a:2c:09:36:38:a6:
         a5:7f:77:c7:02:04:a1:4e:3b:77:a5:d9:90:ba:d8:dc:bb:ca:
         b9:b9:79:51:61:01:00:a7:78:ad:d5:86:91:45:1f:97:e7:6a:
         fe:5d:d1:75:da:2c:88:5b:be:91:90:53:8f:ad:2d:87:28:6b:
         9f:12:a4:08:06:f5:cb:0f:d6:12:78:10:d5:b5:de:b5:88:7f:
         d8:5a:f9:5c:09:4f:ff:04:bb:30:24:bf:d4:d5:e7:ff:a8:2b:
         9d:40:4c:6f:a0:0e:47:44:ed:e4:b4:5e:c2:f5:57:95:6e:49:
         b8:cc:15:7f:dc:eb:64:e0:e2:53:ea:76:0d:d4:51:c1:de:03:
         b9:39:93:5e:1f:5c:94:22:44:ff:7c:2b:80:bf:31:ad:0f:8f:
         a5:b0:02:ac:80:a6:c4:ed:ca:27:98:93:41:b0:6f:ed:8d:1d:
         c9:6b:70:bc:e6:01:4f:00:46:57:bb:08:59:4a:d0:25:02:60:
         dd:46:3a:9d:5b:f8:65:c4:a8:9b:eb:ef:52:a0:2c:8d:d2:5b:
         90:7e:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net