Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
File:                     3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa (raw, json)
Hash identifier:          m5UL09LusbduqAyFi7IIUNBtwnbiEzU2jhtjZt1dQDI=
Subject key identifier:   10:EA:B4:54:52:0A:9B:0F:77:8E:D2:BD:B0:77:48:2E:D1:7A:AE:70
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       6CD4A2CF1F9B45D3822A8EF5BD88258664EF7123
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
Signing time:             Thu 06 Mar 2025 21:59:19 +0000
ROA not before:           Thu 06 Mar 2025 21:54:19 +0000
ROA not after:            Thu 05 Mar 2026 21:59:19 +0000
asID:                     263897
IP address blocks:        138.204.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d4:a2:cf:1f:9b:45:d3:82:2a:8e:f5:bd:88:25:86:64:ef:71:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Mar  6 21:54:19 2025 GMT
            Not After : Mar  5 21:59:19 2026 GMT
        Subject: CN=10EAB454520A9B0F778ED2BDB077482ED17AAE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:95:bb:98:e9:c8:5d:66:1f:09:df:5d:36:
                    71:bc:48:cb:f1:e8:dd:fa:de:49:ee:9b:db:78:37:
                    eb:f5:ac:4a:e5:a0:e8:e2:cc:40:30:17:a6:14:48:
                    36:3c:1c:76:6d:55:14:47:25:d6:fc:7a:b4:d9:5d:
                    d4:9a:2f:9c:0d:dc:f3:2d:1e:67:5e:5c:30:43:94:
                    02:64:2a:97:61:22:0d:b8:73:6b:17:2e:a1:62:33:
                    17:c3:ba:52:90:fc:94:c4:79:d6:85:3f:d5:1a:7b:
                    42:a9:e7:70:66:d7:33:96:4b:08:5b:7c:52:a2:fd:
                    25:0e:65:50:52:ff:b5:76:32:c2:21:3c:e7:c4:7d:
                    63:9c:b5:b1:77:fe:6f:3f:e5:56:9c:7c:a4:9b:a7:
                    01:91:24:77:b4:21:7a:78:a8:a7:e7:c0:a6:51:90:
                    1d:77:95:9a:84:2a:4f:13:e3:15:0c:48:9f:bb:d5:
                    23:87:2f:41:27:e8:f7:dc:b2:47:26:84:15:25:34:
                    e6:d3:de:68:93:5f:5f:b6:9b:c4:55:70:75:df:3a:
                    87:41:13:f0:84:8e:42:d5:17:2c:d2:1c:f2:17:7a:
                    40:9c:0e:93:ed:47:18:51:72:6a:4e:5d:79:d4:ab:
                    d9:71:fe:a5:a5:eb:aa:85:ec:6e:73:71:31:7a:d2:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:B4:54:52:0A:9B:0F:77:8E:D2:BD:B0:77:48:2E:D1:7A:AE:70
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:32:50:44:17:47:8d:15:46:17:67:87:9b:f1:c9:00:78:83:
         8d:0e:85:e0:f3:c0:e5:b2:a6:47:57:c3:30:7e:96:ab:03:3a:
         53:92:ab:07:fd:e0:af:4a:b6:11:16:8f:34:ca:ff:b7:e3:b9:
         d2:c3:6d:c4:03:d0:b4:7e:ef:3e:91:42:fb:94:40:3d:3d:a1:
         c6:1c:d2:b1:53:7d:28:fd:bf:31:2a:d2:e0:d0:c1:eb:69:0f:
         28:a3:79:bf:68:d7:e3:96:de:0e:3b:ed:9a:3f:c9:7f:c0:94:
         92:90:eb:7a:6c:8f:68:6b:65:ff:ef:cb:0f:25:e8:35:b2:45:
         3f:5c:86:e1:72:d2:6b:6f:06:ad:9d:49:83:08:c7:28:17:6a:
         93:ba:82:97:a7:e1:bb:ce:4b:52:2f:e7:70:81:7d:d7:a3:9d:
         51:3d:16:67:ab:be:df:ae:90:cd:45:9e:7a:ed:b1:c4:25:86:
         be:29:6c:24:84:b9:da:ce:23:a4:ab:72:ec:82:dc:9c:12:65:
         7a:0d:cb:7e:66:09:62:18:ab:3a:4f:70:d3:e8:ac:4e:19:77:
         72:59:1a:0c:c2:e8:cf:42:3c:69:41:2b:3a:bd:1b:fe:92:46:
         d3:a3:b6:e5:67:10:39:4f:e0:97:76:61:4a:20:da:32:6a:0c:
         6b:68:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:20 2025 by rpki-client on console.sobornost.net