Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/3138312e3233332e342e302f32322d3234203d3e20323731343534.roa
File:                     3138312e3233332e342e302f32322d3234203d3e20323731343534.roa (raw, json)
Hash identifier:          LHYzQnL9782ox3/tKNyWpNXphSHHyR0SWjvRY0Xl6pg=
Subject key identifier:   91:D4:44:27:6D:C7:17:50:0F:2F:70:43:83:91:BA:1C:38:AB:2E:02
Certificate issuer:       /CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
Certificate serial:       3059D3B9B0FE128EA207126A9A620B9B38855634
Authority key identifier: 1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/3138312e3233332e342e302f32322d3234203d3e20323731343534.roa
Signing time:             Thu 06 Mar 2025 13:40:31 +0000
ROA not before:           Thu 06 Mar 2025 13:35:31 +0000
ROA not after:            Thu 05 Mar 2026 13:40:31 +0000
asID:                     271454
IP address blocks:        181.233.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.crl
                          rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:59:d3:b9:b0:fe:12:8e:a2:07:12:6a:9a:62:0b:9b:38:85:56:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
        Validity
            Not Before: Mar  6 13:35:31 2025 GMT
            Not After : Mar  5 13:40:31 2026 GMT
        Subject: CN=91D444276DC717500F2F70438391BA1C38AB2E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:95:39:3a:9a:10:81:a6:64:61:64:3f:26:
                    7f:2e:ee:28:79:15:95:e5:ce:a0:76:97:36:4d:bd:
                    05:69:ab:52:96:c1:ba:b8:c9:69:e7:8b:77:e1:1c:
                    8a:5b:42:c4:b4:9e:e2:8e:ef:51:9f:3c:24:72:f4:
                    fe:e1:08:70:1a:b8:92:e0:2e:59:9d:b9:30:14:f1:
                    9b:66:91:26:b5:2e:10:b9:90:48:59:a3:aa:2d:a8:
                    c7:f5:f6:64:65:95:08:75:47:00:40:b0:e0:23:8c:
                    c2:51:05:bb:44:a3:94:50:09:38:49:aa:29:a0:32:
                    ea:c0:b3:54:dc:6f:f9:ff:23:43:0d:42:a6:5f:63:
                    4b:d3:35:8b:1e:fb:1f:01:56:5a:ae:31:38:80:37:
                    14:be:7e:93:9d:c8:f6:e0:3c:fb:6b:38:5f:e8:67:
                    21:91:4b:3b:6e:68:4c:ef:8a:da:2c:c6:5a:ef:c0:
                    ae:ed:58:c7:ca:df:84:1a:5b:0c:fb:d4:ab:62:f3:
                    b4:41:2a:b6:0c:4e:1f:10:15:9e:36:ec:a2:1e:9e:
                    97:f7:11:1d:80:a5:b6:6e:b4:57:83:cf:e5:d7:23:
                    f0:56:8e:17:3a:be:27:01:49:99:cd:5f:65:fb:77:
                    a7:06:49:67:6c:20:80:6c:23:19:be:4d:3d:75:5b:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D4:44:27:6D:C7:17:50:0F:2F:70:43:83:91:BA:1C:38:AB:2E:02
            X509v3 Authority Key Identifier:
                keyid:1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/3138312e3233332e342e302f32322d3234203d3e20323731343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:fa:4d:a0:26:d0:72:75:de:38:8b:87:64:6a:64:a8:6f:
         ba:f5:e8:d5:dd:05:3b:81:2d:bb:15:ef:d1:8c:7f:08:60:52:
         e5:5c:83:18:9a:6a:29:82:70:f0:cd:54:85:37:38:9a:fe:87:
         28:61:57:f6:2f:e4:62:b1:b6:43:55:8c:9f:e7:2a:0c:d8:4c:
         91:32:b9:2c:0d:c5:46:1b:55:23:8f:c3:75:e5:9f:30:7f:18:
         6b:5e:c4:2c:7b:ca:68:ec:a4:84:ba:ac:bf:2e:1e:8e:22:40:
         1c:ff:81:67:46:65:6b:48:16:89:9f:1b:ca:08:f9:74:b8:18:
         ba:35:3b:88:99:ef:bd:4f:ba:5e:40:dd:fc:99:d5:3c:11:64:
         b0:a3:3c:e1:6a:f0:8d:f0:26:57:87:a0:82:4a:7b:39:e0:29:
         d4:49:70:50:8a:c4:d5:69:f2:de:19:1b:1d:65:f6:78:ef:11:
         09:1a:7d:be:f7:4a:b9:e5:34:7a:8c:dd:01:93:e4:4c:57:9b:
         f9:b4:68:1e:07:e7:e4:2e:ab:9f:1a:71:6e:47:da:cb:ba:71:
         51:e7:bd:7a:23:c0:68:53:ac:d4:aa:e7:d9:89:58:3c:e5:ed:
         1f:66:ec:64:98:a6:05:d3:21:65:87:9f:3e:31:ab:52:c6:93:
         2c:bf:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:22 2025 by rpki-client on console.sobornost.net