Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234382e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3234382e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          mxf06dr/b2ZP54j7/OAiWl1r4UTLhadVsqM38KRrtOs=
Subject key identifier:   39:FD:AA:A4:E6:FA:92:66:C8:97:E7:06:E5:95:36:41:E5:88:86:96
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       505FD0D4AE54FDC9A7F5D1DB45FF699E74EC19CE
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234382e302f32342d3234203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:48 +0000
ROA not before:           Wed 05 Mar 2025 21:54:48 +0000
ROA not after:            Wed 04 Mar 2026 21:59:48 +0000
asID:                     61951
IP address blocks:        201.219.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5f:d0:d4:ae:54:fd:c9:a7:f5:d1:db:45:ff:69:9e:74:ec:19:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:48 2025 GMT
            Not After : Mar  4 21:59:48 2026 GMT
        Subject: CN=39FDAAA4E6FA9266C897E706E5953641E5888696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:89:12:2f:54:7c:9b:7a:47:08:77:62:46:
                    a6:b8:4e:f5:76:dd:c2:05:6b:23:ab:ad:0d:99:06:
                    bd:72:e1:95:a4:33:44:98:cb:71:d5:4f:8c:7d:20:
                    30:66:28:cd:46:97:02:0c:d5:29:cb:75:f8:84:db:
                    d9:48:3f:fb:f4:80:5a:16:41:51:2a:3f:a7:f3:77:
                    0b:d0:b5:00:0b:c5:9a:d1:c5:08:94:52:cd:b3:53:
                    b0:09:68:51:94:15:55:67:96:e1:2e:30:0e:e6:e0:
                    f4:fd:d0:4d:0a:a4:4e:16:44:1e:9a:58:b1:78:c9:
                    aa:49:d6:07:e9:05:66:e3:41:51:38:ed:9e:d4:eb:
                    9c:c2:ad:e9:1c:40:71:7e:d6:c5:1b:5b:8d:2c:c7:
                    9c:c0:14:13:50:73:a8:36:af:b7:ea:84:d5:c5:0e:
                    1b:9f:d7:a1:aa:60:35:d1:3a:44:e7:f0:f0:0f:8e:
                    fb:3b:3e:ea:60:d8:8c:8e:10:1c:f5:7c:54:83:29:
                    7c:da:ec:1f:49:1a:f8:7f:17:bc:71:44:10:85:5e:
                    16:b2:15:ac:01:ec:2a:a3:db:bb:03:d0:d9:4f:ef:
                    ee:30:5a:a3:1a:8d:b3:90:80:1e:b5:e7:08:e2:b2:
                    0b:fa:cc:29:cb:00:12:b1:32:55:e4:b8:bc:44:65:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FD:AA:A4:E6:FA:92:66:C8:97:E7:06:E5:95:36:41:E5:88:86:96
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234382e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:77:2b:22:9a:01:31:96:47:db:27:4b:04:71:88:ed:13:
         d8:b1:18:37:a4:2d:7c:8c:e3:60:f1:97:78:3a:41:94:5e:b2:
         18:13:a5:81:6a:33:a0:95:26:44:4a:10:b5:cf:ee:71:48:71:
         0d:34:d7:ef:c1:6a:2e:1a:8b:e2:5f:d4:b6:42:3f:23:1b:69:
         4a:df:21:ab:38:35:60:30:11:93:3f:4a:9a:ce:a8:a0:24:4c:
         bb:c4:7d:55:aa:1b:b5:a0:7a:4d:8e:1a:68:fb:f2:3b:92:8d:
         67:3f:a3:61:5f:8d:31:b2:05:24:74:8f:a9:9d:21:8e:de:d0:
         76:59:36:31:a3:92:b9:dc:4f:dc:7f:70:ba:6e:9c:68:a9:68:
         83:bf:40:93:3f:83:5f:b6:23:e1:83:e8:c8:5b:cd:be:1f:74:
         75:bc:72:92:9d:05:08:a5:a7:46:5e:f4:fe:a0:66:35:3b:4c:
         1f:28:c6:13:7b:55:ea:a9:c1:c5:de:48:25:dd:5a:8d:34:4a:
         81:7d:b4:f8:ea:17:77:35:a6:9f:aa:02:b8:8a:6c:ec:cf:1c:
         6e:72:5b:08:7c:bd:3c:4d:02:5f:1b:9f:c4:e5:ea:34:e1:3b:
         c2:89:c8:20:11:59:7b:1f:7d:5d:09:4b:2f:8f:df:8e:45:23:
         52:7b:9a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:25 2025 by rpki-client on console.sobornost.net