Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa
File:                     3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa (raw, json)
Hash identifier:          QK00rYq5ZWV0YhSkUw1Hgo2Cy2aBlZ7HKqc3o5/lTsk=
Subject key identifier:   D1:7A:A9:94:96:10:1B:86:5A:AF:D6:D4:6E:E3:85:65:6B:39:CA:AA
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       710C521B210A34140C6A6204B33745ECD9C3EF02
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa
Signing time:             Thu 06 Mar 2025 18:40:26 +0000
ROA not before:           Thu 06 Mar 2025 18:35:26 +0000
ROA not after:            Thu 05 Mar 2026 18:40:26 +0000
asID:                     40356
IP address blocks:        189.126.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
                          rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0c:52:1b:21:0a:34:14:0c:6a:62:04:b3:37:45:ec:d9:c3:ef:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Mar  6 18:35:26 2025 GMT
            Not After : Mar  5 18:40:26 2026 GMT
        Subject: CN=D17AA99496101B865AAFD6D46EE385656B39CAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:62:82:98:31:7e:1a:3f:0e:cc:b6:c2:44:
                    7a:94:41:eb:35:84:96:1a:ba:b9:c0:20:9f:aa:2d:
                    ce:ae:7c:44:bc:0a:99:0b:43:9f:b9:35:2e:d8:24:
                    94:55:63:31:e9:0b:78:e7:fa:d3:56:35:39:79:2b:
                    1c:a1:5f:cc:25:dd:62:ed:2b:0c:9b:43:11:e7:63:
                    de:8e:fb:6c:e7:90:33:16:1e:d8:d9:07:fb:08:ee:
                    82:89:e7:c9:73:50:76:70:cb:4d:d6:b9:76:f5:2c:
                    89:95:b1:f6:91:d1:6e:c8:2a:9a:c7:a7:ed:49:f9:
                    b2:d7:c5:00:e5:ac:49:0c:bf:ec:17:39:b7:f0:0f:
                    35:7b:80:90:92:d9:26:e6:d5:f6:76:21:36:ee:e3:
                    c4:ad:52:df:49:43:1f:c3:17:7b:54:52:d5:91:4f:
                    06:96:36:56:cc:59:72:d6:35:83:c1:7f:d3:d5:69:
                    da:3d:e0:57:38:05:8d:30:cf:e8:06:be:f4:48:ee:
                    22:45:ea:76:0a:6b:2e:8b:19:8a:7b:fe:c9:16:a2:
                    d1:dc:09:3e:67:9c:b0:0d:ff:61:8d:b1:7f:0a:e7:
                    43:a3:04:66:76:6b:89:4a:66:4c:2b:81:68:cc:05:
                    20:ca:4c:0d:74:28:53:eb:e2:e1:4b:a0:27:0d:6d:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:A9:94:96:10:1B:86:5A:AF:D6:D4:6E:E3:85:65:6B:39:CA:AA
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:74:8f:99:1c:68:6f:19:12:52:a1:a2:9c:69:1d:7b:5c:
         3f:1b:c4:8c:a3:8c:58:f6:60:0b:55:7b:dc:fa:78:1d:46:15:
         66:93:2e:af:04:ed:ce:c1:db:fe:09:80:a4:38:09:0e:e1:b0:
         ba:df:d0:1e:bf:2e:35:50:cb:6c:65:93:6a:c1:ab:e4:13:83:
         50:7e:01:4e:01:6d:97:89:d0:d4:ab:cd:88:33:a1:ee:95:34:
         de:e6:f8:b3:6d:ab:51:76:f2:ed:c5:7d:4b:eb:fd:a0:14:ef:
         47:fb:53:76:5c:4e:81:f8:ae:4f:20:66:a4:af:0a:24:fd:8c:
         82:85:6e:04:9d:b1:eb:18:3f:6f:da:a9:e6:dc:21:16:d7:78:
         cf:6b:03:80:c2:45:52:00:43:52:ab:b9:31:a7:a5:a1:cd:9e:
         b5:33:91:d1:b2:cb:4c:d9:1a:47:a8:a0:c8:ec:0c:6d:72:49:
         b1:ad:41:20:11:8d:ea:16:28:d6:3d:f3:42:97:0d:16:7f:bc:
         24:5e:55:57:a3:92:43:56:9e:e2:a7:e3:ed:ce:f1:8d:c2:e1:
         15:10:50:87:6a:d6:29:98:da:35:38:00:7f:85:89:e0:97:30:
         02:c3:90:4a:d4:54:99:83:20:a9:dc:90:97:60:85:53:30:8f:
         00:49:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:25 2025 by rpki-client on console.sobornost.net