Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (raw, json)
Hash identifier:          hTllzSlyYZIUxFFiRC9FaptJjS82SdVxBDfUFGJc3m0=
Subject key identifier:   48:A6:E3:E1:3E:63:2A:1D:FD:64:88:37:76:4D:4A:D2:BB:79:F7:B9
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       7F8C1A9C7E16F175E7CCD35A6CA201CD6A73D728
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:06 +0000
ROA not before:           Tue 15 Apr 2025 01:52:06 +0000
ROA not after:            Tue 14 Apr 2026 01:57:06 +0000
asID:                     263920
IP address blocks:        138.185.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8c:1a:9c:7e:16:f1:75:e7:cc:d3:5a:6c:a2:01:cd:6a:73:d7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:06 2025 GMT
            Not After : Apr 14 01:57:06 2026 GMT
        Subject: CN=48A6E3E13E632A1DFD648837764D4AD2BB79F7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:e9:a3:51:0b:44:1f:f7:35:a5:aa:bb:8a:
                    c5:e3:3f:30:ee:c3:90:05:33:be:cf:8c:c0:8a:08:
                    87:92:18:62:3b:0e:85:ca:57:5a:14:10:10:f6:e2:
                    62:54:48:9d:a9:0a:93:90:62:0b:a6:8b:37:dc:8f:
                    70:46:0d:df:24:82:68:8d:17:ce:e2:fc:06:a7:35:
                    ef:6b:76:cf:7a:ba:aa:14:ad:86:28:fd:09:3c:a2:
                    44:45:62:4f:c3:59:72:04:70:1e:ca:ee:07:62:db:
                    66:59:a9:b6:e2:35:8c:9a:3b:73:24:2f:ee:3d:ae:
                    3c:db:91:a6:85:cc:7a:6e:eb:58:98:59:d4:29:d7:
                    03:1e:bc:a7:4f:82:e0:e6:d8:07:5b:a4:16:b7:50:
                    81:27:1c:52:01:3d:88:d1:d6:84:29:b3:ad:a2:5b:
                    9d:75:30:d8:8c:4c:87:be:a6:d6:4e:eb:61:7c:84:
                    96:a8:f8:af:da:f8:0a:43:14:20:e1:33:8a:6c:3c:
                    5d:f6:ca:eb:4a:1a:c0:da:b7:c6:11:ff:12:fb:8b:
                    de:b5:ad:49:d8:95:c5:bb:aa:1f:b2:d2:14:e3:f2:
                    56:15:1e:2f:3c:15:ee:46:e7:c4:02:da:e4:70:82:
                    67:b8:11:1c:e8:52:a2:e2:b0:d1:6c:15:c1:eb:b3:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A6:E3:E1:3E:63:2A:1D:FD:64:88:37:76:4D:4A:D2:BB:79:F7:B9
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:ab:09:cd:6e:f6:d8:fd:2e:50:04:a8:56:1f:2f:ef:cd:
         fb:a0:a8:86:95:3c:10:11:46:c5:bc:2e:2a:6c:1e:c6:f3:ab:
         86:49:31:cc:2b:23:82:82:cb:3a:40:8f:df:c6:5c:9a:aa:95:
         41:8d:70:f2:5d:e8:ee:da:41:35:d3:02:cf:3a:00:9b:39:6d:
         0c:22:6b:09:b8:b9:c2:fb:93:dd:94:29:7f:74:6f:f4:03:01:
         5d:20:12:d6:9a:70:c3:6a:3b:b8:bc:cf:9e:25:7d:26:60:ea:
         45:68:2d:eb:43:a4:1c:64:fa:b0:1b:45:b9:a0:db:52:71:a2:
         df:da:a8:f9:c9:3b:4a:19:60:32:d5:aa:d7:d2:b6:d0:a2:86:
         6f:85:01:9f:a1:9c:12:af:2b:71:19:87:74:8d:c1:84:f9:b9:
         73:bf:e8:5f:43:d1:e6:f4:ec:77:94:4d:f1:2c:d8:74:e2:94:
         41:27:3a:7c:51:c2:7b:6d:e8:96:8d:1d:0e:4b:d0:bc:d5:28:
         0f:72:d3:ad:05:9d:04:09:07:1c:cd:0c:05:10:e3:f3:58:61:
         7b:32:79:c8:0d:24:b0:90:7e:d8:45:c3:a4:e3:06:b7:f7:fe:
         a6:48:73:35:7f:73:fe:53:dd:4e:9f:73:9a:29:eb:b5:12:5f:
         5d:10:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:25 2025 by rpki-client on console.sobornost.net