Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa
File:                     3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          OG4NbHehRV/16MnHtIISwpkTui5m6VNdpTrO3MiO4Bg=
Subject key identifier:   63:12:52:84:9A:8D:26:08:C6:AD:92:DC:6C:AE:75:04:88:62:42:2E
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       3694559001D21441B0FC9E5831EDFD6040CD346F
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa
Signing time:             Thu 06 Mar 2025 09:19:44 +0000
ROA not before:           Thu 06 Mar 2025 09:14:44 +0000
ROA not after:            Thu 05 Mar 2026 09:19:44 +0000
asID:                     262323
IP address blocks:        138.185.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:94:55:90:01:d2:14:41:b0:fc:9e:58:31:ed:fd:60:40:cd:34:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Mar  6 09:14:44 2025 GMT
            Not After : Mar  5 09:19:44 2026 GMT
        Subject: CN=631252849A8D2608C6AD92DC6CAE75048862422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:0f:ed:df:a7:68:61:99:0b:54:4b:dd:3b:
                    08:ff:d1:24:49:fc:06:3d:62:f5:81:0d:ac:9e:1d:
                    d2:2b:85:ce:08:11:df:be:9d:f1:e0:cc:a9:59:6a:
                    2a:87:ed:df:72:44:31:7f:c2:4f:23:7a:09:95:1b:
                    03:43:09:9c:29:a3:df:c6:31:12:43:99:1c:02:90:
                    a8:6b:33:86:7f:a0:e3:27:2d:ff:9e:44:12:80:85:
                    de:19:27:ec:62:32:fc:96:ee:ff:58:c0:6a:ad:c3:
                    6a:59:03:0d:9c:53:a3:b2:cc:4e:b0:ac:d5:2f:b5:
                    e9:f0:fc:ba:05:7a:c0:1a:ab:2a:39:6a:f3:e0:ce:
                    70:e1:d3:c1:30:eb:9c:62:72:e0:19:4e:58:cf:8d:
                    92:53:e0:f6:93:f7:e8:66:5f:37:97:7a:59:9a:26:
                    df:85:e8:b7:4c:48:7e:04:36:1b:c2:79:da:b6:13:
                    5f:0e:d3:49:4b:bf:bf:54:f5:fe:8f:c7:52:65:96:
                    a6:76:12:f4:2a:90:33:10:40:d0:a0:9a:fa:0e:8a:
                    de:2e:6e:c6:e1:60:54:24:5e:86:07:ed:bc:8c:14:
                    a0:1c:cd:07:32:b8:93:66:fc:0e:46:72:41:be:42:
                    5f:6c:c5:fb:16:b5:99:3a:2d:8c:3d:7a:4c:49:57:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:52:84:9A:8D:26:08:C6:AD:92:DC:6C:AE:75:04:88:62:42:2E
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:95:3a:35:7f:09:44:20:0a:17:b0:50:73:a1:b8:b0:6c:
         66:15:b9:9b:68:ac:bb:22:c9:29:0b:c6:a1:f0:30:c3:a0:d1:
         7a:3a:b7:42:f2:51:69:ed:9a:92:95:04:cc:cd:30:f2:3f:46:
         5f:e2:a5:b9:72:24:cc:1b:74:76:3d:c4:2e:91:a9:52:9f:89:
         b1:33:ff:a2:90:b2:07:7e:00:bf:af:2d:1c:e4:91:7e:4e:46:
         6a:94:5c:32:9a:c0:70:88:7b:ce:fd:4a:1d:7c:6b:68:0b:ff:
         ae:72:3a:70:e2:55:db:ad:93:d2:c3:2b:ae:a3:71:2e:4c:3c:
         68:71:7c:5f:58:90:f0:2f:26:6a:78:dc:4d:6e:a4:c5:21:8a:
         20:48:43:4c:e7:0d:bc:89:c9:f4:65:e7:ec:2d:ed:93:1d:13:
         3e:3b:c0:ed:37:cd:01:bc:fc:b7:91:3f:55:c8:28:ad:55:94:
         bc:ac:37:76:95:42:e2:b9:88:ae:d3:60:75:a3:1f:23:19:68:
         70:8f:50:ca:37:8a:2f:a6:50:86:90:1d:4b:54:49:9a:7e:d2:
         b3:77:87:b2:2d:a7:e4:4e:91:bb:07:e4:16:10:b1:cd:09:ab:
         21:44:7b:a0:33:98:63:3b:6a:64:fe:77:51:54:39:54:4e:01:
         ba:05:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:39 2025 by rpki-client on console.sobornost.net