Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa
File:                     3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=
Subject key identifier:   17:BA:CD:51:90:F1:B7:6E:96:15:10:51:20:07:64:A6:13:54:05:4C
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       3C270418318AA654C1C5D6C4444DE2D26642E07B
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 16 Apr 2025 00:29:40 +0000
ROA not before:           Wed 16 Apr 2025 00:24:40 +0000
ROA not after:            Wed 15 Apr 2026 00:29:40 +0000
asID:                     198949
IP address blocks:        138.99.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:27:04:18:31:8a:a6:54:c1:c5:d6:c4:44:4d:e2:d2:66:42:e0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr 16 00:24:40 2025 GMT
            Not After : Apr 15 00:29:40 2026 GMT
        Subject: CN=17BACD5190F1B76E96151051200764A61354054C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:1a:08:a4:e4:f9:87:c7:f6:c6:4b:f9:6d:
                    77:66:3c:5e:04:84:ca:fe:11:e2:c4:dc:78:ef:da:
                    f3:fd:20:c9:dd:f3:6f:a0:41:3e:fe:21:59:1c:c1:
                    65:d5:c7:f6:25:d1:8c:ea:6e:c6:6d:82:1e:07:b5:
                    db:7a:25:07:b5:7d:cd:df:e2:9b:78:87:cb:c8:e4:
                    ca:bd:41:67:b7:0f:18:84:a7:fd:8c:6c:25:8f:21:
                    c4:c1:74:9f:d5:17:b2:93:1a:26:c5:23:67:a5:a8:
                    df:67:b4:d1:24:be:33:d3:d0:8d:d7:6d:40:b8:e3:
                    03:f9:05:b4:d4:b9:30:29:b2:75:08:78:a5:21:8e:
                    5c:81:fe:0a:cc:7d:9c:55:bf:58:84:53:2d:d5:4f:
                    bb:5d:94:89:6d:50:99:55:7e:b2:4f:73:58:d4:f5:
                    05:a7:a2:83:ab:ee:a3:44:d6:a8:63:b5:46:41:49:
                    08:98:81:6d:af:33:66:87:7d:88:dc:4d:e0:44:28:
                    1e:8c:79:25:aa:4a:e9:bc:47:b2:80:2f:7e:b9:64:
                    8a:d9:15:3a:67:b9:33:30:af:f6:64:f5:7b:32:98:
                    09:4e:09:ad:88:1b:cb:0c:d2:f9:4c:a0:1e:a7:16:
                    89:6c:f3:b2:c9:da:89:7e:0b:5a:1e:86:3b:e0:ae:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BA:CD:51:90:F1:B7:6E:96:15:10:51:20:07:64:A6:13:54:05:4C
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:61:db:b4:48:20:22:c0:a6:a6:f3:a6:35:2e:28:d9:cf:17:
         24:7b:81:41:ec:9a:08:98:b1:ed:95:ec:e6:32:15:01:ae:18:
         d9:06:92:93:15:56:41:a9:39:ec:bc:bc:d7:ff:db:fb:d0:aa:
         73:ce:05:92:26:c1:f8:c9:90:66:7e:aa:40:60:03:a0:71:f5:
         05:bc:c5:cc:ef:21:31:0b:f3:1b:8f:11:13:1e:1e:80:f4:5c:
         d5:38:bd:d4:43:75:c1:e5:04:fd:3f:c3:5b:13:43:2b:49:51:
         43:41:96:ba:41:10:0b:f8:b2:8c:c5:77:3c:eb:f8:43:c4:cb:
         37:c4:dd:4f:88:a7:37:79:ac:d7:c9:68:3f:30:32:85:bb:b6:
         35:a0:9c:f2:03:45:ee:57:3a:c1:40:7d:42:a7:74:aa:43:ac:
         21:19:7d:e8:75:bb:76:2a:e4:d6:37:19:29:66:4a:29:85:dd:
         6e:e7:87:d7:a1:2a:a9:fc:a2:52:5b:82:2a:8c:93:0e:72:97:
         64:dd:20:4c:b4:f3:e8:bb:70:14:67:0c:34:63:89:a9:00:7c:
         86:72:21:37:dd:ba:11:18:b2:71:e5:0a:84:c0:23:7c:60:41:
         db:d5:51:a7:03:64:98:a7:b7:5e:09:ba:c0:11:ec:f2:0b:b4:
         d2:9a:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:16 2025 by rpki-client on console.sobornost.net