Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa
File:                     3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa (raw, json)
Hash identifier:          GJ3/513EpRyf096gqf1uDBy1qnXuD0HIKDwKXqNQl/U=
Subject key identifier:   81:D7:D0:84:7C:9C:E5:E3:18:0F:40:86:36:E5:F8:A4:A8:90:5A:D1
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       517DFE283BA23A36B0353B0A0A0ABCBF3D0FEAEF
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     264212
IP address blocks:        138.99.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 05:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7d:fe:28:3b:a2:3a:36:b0:35:3b:0a:0a:0a:bc:bf:3d:0f:ea:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=81D7D0847C9CE5E3180F408636E5F8A4A8905AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:9f:e4:c7:74:2e:b0:e2:34:51:60:57:fa:
                    5a:30:bf:2e:b7:d4:6a:8a:94:91:de:96:3e:e9:bf:
                    93:3c:34:74:72:c4:8a:88:c9:c6:b8:ba:7e:86:9b:
                    fd:71:e7:82:b2:b2:28:2b:fa:ac:c9:70:26:dd:42:
                    96:93:3e:79:59:51:d3:84:88:c1:bc:0d:a5:91:2f:
                    8d:3e:b0:53:84:25:0a:29:9f:3c:5b:34:0e:97:3e:
                    41:fc:a8:21:aa:0c:3a:16:bb:2d:76:38:37:f3:02:
                    39:25:dc:92:55:97:c6:84:9c:02:64:f7:77:0b:be:
                    a6:63:55:d3:9c:1a:9d:1f:12:c7:15:68:66:02:6a:
                    59:88:d9:58:d3:df:02:d5:69:13:85:58:99:33:10:
                    cb:2d:fa:c4:2f:06:da:18:64:38:7f:9a:d7:be:3b:
                    48:fd:9e:19:c4:04:d3:3f:23:78:03:7b:a1:4a:c7:
                    fe:70:ca:59:d8:a7:7c:f0:d9:fb:3c:32:2a:f0:45:
                    80:15:3c:24:78:ae:0d:6e:75:47:e7:c7:e8:dc:28:
                    9c:89:2f:28:27:fb:18:bc:7f:d4:4c:ed:8b:fc:af:
                    aa:8b:92:ab:6d:63:a9:a9:f2:1f:fc:2f:2a:17:7f:
                    7d:b7:be:df:9e:8d:a3:9a:51:51:b1:bd:ad:96:d7:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:D0:84:7C:9C:E5:E3:18:0F:40:86:36:E5:F8:A4:A8:90:5A:D1
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:a3:a1:37:b6:c0:0e:90:6d:00:59:89:de:e9:10:5b:5c:a7:
         d1:c0:cd:92:69:63:39:f4:2b:6e:72:26:19:34:9e:2a:2f:40:
         05:61:db:3a:ff:92:72:63:11:1d:81:11:ea:e3:72:ce:f6:54:
         89:b0:30:2b:45:76:3b:d1:d1:85:fe:61:89:92:5b:2c:f2:5c:
         7f:fe:cf:f9:b6:50:9c:b7:b4:a0:b3:e6:7a:0e:31:1b:d2:c4:
         4d:f4:06:27:8c:27:be:7f:d9:74:b6:73:c9:92:05:ce:0d:95:
         db:d0:96:03:0c:76:71:5c:52:82:33:e7:e0:9e:00:e7:c4:7c:
         fa:81:61:6c:75:40:f4:e1:12:02:3e:2b:55:53:25:3e:22:46:
         1b:01:06:2b:f8:e9:97:44:ae:c3:03:b1:1a:8e:01:d4:3d:c3:
         f7:1d:dd:42:d0:0d:9e:8a:aa:28:f4:34:1a:d5:41:5a:fb:54:
         4d:07:f2:88:69:08:ec:fc:19:f6:ed:d3:ec:08:b7:72:ed:8a:
         92:36:26:cf:7a:f6:86:3e:cc:59:9f:f3:02:7e:c8:bc:e5:b4:
         ea:ea:b4:63:12:c5:98:8e:58:1d:62:22:7a:f2:cc:4a:e3:9e:
         14:2c:60:3f:71:ff:9f:95:7b:c1:d3:0f:11:8a:89:1b:b5:51:
         a2:6c:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:41:17 2025 by rpki-client