Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20323730383832.roa
File:                     3138362e3139342e342e302f32322d3234203d3e20323730383832.roa (raw, json)
Hash identifier:          PGGeSEjoQxOKttL0j5jsZ6hxYLiD17Ff1Bp5cdJax8c=
Subject key identifier:   C1:8D:63:8B:77:E3:17:3A:A0:AE:95:66:AE:C6:AB:3E:5E:D0:EE:F4
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       33A48B88BA830937B58A8CC2945CF11622D275CD
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20323730383832.roa
Signing time:             Wed 07 May 2025 19:31:18 +0000
ROA not before:           Wed 07 May 2025 19:26:18 +0000
ROA not after:            Wed 06 May 2026 19:31:18 +0000
asID:                     270882
IP address blocks:        186.194.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl
                          rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a4:8b:88:ba:83:09:37:b5:8a:8c:c2:94:5c:f1:16:22:d2:75:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: May  7 19:26:18 2025 GMT
            Not After : May  6 19:31:18 2026 GMT
        Subject: CN=C18D638B77E3173AA0AE9566AEC6AB3E5ED0EEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:21:30:c4:8f:81:79:18:e5:63:34:a8:87:
                    a3:de:47:63:9b:4a:a3:ed:84:31:65:31:ac:f2:f1:
                    2a:8b:e3:1b:bb:ab:36:f2:0a:26:0a:bf:17:97:3c:
                    68:07:a9:15:13:33:53:38:ec:58:f0:b1:72:e5:8d:
                    5e:03:63:c6:a0:40:32:3c:f1:31:45:26:5d:b9:c9:
                    d5:0a:d4:23:5b:aa:db:dd:b5:9b:f1:1d:c3:17:0d:
                    21:dd:a5:f9:e6:f7:e2:48:77:78:d4:50:a9:2c:12:
                    5e:db:99:c3:43:68:c8:2f:5f:a9:8c:76:f4:78:91:
                    1c:85:d6:65:ca:53:01:ca:3a:68:cd:89:3e:6c:94:
                    f3:60:fe:5f:a6:eb:3c:09:ad:6a:cf:1a:60:47:ee:
                    4a:c7:71:4e:6f:b7:c5:52:c7:c0:e0:6f:4a:1e:2b:
                    0f:fb:e9:cc:29:c0:d6:96:06:0e:40:5f:07:11:5d:
                    2b:1f:fb:62:39:c4:7c:d4:ff:95:35:8d:e9:c1:14:
                    e8:12:f7:46:d8:52:e1:65:63:13:df:e7:7f:2a:ce:
                    1c:fd:81:92:62:6e:c4:4f:c6:ae:cf:0e:a1:7a:30:
                    3c:5e:e2:43:b1:ec:f3:e7:a3:99:f1:e2:d1:dc:75:
                    9f:39:6c:0c:7e:ca:2f:7a:fa:85:27:af:db:2e:2e:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8D:63:8B:77:E3:17:3A:A0:AE:95:66:AE:C6:AB:3E:5E:D0:EE:F4
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:b5:76:22:78:b3:22:ca:fc:cd:a1:5b:21:c1:d6:2c:18:
         f0:b1:7a:98:1c:6c:64:90:10:e7:ee:93:d1:f3:78:46:d1:81:
         73:3d:59:74:f9:00:8c:00:c3:8d:5f:de:81:e3:9a:03:33:0a:
         e9:d4:b0:68:30:8d:1c:61:2b:6d:ea:ee:b3:22:7a:d7:02:58:
         1d:42:d3:62:25:4a:4c:9c:d8:dc:55:23:1f:ff:cd:1d:e1:c4:
         5b:d7:ef:75:81:dc:94:d0:bb:16:2e:bd:0a:72:00:12:88:ec:
         2d:e9:d2:c1:0e:b7:93:8e:14:e3:90:2c:5d:ee:d5:f3:42:a5:
         54:82:95:ef:68:01:77:55:18:00:53:2a:32:a3:e9:de:f2:8e:
         60:cd:6c:22:41:c2:2e:95:3c:14:cd:1c:16:5b:5b:2c:01:bb:
         d1:63:e3:37:aa:5f:72:b8:a1:2b:09:84:08:69:9e:3f:34:b6:
         09:28:6a:12:c6:73:95:66:02:47:12:46:f7:27:ff:e2:5a:95:
         ef:2a:1b:f1:5c:3d:37:b1:0a:e1:ce:98:af:8a:64:7f:31:1e:
         43:41:fd:13:04:75:5c:8a:72:76:73:f6:43:00:2c:93:ac:9a:
         45:46:64:77:83:7a:f4:53:db:a3:6e:ee:33:98:56:40:31:99:
         ad:28:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:03:18 2025 by rpki-client