Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa
File:                     3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa (raw, json)
Hash identifier:          HJ556sEJKDRI7EJKWsq/TCjh6o1O9OaPDeq/rvqiKQs=
Subject key identifier:   81:11:F1:3F:04:75:52:4E:49:0F:C6:51:5A:C2:7E:1D:E6:9A:DD:90
Certificate issuer:       /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial:       489085E2CD5F171F0F89CA1F0A4978BB2C7BCF6D
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     271378
IP address blocks:        181.189.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl
                          rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 13:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:90:85:e2:cd:5f:17:1f:0f:89:ca:1f:0a:49:78:bb:2c:7b:cf:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=8111F13F0475524E490FC6515AC27E1DE69ADD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:97:a8:88:68:d0:49:35:63:c4:35:39:df:
                    01:48:bc:f3:9a:97:f5:de:06:3b:62:60:c6:b3:54:
                    fb:cb:2b:bf:78:ca:d0:f1:97:39:22:f4:d7:37:77:
                    e5:c0:13:5c:63:36:97:57:19:ea:61:53:1d:17:39:
                    18:7d:7f:5c:77:5d:58:fe:bc:4b:7c:63:e0:0d:e1:
                    9d:50:5a:e7:6c:61:63:d0:73:ad:6d:07:ca:03:de:
                    c3:75:88:63:47:ce:fb:26:b7:57:9b:d2:25:7f:60:
                    4e:71:ab:0f:57:4a:4e:c4:a7:0d:00:ca:6a:1b:2b:
                    0f:36:d2:34:2f:01:3c:b7:0c:1c:fc:93:21:5c:e6:
                    9e:2a:df:7d:e4:13:a9:83:91:4d:91:ec:c0:f7:4d:
                    be:28:69:a9:fb:48:24:95:be:e7:9c:0b:72:95:23:
                    6a:a9:76:f6:ea:93:52:e0:e8:24:57:07:f1:ee:d7:
                    54:c8:41:7b:0e:df:f1:58:3d:a7:b1:04:c7:bf:7d:
                    13:96:71:cc:c4:a5:33:1b:e1:24:9e:98:f1:33:7f:
                    9f:6d:ac:f6:23:68:3c:af:c4:f0:80:f8:8e:c7:6e:
                    cf:03:41:be:31:a6:0e:23:b6:73:c6:92:b2:95:12:
                    bc:a1:36:d1:26:35:46:11:6c:73:bb:0a:46:10:b0:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:11:F1:3F:04:75:52:4E:49:0F:C6:51:5A:C2:7E:1D:E6:9A:DD:90
            X509v3 Authority Key Identifier:
                keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:b1:34:2a:57:e7:24:29:5e:58:f2:39:b1:89:eb:5f:7e:4c:
         11:96:0f:03:0e:01:dd:73:9d:50:06:f3:26:95:f1:4a:e4:28:
         3a:89:a4:9b:77:cc:e4:1f:d1:a5:37:42:5e:a4:74:88:39:2e:
         01:e3:58:88:22:c4:01:cf:4c:02:67:03:fd:fd:e2:b6:8e:9b:
         2f:a6:b8:e4:9a:47:ca:47:06:99:94:6c:7f:93:09:5d:68:08:
         67:94:0f:05:d0:78:0a:57:eb:29:17:7f:e0:57:0c:7f:55:98:
         0d:f3:08:5b:10:79:90:ff:d0:4a:38:d9:9a:60:16:85:2c:25:
         ee:dd:b3:44:7a:94:0b:dd:7b:f5:1e:b1:7d:49:07:81:de:5b:
         31:f5:e2:64:74:cd:86:49:9c:86:fb:d9:9d:42:da:f5:55:ea:
         3a:f5:20:04:1f:c8:66:84:e2:41:a3:96:c5:3b:e3:1b:a3:2f:
         34:b7:fe:c6:be:4e:ac:bb:de:b5:74:df:ee:84:01:5e:c1:06:
         b3:bc:15:3e:f6:ba:d5:69:13:21:62:db:57:49:e3:ec:f2:fe:
         69:da:58:cf:8b:c0:dc:fb:83:35:87:d6:53:7a:18:e4:2b:0d:
         e8:5d:c2:0b:cd:f2:09:75:5c:55:9e:8e:06:32:5b:93:0e:3c:
         7b:11:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:35:54 2025 by rpki-client