Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa
File:                     3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa (raw, json)
Hash identifier:          4YpLCT8GpOUpx6iKrWcbQEidcutFAglFDahN3X30fyM=
Subject key identifier:   19:31:CC:08:55:48:DC:61:0F:BE:CE:90:80:36:17:A3:D3:66:2C:B7
Certificate issuer:       /CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
Certificate serial:       366CD2B702678F41C0459837844B4E246B416B08
Authority key identifier: 1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa
Signing time:             Tue 13 May 2025 19:18:33 +0000
ROA not before:           Tue 13 May 2025 19:13:33 +0000
ROA not after:            Tue 12 May 2026 19:18:33 +0000
asID:                     262817
IP address blocks:        138.219.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 03:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:d2:b7:02:67:8f:41:c0:45:98:37:84:4b:4e:24:6b:41:6b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
        Validity
            Not Before: May 13 19:13:33 2025 GMT
            Not After : May 12 19:18:33 2026 GMT
        Subject: CN=1931CC085548DC610FBECE90803617A3D3662CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:38:fb:1d:bc:71:5b:35:45:1f:b0:d5:71:
                    75:35:72:5f:54:4f:66:11:e6:fb:1d:c8:a1:81:31:
                    c4:8b:53:73:b1:14:43:22:fb:e2:f3:c9:33:0d:62:
                    53:76:af:08:cb:8d:99:8e:81:fd:5b:76:de:71:25:
                    5d:13:c0:37:d3:2e:b2:77:34:70:9a:44:f1:55:fa:
                    89:c0:e0:1b:d2:6f:e2:f0:2a:0e:fc:69:f6:52:7f:
                    e4:53:e9:d4:44:db:dd:35:97:7a:90:74:e2:8b:ab:
                    e9:57:d0:95:1d:49:9d:e0:14:b8:34:70:98:d2:78:
                    e0:27:6b:05:06:f6:d0:17:1e:87:aa:02:79:22:11:
                    f7:6a:55:c5:84:2f:87:b9:49:8e:bb:c6:2d:99:81:
                    7f:ac:8f:60:f1:a3:5f:f3:31:30:1e:50:24:21:0a:
                    b5:a1:a9:ef:ba:73:ac:34:52:0d:66:e8:c0:3e:b4:
                    75:b8:bc:42:c1:c3:f3:1b:db:93:83:68:e8:eb:58:
                    6c:1c:4e:37:52:a0:e5:b7:17:8a:de:f9:66:e0:3f:
                    18:fc:46:1d:b1:dd:44:5f:ae:c2:50:4e:6e:e9:45:
                    29:eb:92:cb:65:41:af:b1:ac:09:14:f1:52:15:1d:
                    23:82:70:1b:6c:27:42:da:af:5b:7d:5b:da:af:68:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:31:CC:08:55:48:DC:61:0F:BE:CE:90:80:36:17:A3:D3:66:2C:B7
            X509v3 Authority Key Identifier:
                keyid:1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:03:af:82:6d:fd:d9:e1:28:a3:1c:71:8c:29:d1:34:a6:3f:
         ba:5b:3e:72:78:de:98:90:a8:21:46:f3:9e:73:9a:88:98:3c:
         a1:a8:8f:67:2f:9f:4f:30:a0:a6:0f:cd:5b:10:31:bd:19:03:
         ed:05:42:8c:1d:ee:83:db:1b:f5:47:54:f9:02:26:a8:b6:cd:
         8c:6a:fd:d1:52:80:0c:07:6d:53:1c:56:83:6d:09:60:85:4c:
         c6:a4:7a:23:5c:2c:91:3e:d7:49:dc:87:53:79:64:7e:95:0e:
         6e:98:83:0c:dc:00:db:97:fe:29:a4:ae:70:da:c1:3a:1d:0a:
         7b:a4:21:0a:f3:57:9b:fd:47:76:41:3f:92:53:06:1c:48:16:
         57:22:3b:a2:76:b5:b4:c4:16:1e:84:5b:ce:59:bf:03:77:0a:
         be:c3:07:e4:a0:43:b3:8a:56:5b:09:f5:68:c3:5a:0a:c8:ac:
         8b:6b:c7:6f:20:3f:5f:c5:cf:1b:cb:f2:67:41:44:a9:79:3b:
         06:24:50:75:be:58:9d:e6:86:e9:e3:da:87:49:44:56:82:5b:
         29:9b:47:12:5f:fd:d1:16:b3:d1:e8:5e:0e:8d:d9:72:7f:95:
         7a:7b:0f:85:5c:cd:cd:16:df:20:df:47:6c:70:e3:ec:8d:dd:
         62:dd:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:17:37 2025 by rpki-client