Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa
File:                     3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa (raw, json)
Hash identifier:          lTW7K/DZiSYKWIqLUOK0gqw1MBqLb1hbCG8sJbp/vn4=
Subject key identifier:   D1:5F:1B:66:FC:DA:49:25:E1:97:3C:08:6F:09:10:C3:08:37:7D:3D
Certificate issuer:       /CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
Certificate serial:       2B5C82F5EFD041969A330BAE2380779948C9FEC0
Authority key identifier: 1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa
Signing time:             Tue 13 May 2025 19:18:33 +0000
ROA not before:           Tue 13 May 2025 19:13:33 +0000
ROA not after:            Tue 12 May 2026 19:18:33 +0000
asID:                     262817
IP address blocks:        186.250.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 09:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5c:82:f5:ef:d0:41:96:9a:33:0b:ae:23:80:77:99:48:c9:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
        Validity
            Not Before: May 13 19:13:33 2025 GMT
            Not After : May 12 19:18:33 2026 GMT
        Subject: CN=D15F1B66FCDA4925E1973C086F0910C308377D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:cd:b4:d6:de:0a:2a:15:f4:63:3a:63:5b:
                    dd:62:3b:b2:99:a6:8b:09:34:c2:0a:26:c5:54:36:
                    89:29:ba:60:1a:56:13:f7:cf:03:3b:d1:99:61:3b:
                    f5:ee:7b:a2:2f:09:9b:82:93:b8:d4:e2:51:ac:8d:
                    37:db:09:c8:0f:d6:a9:b5:68:06:25:61:a5:a5:7a:
                    c0:b9:54:7f:bf:a8:f7:3b:5b:89:97:85:02:b1:35:
                    64:a1:a5:0c:d3:60:10:10:87:bb:22:ca:3e:ab:cb:
                    59:ea:9c:45:b3:d1:6f:e9:b9:8a:ff:76:80:a8:cd:
                    f5:60:51:08:c4:73:63:8c:14:9f:e4:10:b9:58:1b:
                    00:e4:fb:1a:a1:49:56:d3:af:ed:77:22:41:38:a0:
                    41:68:9b:a1:1f:59:d4:71:fb:32:8f:52:74:8c:7e:
                    7a:a4:04:97:5c:32:e7:78:74:d0:14:cf:cc:1e:d8:
                    04:4c:67:54:01:39:45:97:1e:38:42:fb:22:2b:7f:
                    52:3e:31:9a:53:55:6d:ae:92:9c:34:31:c2:45:3a:
                    93:a4:3a:71:7e:1b:35:32:72:8b:fb:15:9c:4d:38:
                    4c:87:e6:75:3c:a5:b3:7b:a4:c1:71:df:91:1c:df:
                    be:1c:05:e7:e9:c2:aa:d8:48:aa:71:60:73:df:e1:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5F:1B:66:FC:DA:49:25:E1:97:3C:08:6F:09:10:C3:08:37:7D:3D
            X509v3 Authority Key Identifier:
                keyid:1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:30:75:f9:a9:73:c1:f4:58:a3:0b:55:fb:36:52:a5:84:4c:
         21:ea:c6:ec:db:be:12:f8:ef:1c:7f:56:92:c9:28:35:ca:9a:
         67:d2:db:6d:d1:fb:0f:ed:b9:14:7d:3f:53:56:c8:ba:d0:ce:
         91:19:96:76:8e:d9:84:f7:7a:d0:76:24:a1:a3:1d:fd:d7:78:
         cb:2e:63:0b:7f:40:81:75:7e:57:ab:2c:d0:d9:65:88:38:2b:
         4a:c7:f5:5f:64:2c:7e:c2:5b:45:1e:19:5d:c0:e7:7d:09:02:
         0e:ef:b1:9d:90:11:61:b1:05:ed:90:75:c9:f1:87:47:24:ba:
         52:a5:c1:7e:f1:8e:3b:9a:99:7a:a2:64:42:d1:6b:d1:69:02:
         55:b9:a8:7e:f8:b1:d4:fc:e7:3e:6c:f9:6e:c9:f5:1a:94:70:
         e0:f0:f8:a2:8c:b4:2e:9c:7f:9c:e6:4d:4d:e1:0c:39:81:e1:
         df:c7:9b:13:3c:67:bc:70:6d:2d:3d:33:b9:0c:c0:06:c0:c5:
         a9:bd:0f:e4:0d:91:bd:ae:d4:f8:a9:bb:c2:40:5a:c1:d5:84:
         3b:ca:06:06:0f:66:f2:fc:be:92:83:5e:d7:ba:4e:9f:43:43:
         e9:ae:ed:67:32:fc:15:37:73:3b:b7:a9:01:d5:e7:c0:03:a6:
         03:a4:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:15:45 2025 by rpki-client