Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa
File:                     3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa (raw, json)
Hash identifier:          5wsYZaH4zqj6Eajb74Kn8W3aM3EvxQlSqFKhgJwWjRM=
Subject key identifier:   F4:30:09:75:11:7B:F7:BF:6B:7D:35:F9:EE:8F:E4:B6:81:24:C5:F6
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       1E0C43C2D9F160F3CA315A1B49F8E50E2F724312
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa
Signing time:             Wed 30 Apr 2025 23:06:22 +0000
ROA not before:           Wed 30 Apr 2025 23:01:22 +0000
ROA not after:            Wed 29 Apr 2026 23:06:22 +0000
asID:                     270456
IP address blocks:        190.124.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 04:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0c:43:c2:d9:f1:60:f3:ca:31:5a:1b:49:f8:e5:0e:2f:72:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: Apr 30 23:01:22 2025 GMT
            Not After : Apr 29 23:06:22 2026 GMT
        Subject: CN=F4300975117BF7BF6B7D35F9EE8FE4B68124C5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:e2:12:4a:02:6e:e0:35:3d:e5:29:e8:38:
                    cf:2b:40:5a:e8:22:21:97:94:56:62:75:ce:8d:d1:
                    90:ee:96:a2:1f:c3:02:2d:ee:aa:78:6b:b5:d1:f3:
                    f8:05:33:eb:3f:17:90:4f:ee:af:80:24:7b:35:11:
                    4c:74:a3:c4:6c:00:0f:db:22:14:5c:ba:97:af:58:
                    ee:3b:05:8b:84:a3:94:70:8a:d7:a7:19:93:10:38:
                    bf:b7:db:5e:89:1d:9b:70:18:bb:90:12:68:fe:9a:
                    a9:01:1e:95:cf:dd:7f:cc:66:1e:06:6b:62:c6:89:
                    cf:85:06:38:ce:9c:03:97:fc:62:34:c7:e2:3a:11:
                    8d:0a:34:d4:da:1c:40:a2:38:b2:06:75:66:7c:18:
                    5c:e3:04:c7:a9:c2:bd:82:1f:4f:5c:2e:b5:26:07:
                    8c:9f:6a:be:fa:fd:ee:d0:d8:24:1e:ae:e5:1c:c0:
                    86:0f:98:9d:6b:b8:3f:a2:00:1b:b7:56:eb:e9:13:
                    2f:c4:22:81:ef:4d:0b:ea:00:44:65:d6:54:f6:c8:
                    e5:f4:7f:ac:11:06:79:f0:3c:1f:32:0d:57:fc:7f:
                    88:f5:6d:2a:d5:b4:61:84:f4:4d:81:cb:c7:cc:59:
                    56:79:95:91:a5:8b:31:ee:ad:5a:f6:0f:47:db:1b:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:30:09:75:11:7B:F7:BF:6B:7D:35:F9:EE:8F:E4:B6:81:24:C5:F6
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:a4:30:4d:a9:9f:1b:93:9e:b2:a2:0a:b4:b6:7d:42:39:ab:
         21:46:7f:f5:39:15:9e:be:01:c7:eb:27:01:cb:af:2b:47:74:
         4a:8c:a1:e0:d5:d5:a5:e0:3e:17:0e:5c:e1:3b:1c:e5:ce:81:
         03:61:25:57:05:44:bd:df:48:35:cd:93:eb:78:1e:97:f3:82:
         b3:32:44:cd:0f:49:34:1f:54:e8:e1:e9:22:4e:f3:b6:2b:9c:
         5d:ed:4c:c6:1d:37:7b:7d:02:ff:f6:1a:50:70:be:f4:c7:ad:
         12:a3:ab:39:1e:47:20:69:15:a8:e8:a1:4a:f5:3d:02:86:f0:
         8d:83:14:99:07:ac:6d:fa:33:5e:7f:be:36:78:a9:89:4e:50:
         5a:3d:35:e3:7d:b4:f2:14:cf:ec:e1:2a:25:97:a3:f9:8a:74:
         86:c8:8f:11:85:f3:7b:a3:b9:e7:0c:31:29:cd:ab:c0:7b:da:
         72:14:c9:b7:b7:3e:6f:95:eb:04:50:fc:b1:2b:b8:81:cc:88:
         57:a6:48:52:ca:2c:16:23:3e:f4:ae:35:2f:38:ff:1d:cc:ff:
         eb:6f:a5:30:3b:58:f3:c5:8a:e6:f7:57:92:7c:dd:6d:32:b5:
         57:94:ec:e9:97:c4:2d:38:24:60:80:49:1d:1d:ba:b1:8d:b3:
         94:1f:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:57:48 2025 by rpki-client