Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa
File:                     3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa (raw, json)
Hash identifier:          gvEJljraD5i5DYt7riXmbK6ZqDmqjfGWRy8ciKwDEjE=
Subject key identifier:   B4:4D:FC:75:45:AA:DC:EF:79:2E:10:C7:D9:BB:10:72:C4:DD:E6:0A
Certificate issuer:       /CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
Certificate serial:       721A73864FE35ED3A6331CA3E10630652D958D76
Authority key identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa
Signing time:             Fri 02 May 2025 02:02:59 +0000
ROA not before:           Fri 02 May 2025 01:57:59 +0000
ROA not after:            Fri 01 May 2026 02:02:59 +0000
asID:                     268242
IP address blocks:        160.20.242.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl
                          rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 23:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:73:86:4f:e3:5e:d3:a6:33:1c:a3:e1:06:30:65:2d:95:8d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
        Validity
            Not Before: May  2 01:57:59 2025 GMT
            Not After : May  1 02:02:59 2026 GMT
        Subject: CN=B44DFC7545AADCEF792E10C7D9BB1072C4DDE60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d5:9a:be:7e:03:d5:d0:68:e3:af:de:61:a7:
                    34:a4:45:23:b3:c0:f6:6d:a8:1c:f9:65:69:26:d9:
                    d7:90:c3:ec:a4:9b:82:ef:fc:cf:84:14:a1:18:5b:
                    6b:b3:9c:14:83:7d:18:d9:ae:d1:32:b6:91:89:e6:
                    83:94:73:ea:4c:49:1f:f7:5e:5f:93:b0:07:86:01:
                    f9:28:cd:4b:93:6d:27:cc:d9:48:26:7c:0e:97:4d:
                    85:d8:c8:76:0e:f0:cf:a0:67:de:b5:08:6d:90:ab:
                    0b:69:cf:7c:c1:2f:23:9a:e7:eb:08:34:a4:fb:e7:
                    6f:ab:cd:1a:e7:1a:eb:af:cf:63:37:89:59:21:c9:
                    8f:ee:99:2e:c3:2b:00:09:f9:1c:a3:91:fd:d0:81:
                    3d:77:8e:da:ee:02:32:c7:4d:8c:6d:f2:c1:e0:1b:
                    5d:5b:a1:30:4d:70:42:61:70:a3:7a:3a:14:4d:d9:
                    a3:2b:6f:7b:b7:96:11:de:aa:61:ae:95:df:a1:9d:
                    3c:d5:53:29:aa:ec:35:f8:54:83:48:87:0f:7c:da:
                    23:48:1a:8a:30:23:84:78:4c:92:9d:57:94:68:91:
                    c7:31:de:5b:a7:b7:d8:89:45:7d:80:56:d5:0f:d9:
                    38:85:26:9b:b2:7d:02:60:76:88:6c:fd:7a:b2:c7:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:FC:75:45:AA:DC:EF:79:2E:10:C7:D9:BB:10:72:C4:DD:E6:0A
            X509v3 Authority Key Identifier:
                keyid:71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:05:5e:a5:33:99:06:7b:6f:0e:0e:88:a4:9f:64:e1:d0:fa:
         10:07:60:23:05:e9:ff:5a:41:ea:f8:52:3e:52:03:ff:0c:b1:
         ff:43:66:e9:b3:db:dc:c9:97:da:07:d4:96:09:75:53:a8:28:
         e2:68:c0:31:8b:85:90:fe:56:63:85:8c:ce:10:42:32:69:ff:
         c2:8f:6b:e9:3e:1c:d6:95:0d:37:e2:51:eb:42:77:d2:da:5f:
         72:a9:27:d1:04:0b:57:2e:7e:07:49:dc:5e:7c:0c:41:cf:89:
         7e:ef:24:08:aa:68:fb:6e:db:25:cb:56:69:fd:11:78:07:f3:
         f1:6d:e5:09:18:72:46:c1:2b:6e:de:11:49:98:e3:cb:42:bb:
         cd:0b:c1:70:bb:27:aa:06:5d:e1:59:21:25:9a:e9:be:17:b2:
         4b:5c:c3:ed:8a:2a:d8:b7:50:a3:65:f6:02:f0:43:a3:5c:89:
         cd:bc:54:a7:52:21:04:bd:2a:16:a8:6f:a7:da:b4:5e:68:7a:
         2e:19:c5:8e:a2:2d:4d:b9:2b:70:92:49:c4:f3:f0:06:01:1c:
         63:43:6e:aa:5a:14:9a:c2:ff:73:45:1f:36:dd:d4:ab:74:22:
         b3:4b:a6:e4:48:6a:62:82:46:fc:14:02:a7:fa:f3:99:72:ce:
         f0:24:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:13:09 2025 by rpki-client