Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3230312e3135382e36302e302f32322d3234203d3e203533303738.roa
File:                     3230312e3135382e36302e302f32322d3234203d3e203533303738.roa (raw, json)
Hash identifier:          RtLbcqR8/3YDGzfNGbZbaucDiywBqGkid5qw/mE7sdY=
Subject key identifier:   0E:19:3A:D1:7C:F9:74:1F:7F:28:7F:42:73:16:2F:9D:55:84:EB:79
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       542AF2499AF7645526C7873457655833A4B1BE58
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3230312e3135382e36302e302f32322d3234203d3e203533303738.roa
Signing time:             Thu 26 Jun 2025 11:56:11 +0000
ROA not before:           Thu 26 Jun 2025 11:51:11 +0000
ROA not after:            Thu 25 Jun 2026 11:56:11 +0000
asID:                     53078
IP address blocks:        201.158.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
                          rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 12:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2a:f2:49:9a:f7:64:55:26:c7:87:34:57:65:58:33:a4:b1:be:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: Jun 26 11:51:11 2025 GMT
            Not After : Jun 25 11:56:11 2026 GMT
        Subject: CN=0E193AD17CF9741F7F287F4273162F9D5584EB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:7d:5d:a0:bb:ec:ae:26:e0:7f:39:87:da:
                    b7:97:63:3f:c3:36:1f:ee:2b:45:18:13:71:1a:0d:
                    e1:f0:21:70:c8:e5:8d:98:02:12:16:e3:c5:90:a5:
                    89:a7:a8:29:e5:1c:6b:5a:3f:99:38:ad:ba:7d:24:
                    eb:8e:cf:78:7b:b6:79:bf:d3:e3:1a:1a:6b:5c:2b:
                    ab:ae:30:77:8a:fb:62:88:03:00:47:8a:6d:2f:b1:
                    4e:56:6d:e4:51:55:37:4c:38:58:ea:c9:ce:61:5e:
                    a8:54:2f:f5:fd:3c:c4:d8:69:aa:84:4c:57:b8:a2:
                    ec:a3:c2:55:89:06:3e:29:9a:59:25:3d:92:70:d4:
                    df:e5:69:bf:1c:c6:4e:3e:1c:2a:8a:07:b0:1d:6d:
                    b0:f1:7c:15:2b:16:65:7b:23:25:61:33:e1:50:34:
                    6f:ef:18:df:ed:c3:3e:46:48:c1:06:58:fd:61:b4:
                    d0:e6:5d:ed:19:44:51:7a:fd:b3:fd:3e:36:7c:c7:
                    34:4b:d5:5b:f9:3a:70:00:70:12:c3:31:f1:d8:c1:
                    16:3b:73:74:59:43:15:22:16:de:92:93:68:74:c5:
                    eb:3e:66:53:ac:b5:18:47:2a:aa:0c:f9:ed:7f:30:
                    cd:90:e7:f7:bd:d4:ae:35:a8:13:2d:f2:f1:85:98:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:3A:D1:7C:F9:74:1F:7F:28:7F:42:73:16:2F:9D:55:84:EB:79
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3230312e3135382e36302e302f32322d3234203d3e203533303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:ef:28:f5:aa:03:ca:37:93:29:4b:cd:e6:bf:32:b3:c2:
         a7:97:d0:3c:01:2e:a6:86:02:73:ac:5f:bf:89:b7:c5:17:77:
         05:b0:f0:17:4e:97:81:6b:f1:28:ce:f7:e9:30:28:d1:b5:3d:
         1d:b3:6c:fd:97:d2:b2:e1:35:9c:8f:e4:c5:de:6c:dc:62:a4:
         c1:2b:60:66:33:70:ab:13:9b:28:d7:b1:c1:de:83:6c:a0:47:
         09:8d:46:9b:38:95:d7:43:51:72:b8:1b:40:ab:87:3c:bb:26:
         40:0c:4c:0d:eb:29:33:ea:a5:98:13:b8:5c:f3:b1:2a:21:6c:
         f8:af:cb:5c:8e:e1:15:f1:63:f5:7f:82:21:dc:c7:bd:af:8d:
         0c:46:5f:b0:ec:c4:e0:84:15:27:2c:85:61:2a:99:d2:f9:a5:
         c7:69:ef:6d:70:e3:07:1e:d1:81:ca:27:2b:39:0b:a3:43:8e:
         c9:12:82:fe:13:46:87:30:e9:57:39:32:ba:60:b4:c0:17:e0:
         97:58:d4:4e:3e:ba:43:d7:5f:af:7a:ad:d5:23:dd:c7:67:5c:
         0d:59:34:7d:38:c7:6a:a6:8e:be:90:b2:ff:f1:84:eb:e3:2e:
         f4:4b:4a:b6:9c:3c:8a:cf:e3:f5:6f:f0:9a:88:ae:ac:74:4c:
         0d:4a:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:58:11 2025 by rpki-client