Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
File:                     3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (raw, json)
Hash identifier:          y5559hsrv3ev4gkLxD/ZTHcT/AvR/D459zxtw1U5ixU=
Subject key identifier:   0A:2A:EC:49:42:84:B2:0F:89:CD:26:A1:00:9A:FF:39:45:08:EB:BC
Certificate issuer:       /CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Certificate serial:       3C4EA44F97C1C41076B50AF619858E637ACAD46D
Authority key identifier: DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
Signing time:             Mon 05 May 2025 21:42:39 +0000
ROA not before:           Mon 05 May 2025 21:37:39 +0000
ROA not after:            Mon 04 May 2026 21:42:39 +0000
asID:                     271607
IP address blocks:        190.9.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4e:a4:4f:97:c1:c4:10:76:b5:0a:f6:19:85:8e:63:7a:ca:d4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
        Validity
            Not Before: May  5 21:37:39 2025 GMT
            Not After : May  4 21:42:39 2026 GMT
        Subject: CN=0A2AEC494284B20F89CD26A1009AFF394508EBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:66:cd:eb:1e:b5:4b:d7:88:e0:ee:59:c3:
                    51:de:c7:e1:51:4c:10:b9:5e:8c:c2:c9:4d:32:7e:
                    94:12:2c:a7:95:74:d0:a8:36:eb:b5:96:d7:b6:cd:
                    47:60:4c:5f:ee:66:35:f0:ce:7a:d6:40:e4:8c:c8:
                    64:fc:60:f0:9d:21:70:e3:89:4c:30:0b:1b:98:28:
                    16:20:f2:64:ac:46:d8:ae:b5:c1:9c:9b:75:ab:28:
                    c6:3b:78:d1:b5:01:d6:f7:fc:cc:2c:02:2f:1f:93:
                    f8:a8:94:13:6c:d9:47:93:ba:d8:df:3e:11:39:15:
                    07:b6:75:1c:20:c3:b6:94:67:10:d4:bb:17:0f:e3:
                    f3:5a:1f:ab:cc:85:46:36:48:a5:b8:82:aa:4a:f9:
                    63:e2:77:52:73:07:67:33:20:9d:56:c3:da:e2:50:
                    8b:47:08:00:a6:94:73:60:d2:d2:2e:c6:4b:6c:cb:
                    f0:99:71:c3:6b:19:95:d3:0a:f3:91:2a:06:a4:91:
                    a5:5d:63:4d:fd:a3:76:3b:7b:a6:cc:56:50:29:19:
                    bb:a8:bd:37:b6:83:87:ca:9f:52:c2:7f:17:7d:81:
                    eb:1b:ff:da:29:21:13:08:8a:86:4b:e2:de:9e:4d:
                    81:96:b1:6c:66:26:23:2f:3a:3c:44:1e:70:32:57:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:EC:49:42:84:B2:0F:89:CD:26:A1:00:9A:FF:39:45:08:EB:BC
            X509v3 Authority Key Identifier:
                keyid:DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:90:fc:d7:77:bf:0f:fb:65:a6:bc:e6:8a:8d:44:4c:16:2e:
         b5:19:81:58:73:ac:37:3b:95:65:7d:22:e5:3a:6d:a2:a8:88:
         49:09:93:b3:a7:23:27:28:b5:4d:1b:31:84:c0:52:0c:1a:5e:
         27:2e:fe:6b:9a:da:7c:48:9b:dc:6b:e6:de:ae:31:89:64:40:
         7c:4b:47:d8:a9:08:f4:28:76:07:1d:be:f9:03:70:27:8b:75:
         aa:19:69:29:90:f3:80:69:0d:09:33:11:a5:7a:72:26:d2:81:
         f0:7c:0e:84:dc:4d:75:3c:82:8e:98:a1:f1:2f:b9:82:97:18:
         6d:e9:d2:c7:02:c2:e9:3e:ae:b5:e8:ed:f3:95:2e:cd:78:6f:
         69:ca:82:cf:fe:66:b8:6d:b5:51:57:13:d3:d1:f9:16:48:c7:
         3b:8d:48:7f:67:b4:b0:ed:b2:ed:15:dc:d2:1b:4d:b3:cc:f9:
         73:a0:4f:c8:f0:8c:3b:4e:6d:75:3e:c0:eb:19:d4:1b:b2:bb:
         dd:9a:97:f6:e6:3d:84:f2:1b:16:e4:bb:71:3a:2b:0b:f9:39:
         47:fa:c3:41:37:0d:37:91:50:25:45:d4:7c:b3:d6:35:6f:26:
         f8:dd:96:c9:72:8b:70:47:13:32:7c:f5:21:d0:a7:55:4b:2d:
         dc:23:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:02:04 2025 by rpki-client