Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa
File:                     3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa (raw, json)
Hash identifier:          SUtPgobUGe/jzlF5JfggCOpQfMaCEf8nIwu6R/WIl9M=
Subject key identifier:   31:1E:99:80:9C:46:9E:68:BF:9A:48:84:55:AE:3F:01:AE:57:C3:4E
Certificate issuer:       /CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
Certificate serial:       3690E796218B6CFD6DB6C85F55A1570093B8B1CE
Authority key identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa
Signing time:             Fri 02 May 2025 21:22:43 +0000
ROA not before:           Fri 02 May 2025 21:17:43 +0000
ROA not after:            Fri 01 May 2026 21:22:43 +0000
asID:                     270980
IP address blocks:        168.196.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:90:e7:96:21:8b:6c:fd:6d:b6:c8:5f:55:a1:57:00:93:b8:b1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
        Validity
            Not Before: May  2 21:17:43 2025 GMT
            Not After : May  1 21:22:43 2026 GMT
        Subject: CN=311E99809C469E68BF9A488455AE3F01AE57C34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:87:24:29:f7:df:ef:95:30:c7:27:a8:da:
                    79:f2:b6:a2:f8:63:70:43:da:11:56:14:89:2b:76:
                    cb:8a:3f:29:14:b0:4b:d9:70:10:e2:b5:a3:b5:4d:
                    5f:de:04:38:87:b8:e3:5a:8e:0d:24:79:ec:e1:65:
                    4d:68:b6:cc:10:55:97:de:7d:d8:86:55:00:40:fa:
                    99:46:bc:b7:0a:09:df:f2:ca:01:a9:41:32:9b:f7:
                    17:5e:2a:fe:ff:68:a2:8e:1e:35:3c:ef:56:a2:3b:
                    f7:f3:e4:a8:05:51:c9:e5:59:36:8f:91:d2:fe:4e:
                    00:39:67:c2:f2:c9:4d:2e:34:14:a9:34:d2:33:0e:
                    6c:13:58:0a:4b:f7:94:df:71:43:c2:47:dd:b6:29:
                    09:43:df:82:ea:6a:0d:47:16:20:15:fc:e0:4e:66:
                    13:e0:26:16:84:a4:96:04:7b:15:16:e4:8f:8a:fe:
                    60:20:91:31:1b:59:f9:cf:64:67:78:6a:c3:df:c7:
                    6a:c0:30:a0:f9:e2:bb:fb:87:ee:21:ad:43:dc:51:
                    7a:48:c3:04:0c:87:ab:c3:d5:ab:9c:c9:02:d7:64:
                    36:f0:b5:8f:9d:21:15:43:1d:b9:4e:b5:bb:7f:59:
                    b7:cf:f4:5e:46:60:60:89:b7:4c:31:50:01:9a:cf:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:99:80:9C:46:9E:68:BF:9A:48:84:55:AE:3F:01:AE:57:C3:4E
            X509v3 Authority Key Identifier:
                keyid:DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:ee:87:2b:30:39:39:c0:3c:a1:c9:a9:14:01:e7:de:6b:ea:
         34:1b:06:1f:0d:d1:2b:a6:15:9c:86:b7:7f:d8:ff:c7:f8:dd:
         11:4f:b9:a3:d0:df:dc:5d:f1:c2:0f:0e:0c:9b:b4:e3:f0:49:
         33:14:fd:62:c5:e7:17:62:8b:65:a2:6a:b0:c0:53:9c:ad:50:
         a2:8e:c4:cf:8b:20:f7:c3:ac:ba:5e:ba:6a:92:79:ca:b5:a0:
         49:5e:93:15:4a:82:3e:4a:4c:24:80:5f:65:83:1d:c3:20:06:
         e4:17:67:5d:3e:2f:46:a4:a9:eb:bc:95:40:c6:03:43:21:ff:
         9e:d8:25:83:4b:2b:a4:3e:4c:2a:10:39:b6:a3:26:9c:c0:fd:
         a6:5d:29:ef:df:3d:19:90:c8:1b:2e:20:01:79:96:a4:3a:73:
         ac:d7:a2:22:9a:86:a9:5f:1b:74:30:ab:1b:b7:be:0c:88:8c:
         f6:df:1f:a6:0e:37:85:a8:ec:61:09:0b:45:7e:a5:83:7a:31:
         6f:8a:32:5e:1c:77:8a:45:60:fd:8e:13:36:f9:b2:de:23:b4:
         02:76:0a:d0:02:fe:b8:a0:ac:0e:25:5a:e3:ed:17:63:51:91:
         2f:6b:2b:d9:93:53:9b:16:e7:49:dd:60:81:a7:2e:e7:22:a8:
         ac:02:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:12:26 2025 by rpki-client