Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa
File:                     3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa (raw, json)
Hash identifier:          eoPtSz4t5GkGlcVoKgj3Z4WM9FE5tueofNXubHiFsk8=
Subject key identifier:   B9:0D:EA:9C:E0:E4:46:7B:73:DF:DE:CD:89:AB:6B:4C:94:42:C7:9F
Certificate issuer:       /CN=684C7551344CE6F424049AF4D0BE6EA2B0D65EC0
Certificate serial:       2AE979AD901BF337B4828BB69D2ED4189D1A348E
Authority key identifier: 68:4C:75:51:34:4C:E6:F4:24:04:9A:F4:D0:BE:6E:A2:B0:D6:5E:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa
Signing time:             Fri 25 Apr 2025 18:22:11 +0000
ROA not before:           Fri 25 Apr 2025 18:17:11 +0000
ROA not after:            Fri 24 Apr 2026 18:22:11 +0000
asID:                     270844
IP address blocks:        190.115.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.crl
                          rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e9:79:ad:90:1b:f3:37:b4:82:8b:b6:9d:2e:d4:18:9d:1a:34:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=684C7551344CE6F424049AF4D0BE6EA2B0D65EC0
        Validity
            Not Before: Apr 25 18:17:11 2025 GMT
            Not After : Apr 24 18:22:11 2026 GMT
        Subject: CN=B90DEA9CE0E4467B73DFDECD89AB6B4C9442C79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:6f:42:bc:4b:4d:2b:96:f3:8c:8d:64:f0:
                    21:bc:0b:e5:0c:a6:a8:30:45:49:ce:52:6b:41:18:
                    df:5d:57:1c:75:29:a4:17:05:64:95:ca:6f:97:58:
                    c4:48:01:1c:a3:6e:85:44:39:e2:9a:8a:1b:6b:46:
                    dc:4a:8d:24:02:c6:6d:5c:47:09:5c:ec:c6:fe:71:
                    fe:27:4f:d6:fd:73:10:2e:4f:41:28:ee:10:08:66:
                    fb:08:aa:70:b9:c0:0f:8f:b4:a6:f9:a5:9f:47:66:
                    52:92:29:bb:a2:9f:54:41:4a:45:d9:48:f4:de:28:
                    51:96:cf:d4:b3:8b:51:21:72:6b:96:8a:d2:3f:4a:
                    76:79:d0:9c:d3:1e:4d:45:e0:4e:01:4e:fb:f0:66:
                    b4:b4:0d:92:80:ff:4f:c6:ea:a1:62:81:12:f9:ec:
                    83:96:41:4c:8f:14:fc:8f:3c:ba:79:06:be:52:1d:
                    27:dd:74:6a:9e:6f:3f:06:27:17:2e:f3:f4:64:ee:
                    68:6b:2b:f6:33:e6:98:fb:33:af:9e:d8:79:10:f3:
                    ef:60:d4:2e:f8:91:d1:b7:b6:1f:29:cd:12:a7:5a:
                    bc:73:7e:10:b7:0c:14:06:ec:9f:6a:35:63:65:00:
                    56:bf:a0:a2:6d:bb:f7:e1:6f:06:3d:99:b8:35:3e:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0D:EA:9C:E0:E4:46:7B:73:DF:DE:CD:89:AB:6B:4C:94:42:C7:9F
            X509v3 Authority Key Identifier:
                keyid:68:4C:75:51:34:4C:E6:F4:24:04:9A:F4:D0:BE:6E:A2:B0:D6:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:01:75:ff:ba:cf:c8:d6:ad:19:c6:e2:df:c6:ed:4c:c1:03:
         67:61:f1:6b:ad:bc:02:78:19:2f:6b:b7:8b:be:af:17:9a:c3:
         2b:7f:f6:95:3b:02:ec:f7:4d:3e:c2:18:7f:c8:1c:c8:29:97:
         91:9a:0c:30:a2:1c:16:ae:fb:59:ba:77:7a:59:5c:29:42:92:
         12:68:9a:1f:92:9a:b8:70:c0:34:64:d9:34:cf:fc:3c:32:ba:
         4b:37:38:15:41:d6:12:ca:3e:82:b8:07:1b:09:ec:11:58:44:
         30:94:47:79:9a:94:b6:eb:51:b6:a3:55:0a:c0:7c:48:5b:b3:
         e0:34:57:1f:86:51:7c:72:4a:7d:50:f4:cb:47:83:3a:31:32:
         12:cd:c9:42:2e:ee:26:fc:bb:49:8d:06:2d:91:16:64:91:f2:
         d2:0f:70:9a:79:b8:96:ac:a4:2b:18:c1:8b:92:53:3c:e4:83:
         44:da:09:9c:51:b6:e9:8d:5c:bd:ba:9a:12:3a:28:ba:05:57:
         fb:ef:d0:9f:ec:16:ce:d1:2b:ba:7c:4a:80:63:32:8a:b6:60:
         c6:85:a7:1c:8f:4c:45:37:b7:21:65:a4:2f:ee:18:bf:15:c4:
         1f:88:30:fd:c1:96:cf:7d:30:d4:12:a6:de:9d:47:2f:9e:9e:
         fe:ab:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:29:45 2025 by rpki-client