Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
File:                     3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier:          r38V8M+KcBh1XPEGepb6FxU8TvK2U3WdNNGZ0ujgzAA=
Subject key identifier:   C4:8A:79:CF:B3:C9:28:53:39:66:5C:C2:60:E6:A4:E2:72:42:3E:85
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       7617D71F26BE0101C21ADB86F7E00B6A29988428
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:40 +0000
ROA not before:           Fri 25 Apr 2025 14:45:40 +0000
ROA not after:            Fri 24 Apr 2026 14:50:40 +0000
asID:                     52721
IP address blocks:        138.185.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 23:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:17:d7:1f:26:be:01:01:c2:1a:db:86:f7:e0:0b:6a:29:98:84:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:40 2025 GMT
            Not After : Apr 24 14:50:40 2026 GMT
        Subject: CN=C48A79CFB3C9285339665CC260E6A4E272423E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:09:a6:8f:4c:7b:f4:ac:a4:f3:63:24:24:
                    93:1a:ec:32:31:b3:53:dd:10:e0:91:ff:1c:d0:3b:
                    27:ad:1d:6a:8d:0a:ab:0b:cb:2b:3d:fc:df:8c:bf:
                    ea:96:d9:e3:39:21:90:0b:70:4a:e9:d4:a8:16:cb:
                    76:a3:9a:67:b1:34:4c:58:00:79:ed:ea:57:48:9a:
                    9a:59:de:6a:a6:60:d9:3a:d7:cb:53:5d:bf:97:d7:
                    80:b1:a1:53:86:f7:8d:0c:eb:6d:49:a3:e4:5d:31:
                    7b:82:53:82:ef:9a:15:0a:17:fd:84:e7:47:01:0a:
                    5f:71:bf:03:56:06:a8:d6:6f:87:b8:4e:02:e3:37:
                    b0:05:36:6e:cd:9b:56:44:8f:72:10:71:f6:3b:1d:
                    37:30:73:81:6e:c2:2d:2f:c0:10:fb:97:0b:a5:55:
                    8e:6d:04:d8:88:6e:d3:48:ac:e1:df:be:7f:8c:7e:
                    19:ba:5d:cb:bb:8e:b0:ea:0f:a8:a0:ca:3f:13:06:
                    3a:b7:b3:f0:fe:f5:d3:08:08:03:f5:32:c7:94:eb:
                    2e:bd:98:2b:8b:e0:dd:f0:f0:17:ea:85:67:a7:17:
                    eb:00:23:8e:a8:b2:df:a0:90:f7:be:7f:50:7b:f9:
                    89:17:19:36:93:48:1c:83:5b:9c:e8:fb:15:84:2a:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:79:CF:B3:C9:28:53:39:66:5C:C2:60:E6:A4:E2:72:42:3E:85
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:34:7c:04:17:66:a3:5e:35:f2:9f:1a:5f:12:a2:0f:fa:3d:
         00:27:22:38:8b:e9:a7:af:94:19:b9:32:25:c6:42:a4:c9:7d:
         4e:24:6b:1e:85:ac:34:21:43:09:5b:8c:e7:7c:89:f2:dd:d1:
         d5:06:49:81:97:57:96:af:6a:fa:d9:a6:3c:06:36:a7:0d:d7:
         df:9f:47:45:b5:f9:24:38:71:bc:e4:cd:45:e4:58:4d:84:2e:
         20:2d:2b:d6:b1:ee:61:4a:24:b5:8b:ff:26:d9:41:60:5e:d2:
         6f:21:d8:8c:de:d4:62:0c:e9:ce:b2:a0:3c:41:56:ff:25:72:
         c1:51:b0:7e:52:ad:f7:88:a6:9b:0a:7d:dc:00:71:7d:f3:cd:
         64:9a:0b:8c:69:8f:86:a6:3f:00:36:6f:57:b3:2d:55:7b:81:
         df:ef:76:36:cb:7e:d5:2f:81:5f:94:6f:9b:97:90:33:68:9b:
         14:05:e9:16:fa:4b:4c:1f:6e:40:f8:50:73:b2:89:04:d5:72:
         28:4a:49:a3:da:3f:0d:81:fb:6f:55:2c:4d:11:cb:e4:f7:ce:
         46:34:6b:8e:3a:95:c6:8d:58:18:a1:3a:65:8d:3a:3a:53:14:
         a1:7a:73:10:20:21:65:80:4c:5f:ea:00:0e:a6:21:ac:40:4f:
         0d:87:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:23:48 2025 by rpki-client