Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa
File:                     3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          didSe+GfXx2a1PCd82LvbDhwq1DFCjBBLrpvoWWhIYs=
Subject key identifier:   CC:26:4A:F0:1B:45:3C:42:B7:A9:B5:6E:E0:BC:CF:4B:A3:C5:4A:E5
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       37FE57FF1A53A95EB00349199F115C61FE12DF45
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:36 +0000
ROA not before:           Fri 25 Apr 2025 14:45:36 +0000
ROA not after:            Fri 24 Apr 2026 14:50:36 +0000
asID:                     52721
IP address blocks:        138.185.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 23:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fe:57:ff:1a:53:a9:5e:b0:03:49:19:9f:11:5c:61:fe:12:df:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:36 2025 GMT
            Not After : Apr 24 14:50:36 2026 GMT
        Subject: CN=CC264AF01B453C42B7A9B56EE0BCCF4BA3C54AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:34:66:8e:8a:6a:22:25:7b:cf:c4:e0:57:
                    5a:70:6a:53:58:d4:b6:df:53:ab:fb:04:e9:18:cc:
                    06:d1:f6:d9:54:4a:d9:9f:da:ec:c7:b2:5c:b7:1e:
                    b2:12:8b:7f:96:2b:bb:a0:1e:27:c3:81:2a:1a:d6:
                    53:f9:7b:c4:0d:75:ac:5a:6f:82:32:e9:14:40:1c:
                    98:17:ee:12:d8:c2:49:64:2c:a1:13:03:1c:50:4f:
                    10:67:9a:fd:32:98:a0:5e:ed:87:8e:c0:a6:36:00:
                    7b:7b:4b:0d:9e:78:ed:67:3a:af:17:f8:26:70:3c:
                    91:97:2e:0c:33:fb:3a:ba:f7:81:d0:38:5b:38:f9:
                    6f:41:53:a2:da:03:65:c2:7a:4b:93:5a:63:58:f0:
                    1c:80:75:08:57:0e:bc:6a:f5:e3:fe:07:ee:ce:8a:
                    bb:ad:b0:d4:47:60:74:9c:66:f3:cf:f2:3d:74:23:
                    12:d8:9c:05:f9:fb:09:b6:6e:1b:d4:f1:0a:26:9d:
                    23:b9:14:69:3d:f3:f8:27:f9:2a:de:e1:ce:e6:4f:
                    9a:f2:0c:94:19:65:6d:6e:80:13:76:bc:61:d8:4c:
                    c6:40:fd:f1:8e:95:7c:62:ec:1c:ee:58:dc:2c:fa:
                    1a:d0:e9:25:60:2a:9b:16:00:c4:d3:e3:da:31:a6:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:4A:F0:1B:45:3C:42:B7:A9:B5:6E:E0:BC:CF:4B:A3:C5:4A:E5
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:3d:53:c4:3b:6f:59:d2:ac:ef:37:29:97:71:90:c3:9c:
         a9:65:4e:95:13:19:da:3d:48:1e:1a:04:2c:55:7e:07:65:8e:
         ff:c9:0e:f2:d4:ee:4c:75:cf:28:fa:68:e7:01:c0:7a:33:65:
         b5:60:f5:59:36:4a:e4:e9:00:96:c7:23:66:b2:ab:7a:23:d5:
         b4:cc:2c:7e:d2:6f:cd:58:1f:92:52:d9:f7:70:d6:ee:88:db:
         d6:2f:ae:91:d7:79:8a:7f:10:5f:1c:7b:d7:d1:d8:9e:a6:97:
         5c:2c:a5:db:d0:ee:de:2c:26:38:93:f2:ee:7a:c2:20:ed:ed:
         57:e2:7e:19:66:92:e9:a1:ff:bc:ff:50:91:b2:be:ac:72:9f:
         30:ea:21:43:ea:6b:91:5f:76:93:eb:9f:7c:83:7f:08:4d:cf:
         46:a5:1b:e4:38:d1:fe:6e:56:2d:50:b8:8f:fd:08:33:01:64:
         17:0c:63:97:8e:cf:82:11:33:f9:eb:7b:8e:10:06:c3:3e:ad:
         b5:49:b8:c7:15:36:64:75:da:1d:23:dd:93:39:c9:41:9f:17:
         72:c2:38:6d:0b:c3:b1:da:d5:3d:d3:8b:ec:0e:01:31:2b:d1:
         a5:74:81:45:70:44:96:33:de:0f:6e:da:a5:90:1e:76:02:19:
         e6:12:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:39:38 2025 by rpki-client