Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138392e33362e3134342e302f32302d3234203d3e203238323934.roa
File:                     3138392e33362e3134342e302f32302d3234203d3e203238323934.roa (raw, json)
Hash identifier:          YBp1nrekNnjr0CSv6V0jJThJy2PsflLmZZ3h1CIpToU=
Subject key identifier:   B8:BE:07:33:AE:76:91:99:DF:9B:B5:C8:12:C7:A2:F1:24:8F:EE:30
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       2AA67AEE00F60026219B9F528F43ED459B0972BE
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138392e33362e3134342e302f32302d3234203d3e203238323934.roa
Signing time:             Thu 12 Jun 2025 11:59:38 +0000
ROA not before:           Thu 12 Jun 2025 11:54:38 +0000
ROA not after:            Thu 11 Jun 2026 11:59:38 +0000
asID:                     28294
IP address blocks:        189.36.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a6:7a:ee:00:f6:00:26:21:9b:9f:52:8f:43:ed:45:9b:09:72:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jun 12 11:54:38 2025 GMT
            Not After : Jun 11 11:59:38 2026 GMT
        Subject: CN=B8BE0733AE769199DF9BB5C812C7A2F1248FEE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:0e:69:4b:1f:fa:38:75:a7:95:b8:55:b3:
                    0a:b4:5f:a4:48:f6:6d:e8:6d:4a:68:19:d0:48:10:
                    1a:89:06:2c:e7:c4:4f:0b:ae:37:56:47:8c:4c:c0:
                    cb:96:76:a2:eb:41:4f:c1:7e:39:6b:9c:48:d6:a5:
                    71:6c:8f:0d:12:2e:6d:23:25:9f:f8:be:59:25:34:
                    fc:91:53:26:79:cb:bf:cc:3d:72:da:47:8b:7a:3b:
                    a4:e0:02:e6:02:bb:05:9f:de:0e:c9:4f:30:9b:60:
                    14:b7:f4:38:24:e2:a3:77:7d:f5:71:58:fc:5b:c8:
                    31:c7:d7:dd:08:98:0d:a4:3c:bc:9e:ba:f3:41:6e:
                    b2:b5:df:3d:2f:02:cb:44:ab:31:f3:c7:4e:f5:40:
                    8c:ed:0b:50:12:e5:80:39:0d:b0:fb:93:9f:10:91:
                    7f:c9:4a:5f:a5:21:06:e3:60:65:a3:2b:3a:62:70:
                    81:51:8b:77:cd:82:af:75:2a:ac:e8:42:55:b7:60:
                    e2:f0:b9:28:df:92:b0:fe:56:ac:a1:06:a7:5f:f6:
                    ca:f3:ac:ff:d0:e1:cb:f2:9c:6b:94:ea:43:44:a6:
                    5a:cb:e4:bf:79:70:42:9a:66:f7:78:c0:51:af:6d:
                    29:24:75:89:87:16:a1:1b:a3:f2:19:bb:1f:4a:b5:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:07:33:AE:76:91:99:DF:9B:B5:C8:12:C7:A2:F1:24:8F:EE:30
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138392e33362e3134342e302f32302d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:89:5a:e6:df:b5:42:a9:3b:a3:1b:ed:1d:90:91:3c:f7:27:
         a4:8b:b2:2f:a0:95:a4:35:15:70:fb:1b:2f:bf:90:e1:f3:1c:
         f4:47:38:c8:f4:c1:1a:6c:5a:ba:a2:7a:90:55:67:ca:cd:f5:
         6c:df:19:aa:29:1b:6a:d7:b9:be:25:5c:32:bd:6f:ab:7e:66:
         b9:e6:d9:99:0d:97:b5:9f:8e:67:ae:df:2e:a9:e4:5a:65:6c:
         dd:fa:b5:f5:6c:6f:da:53:aa:e2:68:91:0c:f3:e9:3f:e5:76:
         b1:4b:4b:c3:24:ce:d7:05:67:56:aa:71:55:fe:cd:1c:74:c7:
         75:81:2e:74:93:19:4a:11:4f:69:c9:b8:ba:50:2d:d6:c5:9d:
         9d:cd:05:93:92:3f:cc:af:20:6f:e9:6c:a5:6f:96:25:5e:85:
         21:a2:54:6c:70:59:3b:cd:95:2e:88:06:e8:80:82:b8:31:33:
         d8:f5:c5:e6:fd:53:48:56:8f:2c:4e:72:67:0c:54:0f:a9:0f:
         b7:e1:2f:f5:8c:5b:0c:ec:52:2b:f9:30:1d:de:0f:1b:57:09:
         20:97:2c:c2:67:f1:ea:9b:7d:30:6a:62:11:65:51:7b:5e:1f:
         80:91:a7:65:f4:ad:e5:70:4f:05:df:5d:41:ce:26:05:d5:05:
         19:33:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:20:37 2025 by rpki-client