Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa
File:                     3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa (raw, json)
Hash identifier:          3Sy+mrwiYJIlYx1R7NHhedrFTq1r6418GfRrBjSZapw=
Subject key identifier:   CA:00:FE:9C:9F:23:42:44:27:6D:43:8D:EA:5F:34:EE:7B:D1:AF:2C
Certificate issuer:       /CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
Certificate serial:       3554A99A64CB910FA110814ED11A75BBD05979B4
Authority key identifier: 00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa
Signing time:             Thu 19 Jun 2025 00:19:45 +0000
ROA not before:           Thu 19 Jun 2025 00:14:45 +0000
ROA not after:            Thu 18 Jun 2026 00:19:45 +0000
asID:                     264192
IP address blocks:        138.97.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl
                          rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 01:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:54:a9:9a:64:cb:91:0f:a1:10:81:4e:d1:1a:75:bb:d0:59:79:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
        Validity
            Not Before: Jun 19 00:14:45 2025 GMT
            Not After : Jun 18 00:19:45 2026 GMT
        Subject: CN=CA00FE9C9F234244276D438DEA5F34EE7BD1AF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:b4:6e:ad:35:31:c6:12:0a:d3:62:d0:d9:
                    9a:66:a4:15:1e:37:85:26:de:72:d5:06:41:67:d9:
                    2b:a3:1c:ac:a9:66:eb:88:e3:e4:91:71:8d:1b:c6:
                    1e:fe:8c:f0:ae:8c:33:2d:99:8a:4c:51:af:b3:64:
                    50:35:48:4c:f2:97:53:a0:ba:57:ed:f4:b2:5a:2f:
                    3f:25:a5:4f:b3:7d:9a:2f:8c:d9:b9:b0:52:a8:66:
                    e3:cf:6a:28:3b:24:05:67:e5:b5:de:f7:7c:a9:d9:
                    c9:74:cc:c5:09:26:44:7a:f2:15:61:89:a0:6d:13:
                    3b:60:5c:04:3c:5f:91:0e:88:61:83:85:17:d3:20:
                    8b:d7:e4:06:33:11:9c:e6:30:d7:55:c6:63:42:f0:
                    35:6b:43:d3:43:6b:86:6b:b5:cb:51:13:de:2a:10:
                    19:ed:9a:54:c1:47:fc:94:15:09:d7:6a:72:f7:4f:
                    7a:de:7d:c0:fc:77:63:da:56:b5:cc:39:53:78:ef:
                    dd:d5:db:c1:4a:9e:b2:bf:24:15:4f:3a:c9:81:6a:
                    db:26:58:1c:37:a7:66:36:4c:78:2c:44:b2:a7:ed:
                    36:8d:a5:ef:35:37:00:66:4c:cc:61:da:60:9c:8f:
                    c2:72:48:a8:e8:20:5e:79:6d:48:55:3b:dc:02:04:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:FE:9C:9F:23:42:44:27:6D:43:8D:EA:5F:34:EE:7B:D1:AF:2C
            X509v3 Authority Key Identifier:
                keyid:00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:99:1f:27:3b:6d:ad:9d:cc:22:7a:08:39:32:29:f4:ae:25:
         41:5b:69:3c:64:83:57:11:f7:4c:0c:3d:3d:d2:6f:0c:bd:35:
         a2:06:ae:e6:f1:59:3c:f1:1e:04:ba:74:64:56:d7:03:04:a5:
         70:17:e4:cb:64:35:32:c5:b6:5f:56:85:7a:d7:cd:a5:20:1e:
         46:71:b0:71:a6:82:d5:5f:d5:05:21:39:4a:2e:be:0f:5f:8d:
         04:33:e3:06:78:e1:c9:07:84:49:cd:89:c9:9d:c3:d2:d3:45:
         4d:ed:67:79:c9:eb:a5:13:62:45:da:a9:cc:b7:85:f4:cd:b1:
         b9:df:33:94:ba:90:e6:38:1a:64:0d:41:6d:2d:56:3f:d7:3a:
         01:e0:16:1c:2e:c2:31:ab:30:e1:12:d1:6a:d2:a5:cf:73:2a:
         96:bd:d0:a2:d3:0a:34:7c:98:49:3c:ff:79:a5:a8:db:15:fe:
         97:80:45:03:e0:00:f1:0b:71:a4:be:dc:08:11:63:44:ee:01:
         86:6e:28:86:9f:cb:49:e1:25:ec:59:e5:c7:b6:e4:d0:bd:10:
         41:eb:a0:66:46:a0:0d:5a:da:5f:8e:f8:94:bb:f9:77:a0:c3:
         5c:a9:8b:e2:f2:e4:39:2e:96:0d:1b:83:11:b2:b5:20:f4:78:
         2f:90:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:07:41 2025 by rpki-client