Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3136372e3235302e34302e302f32322d3234203d3e203631393334.roa
File:                     3136372e3235302e34302e302f32322d3234203d3e203631393334.roa (raw, json)
Hash identifier:          ZAxZHYn1jd1KIEOx0LwEAOQYXFQhjO3G56yExriAALs=
Subject key identifier:   58:BD:4D:81:49:F0:01:94:AD:44:A6:C5:EA:4A:A3:1F:E3:32:94:BE
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       127F088BF7C9E6AFEB264BB6335828EAB7C3EFFA
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3136372e3235302e34302e302f32322d3234203d3e203631393334.roa
Signing time:             Fri 13 Jun 2025 18:26:13 +0000
ROA not before:           Fri 13 Jun 2025 18:21:13 +0000
ROA not after:            Fri 12 Jun 2026 18:26:13 +0000
asID:                     61934
IP address blocks:        167.250.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 11:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:08:8b:f7:c9:e6:af:eb:26:4b:b6:33:58:28:ea:b7:c3:ef:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Jun 13 18:21:13 2025 GMT
            Not After : Jun 12 18:26:13 2026 GMT
        Subject: CN=58BD4D8149F00194AD44A6C5EA4AA31FE33294BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:f1:2c:e4:90:ab:23:ba:53:a3:52:f9:14:
                    57:9a:f6:8c:a0:2e:a5:f2:ba:0b:fc:c6:cf:fa:11:
                    55:d2:2e:b8:28:92:24:a5:6a:a9:96:f7:5a:c3:22:
                    d4:89:87:e2:a1:80:d0:fc:1c:e3:57:39:e8:29:79:
                    fc:0a:e2:50:26:13:99:b4:02:df:2e:91:3c:d3:03:
                    d4:c9:4e:d6:38:99:92:5d:1b:ef:6f:06:85:e6:e8:
                    f4:9b:61:f0:99:f3:10:5c:e3:8e:68:f5:f7:74:7f:
                    6f:43:cc:38:0d:87:00:ee:7e:62:ba:91:7f:10:eb:
                    b1:83:bc:38:dc:ba:96:2a:85:5e:1e:72:56:77:0c:
                    25:ab:67:0c:f3:a2:32:64:46:8a:62:79:5d:fb:cb:
                    1e:f8:33:14:c2:b3:60:c1:a4:fd:22:16:c5:f6:21:
                    c9:05:2e:9a:7f:de:80:12:3a:9b:89:de:af:03:9a:
                    02:0a:62:6d:c7:f1:9c:a9:d6:c1:dc:14:40:dd:5d:
                    9e:59:ef:e4:bb:11:50:13:2b:e9:b5:eb:17:54:99:
                    6c:ce:7a:30:7c:39:f4:20:2d:18:05:d9:7f:95:6b:
                    44:21:4d:33:cf:fb:8b:94:6c:b9:6d:f3:b7:c2:ad:
                    1b:2b:0a:05:56:99:03:77:f3:fa:87:9f:a1:f6:0e:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BD:4D:81:49:F0:01:94:AD:44:A6:C5:EA:4A:A3:1F:E3:32:94:BE
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3136372e3235302e34302e302f32322d3234203d3e203631393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:3d:52:29:8f:c8:21:ca:b4:0c:31:27:42:d3:45:5f:df:
         34:29:68:fd:6f:8b:7e:a4:66:7b:65:63:01:56:30:d0:0a:06:
         5e:b2:6c:d4:56:c6:3d:dd:84:45:11:c9:ae:19:a7:f4:d1:cd:
         6b:13:86:4c:e2:6e:dd:51:97:89:87:6b:11:20:4f:42:6a:e6:
         0a:9f:25:e2:73:96:10:8a:a0:7f:13:1c:20:6d:66:8a:09:17:
         9c:93:bb:c9:59:81:5b:30:5e:21:22:2c:a8:01:79:88:77:73:
         62:c0:61:fe:4d:70:8b:02:b4:b0:76:af:33:42:5a:40:63:00:
         75:7f:19:35:2a:d2:b9:03:43:90:c6:1c:c3:8f:bb:6b:64:21:
         8b:8a:b1:58:50:1b:2e:f5:04:f7:91:29:9f:7e:cf:c1:0d:60:
         b3:3f:db:e1:a8:41:25:d6:37:db:8a:41:cb:2e:60:45:bd:84:
         d9:45:b8:47:2f:6c:31:46:dd:1a:54:8b:29:27:7f:5b:0f:c2:
         08:bc:ad:44:05:c5:72:e9:74:0c:7a:cf:de:b7:e7:5e:19:1d:
         c1:f9:0c:b9:2f:c4:2c:d4:11:30:fb:a1:ab:db:c2:c0:38:47:
         80:3e:eb:e6:43:3e:02:50:4e:33:db:0e:69:a5:81:f8:a0:a8:
         e5:74:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:12:55 2025 by rpki-client