Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa
File:                     3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          Ql0iF5+L4dTD64DGYvCGzGkD3jGu1jUv08rhoiafxWk=
Subject key identifier:   5E:56:84:EE:EB:C8:DF:68:31:59:26:EF:F1:49:6D:F7:AB:74:8C:EA
Certificate issuer:       /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
Certificate serial:       2851A4B2675A3125F974BF7DF750485BD27E0257
Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 15 May 2025 13:09:18 +0000
ROA not before:           Thu 15 May 2025 13:04:18 +0000
ROA not after:            Thu 14 May 2026 13:09:18 +0000
asID:                     271253
IP address blocks:        164.163.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 19:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:51:a4:b2:67:5a:31:25:f9:74:bf:7d:f7:50:48:5b:d2:7e:02:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Validity
            Not Before: May 15 13:04:18 2025 GMT
            Not After : May 14 13:09:18 2026 GMT
        Subject: CN=5E5684EEEBC8DF68315926EFF1496DF7AB748CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:4a:0b:2e:38:a9:1b:78:3b:2c:31:f7:4e:
                    f8:c2:b3:0c:f1:06:bf:86:4e:d1:fa:68:46:ad:4e:
                    e2:eb:be:6b:18:c6:83:a8:8a:d8:35:4c:cd:ce:65:
                    53:81:b1:00:b6:a0:19:1e:82:61:76:36:ff:6d:59:
                    c4:e4:85:48:ed:1f:45:77:dd:9d:64:ff:65:b3:89:
                    4e:8a:43:dc:55:a4:7a:95:37:1a:12:a6:cc:a3:8a:
                    65:2d:17:e1:22:5c:2e:d4:77:75:b6:d9:a7:02:00:
                    14:40:1b:52:86:c5:89:5b:f0:1f:f9:a6:5b:20:cd:
                    fe:d9:ec:ad:06:b7:ab:6e:02:5a:c2:3c:f2:cf:26:
                    d4:e3:d8:50:34:3c:62:8d:c2:7c:65:17:1a:0a:fd:
                    ba:0c:f6:32:5c:e4:cb:d3:3e:4b:74:ad:ca:b0:d5:
                    ef:a8:91:80:b0:e2:44:7f:fb:60:9e:40:c4:c4:2a:
                    c0:d5:01:6a:3f:f9:b0:53:f7:ff:7d:c0:36:9c:bf:
                    97:04:0a:b8:3d:b8:a4:1b:a6:92:9b:7d:7e:bc:1c:
                    82:dc:65:e9:3f:81:b5:d2:99:35:57:3f:ac:aa:04:
                    7d:0a:ed:04:41:6f:07:a8:e7:16:8e:b8:58:42:36:
                    64:96:5e:dd:de:e6:aa:bb:c2:36:9e:1c:d7:54:c7:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:56:84:EE:EB:C8:DF:68:31:59:26:EF:F1:49:6D:F7:AB:74:8C:EA
            X509v3 Authority Key Identifier:
                keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:e5:39:ae:59:db:d3:bd:80:05:6a:f2:ab:dd:58:d0:d7:
         f4:2d:96:4d:da:44:57:de:d8:ca:5d:9c:88:ce:8c:31:3d:f8:
         2f:c8:0a:fb:5a:3d:6d:a7:aa:3b:12:29:fb:b0:c8:7f:40:e7:
         26:76:ad:b8:46:2a:3f:be:89:5b:33:63:9d:d9:e1:b0:87:df:
         c2:02:2d:35:39:5b:ca:c6:90:35:a5:e9:1b:0a:3e:f8:8b:69:
         ad:af:0c:45:d3:69:98:e5:33:40:0e:0b:d7:f2:2a:6f:e9:c9:
         48:52:30:02:ed:ff:bc:6e:95:16:47:eb:3e:fb:93:4e:d5:6a:
         1e:45:72:ba:5a:d5:ed:c1:76:8e:35:19:49:97:01:40:91:8e:
         95:89:9d:1a:e6:25:f6:71:44:d8:6d:e7:28:47:94:b9:06:9a:
         ca:a8:f8:89:b3:fb:6d:75:20:24:87:94:87:e1:db:52:2a:24:
         bd:26:c5:b0:3d:c6:2c:9f:79:3d:7c:6f:05:70:f3:da:29:d7:
         f0:af:ae:57:a5:e5:44:2f:9b:fe:6f:3e:88:df:e5:a5:1a:7c:
         35:e2:79:6a:1e:bf:35:b5:7b:71:a6:85:cc:da:d5:4a:14:e1:
         55:d2:cd:dc:c8:29:98:8d:be:1c:e3:b0:47:fb:ab:88:ee:77:
         bb:9c:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:18:45 2025 by rpki-client