Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa
File:                     3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (raw, json)
Hash identifier:          XyS3jblFpiG2drdAu8D6HmYv5cLQOXgbSYQCQvhd0M8=
Subject key identifier:   22:B7:7D:E0:BA:72:62:8D:CB:02:3F:3F:E2:61:3C:6E:DF:EE:45:0B
Certificate issuer:       /CN=21619A6DD05DB15FE1B213C8C5C580B755346175
Certificate serial:       4117BF242326F2FDD49442F40770E88086F4E2FB
Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa
Signing time:             Thu 06 Mar 2025 16:48:20 +0000
ROA not before:           Thu 06 Mar 2025 16:43:20 +0000
ROA not after:            Thu 05 Mar 2026 16:48:20 +0000
asID:                     262996
IP address blocks:        186.219.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl
                          rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 13:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:17:bf:24:23:26:f2:fd:d4:94:42:f4:07:70:e8:80:86:f4:e2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Validity
            Not Before: Mar  6 16:43:20 2025 GMT
            Not After : Mar  5 16:48:20 2026 GMT
        Subject: CN=22B77DE0BA72628DCB023F3FE2613C6EDFEE450B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:1a:8e:aa:27:eb:f9:16:81:ef:e9:96:f1:
                    d7:9e:8c:6d:50:a6:24:85:14:61:9e:0a:8f:52:67:
                    22:ee:17:c2:8d:8d:00:b2:c6:33:f8:3b:70:ac:84:
                    a6:58:76:63:60:c0:c4:7c:0d:c3:ff:72:34:cb:e7:
                    d3:04:3e:1d:88:62:5b:49:3f:b1:7e:23:76:d4:60:
                    6a:99:33:5e:dd:df:7c:40:b7:30:be:6a:8a:29:51:
                    8d:c9:27:b2:10:98:ff:99:67:56:34:63:3f:50:d1:
                    9d:fb:2a:cf:73:07:47:d6:a2:97:2a:fc:e7:9c:86:
                    86:c5:5e:a3:9a:ee:a7:32:43:0e:87:ae:f7:df:68:
                    d9:6c:e7:50:ee:ec:ad:91:0b:5f:90:67:23:35:ff:
                    ae:1d:68:fa:f8:98:ca:3a:d2:d9:ec:db:2b:dc:dc:
                    8f:a7:d1:17:3e:c3:cf:cb:6f:ed:7b:bd:10:2f:b6:
                    31:ed:01:0a:a6:07:c3:57:5a:e1:14:9a:a7:f0:d5:
                    cb:07:3f:ca:9c:92:d9:af:0c:d0:40:35:32:a7:bb:
                    76:17:23:f6:d5:0e:50:d9:2f:88:d2:5b:a1:21:ab:
                    03:84:34:8c:b2:b8:0b:33:a3:fa:3e:97:e7:0a:88:
                    dc:8f:5b:35:af:d1:45:6e:9e:50:27:49:b7:11:6f:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:7D:E0:BA:72:62:8D:CB:02:3F:3F:E2:61:3C:6E:DF:EE:45:0B
            X509v3 Authority Key Identifier:
                keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:77:89:d3:53:8a:5d:0a:43:20:09:ec:f4:71:be:7f:2d:0b:
         82:97:dd:e9:e7:59:31:b1:0b:23:cc:36:85:b7:4b:69:f9:83:
         ca:20:0a:ce:ae:b4:ca:ce:7d:ca:38:82:62:27:ce:70:34:61:
         53:74:32:70:63:31:e6:ca:9e:b4:dd:be:96:f2:21:15:45:78:
         75:62:62:3e:2e:74:fd:93:3e:d0:51:07:c8:15:02:4e:a9:d5:
         54:ea:57:9d:0e:b9:5d:5f:31:a3:15:ea:b3:f9:98:32:04:b9:
         2b:7f:6a:1e:2b:67:6b:15:ac:e7:a7:9f:15:59:93:f9:71:95:
         05:3e:ee:c1:ec:ac:e9:7b:b1:1e:a1:f0:ca:32:31:bb:c4:f2:
         27:09:0a:70:02:dd:9c:36:c6:41:89:c7:4d:30:42:92:7f:8c:
         74:16:0d:44:80:85:78:78:a6:c1:a9:b5:8a:6b:a0:e3:d7:d1:
         eb:90:68:a1:ef:d9:28:43:9e:93:14:74:5a:8c:50:94:c3:71:
         a1:74:0f:99:68:25:c4:53:8a:4b:e9:7d:0a:ed:1e:6e:35:1b:
         f2:d3:b8:80:a3:bf:2f:32:6a:2d:24:a4:8e:e8:55:4f:62:86:
         45:70:b4:72:b3:31:bd:64:cc:a3:a0:c8:dc:50:ba:52:47:b5:
         7a:62:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:52:18 2025 by rpki-client