Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32342d3234203d3e203631353733.roa
File:                     3133382e3132322e36302e302f32342d3234203d3e203631353733.roa (raw, json)
Hash identifier:          Wcx6Coai7QDzXgmjEMqmgstSsMWmMXDd7pItcpUjnvk=
Subject key identifier:   96:49:DC:39:6B:40:9B:EE:F0:94:B8:C3:82:2C:3C:CD:AD:C7:B4:2C
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       74B352ED5541AF3EEB0094C3A34DBA5251EF6E7E
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32342d3234203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:21:01 +0000
ROA not before:           Sat 03 May 2025 00:16:01 +0000
ROA not after:            Sat 02 May 2026 00:21:01 +0000
asID:                     61573
IP address blocks:        138.122.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 04:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b3:52:ed:55:41:af:3e:eb:00:94:c3:a3:4d:ba:52:51:ef:6e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:16:01 2025 GMT
            Not After : May  2 00:21:01 2026 GMT
        Subject: CN=9649DC396B409BEEF094B8C3822C3CCDADC7B42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:aa:66:65:a2:0b:e0:75:51:d9:50:95:04:
                    90:1e:40:ab:fc:79:f1:de:94:3c:90:49:7d:8c:89:
                    f0:83:d9:a0:2f:0b:63:4d:db:5d:b4:46:ae:f6:26:
                    3c:c3:70:64:68:e7:04:2b:81:4c:47:c8:ff:d8:da:
                    ca:2a:48:28:26:fc:2d:1c:6f:60:99:4e:b6:06:ba:
                    9c:db:d5:29:a6:53:d4:15:0a:55:88:ed:c2:78:e7:
                    c2:01:7e:e6:29:a8:c6:3d:83:40:3b:86:0e:28:1e:
                    4a:31:68:14:3e:dc:3c:32:db:0e:a9:33:21:12:8e:
                    8e:0c:65:2c:5b:6e:56:18:34:92:01:be:35:38:7d:
                    d9:66:b3:ce:a9:58:74:23:0c:a0:39:1b:6e:82:e2:
                    9c:06:c9:40:0a:e0:1b:f7:0e:aa:e2:d1:9c:8c:d5:
                    da:21:99:0d:3a:ca:54:0d:ac:12:c3:c8:b0:0f:a7:
                    9a:f5:77:68:b3:d5:8e:22:f4:d2:35:6e:32:c0:d4:
                    9e:02:0f:4d:05:17:0c:81:d3:34:26:12:0d:58:55:
                    69:37:cd:22:0a:79:fb:f2:91:62:a5:98:6f:5b:6a:
                    70:29:20:30:4e:c2:b8:8e:41:9d:c0:e5:d2:96:b5:
                    c7:58:00:1b:a8:d4:6c:45:76:2d:11:2c:a0:03:a9:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:DC:39:6B:40:9B:EE:F0:94:B8:C3:82:2C:3C:CD:AD:C7:B4:2C
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32342d3234203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:4f:d9:5d:a0:92:57:33:f8:31:bd:6a:e8:86:aa:d2:bc:
         3e:30:77:38:c7:10:4c:15:34:5b:40:56:bf:c1:6a:20:18:5e:
         e2:6d:3d:f3:64:3e:20:1f:df:11:9d:d0:3c:59:cf:59:88:1d:
         38:d5:96:8e:e0:86:1c:e6:78:79:e9:8e:5a:71:51:09:e8:5c:
         09:db:1d:7c:30:ee:51:13:ce:e3:75:34:fd:74:2b:ee:a6:74:
         58:3b:00:c6:c2:2f:fc:f4:52:cb:52:dd:ce:54:38:6e:b1:d3:
         dc:31:b8:96:56:9c:51:a1:f5:c8:eb:8a:10:c5:c2:8e:f9:d3:
         58:cd:ad:c7:f9:cf:f1:88:cb:0e:37:3d:9b:38:f5:18:06:06:
         1e:fc:49:4d:9c:b5:2d:df:b9:11:ae:3c:57:83:e8:ed:a9:ea:
         58:5a:03:96:7f:f1:7e:07:14:b4:5e:be:ce:5f:e0:a0:e8:7d:
         1e:b2:d7:f5:35:fe:c5:68:68:5e:3f:ed:53:9e:fc:07:c9:34:
         3b:f8:e9:b7:2a:39:63:2f:9f:72:73:91:4e:5f:94:69:d7:83:
         e8:ea:c5:b6:61:35:29:c4:2e:2f:1c:d8:3d:47:24:ea:cd:76:
         fe:f7:a3:b0:19:02:05:39:1c:f3:57:53:56:13:85:0d:c2:e8:
         e6:60:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:17:01 2025 by rpki-client