Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          M6ER/d26ON15UtTOvFStLwb3bWS5QtDioUQFgvHKQfQ=
Subject key identifier:   04:34:76:BA:BA:47:9D:B8:76:EA:BE:E8:77:A4:CB:9D:60:B6:A4:84
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       1E42247E19CE6AF82ACB1787F9A4925902AB8FB4
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
Signing time:             Sat 19 Apr 2025 20:40:38 +0000
ROA not before:           Sat 19 Apr 2025 20:35:38 +0000
ROA not after:            Sat 18 Apr 2026 20:40:38 +0000
asID:                     266178
IP address blocks:        192.144.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:42:24:7e:19:ce:6a:f8:2a:cb:17:87:f9:a4:92:59:02:ab:8f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Apr 19 20:35:38 2025 GMT
            Not After : Apr 18 20:40:38 2026 GMT
        Subject: CN=043476BABA479DB876EABEE877A4CB9D60B6A484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:1e:7c:2d:ee:11:27:3e:21:30:4d:ca:26:
                    3a:9c:a5:94:87:be:18:d6:f5:4e:f3:04:3a:55:9d:
                    fa:43:6f:77:79:df:86:5c:ac:3f:e6:ea:0f:71:4e:
                    34:ac:fb:54:68:9d:f4:40:1b:70:67:da:86:ac:49:
                    64:4c:29:cc:ef:be:7b:42:9d:0b:6f:a9:da:65:ef:
                    ea:8a:83:15:7c:0d:53:e7:66:51:55:db:bf:4a:17:
                    9c:07:19:5b:26:4b:b7:71:6b:b8:71:67:ba:91:9c:
                    b5:9f:24:56:11:0e:87:e0:13:2b:33:27:ad:c3:84:
                    82:ae:0c:a4:a6:63:75:31:6d:5f:06:b1:4f:a8:a3:
                    dd:17:4b:cb:1e:28:9a:e6:e8:08:98:c3:fb:25:21:
                    d9:67:1d:36:09:72:78:97:82:62:60:90:c6:01:61:
                    5d:d2:ef:74:46:25:7c:f7:d3:b6:a1:dc:ad:44:55:
                    9d:a8:4b:fb:b6:b2:03:8d:19:ea:13:2a:4c:5c:7a:
                    8b:9c:3b:83:f3:ee:3b:d8:70:f4:3e:97:0a:30:1d:
                    1a:0c:5b:29:35:03:6e:4d:23:76:f3:6f:b4:45:28:
                    cb:7a:ef:62:9d:fd:00:12:28:29:29:dc:dc:39:e5:
                    1a:0e:97:18:3e:0d:55:33:b0:29:5c:91:a8:8a:65:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:34:76:BA:BA:47:9D:B8:76:EA:BE:E8:77:A4:CB:9D:60:B6:A4:84
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:1b:13:67:63:fe:aa:ae:20:4e:31:46:b2:7a:29:e8:97:
         48:34:0a:dc:f4:23:74:da:8f:c9:f2:ba:4f:1b:68:a7:a5:83:
         c1:7d:1a:8a:a2:9f:d9:57:dd:d5:1a:d5:21:e5:99:14:8a:52:
         fb:92:d2:14:24:9e:ec:c9:76:26:3e:32:f2:10:49:20:fc:26:
         6b:44:75:65:b4:98:e0:e8:66:d9:da:ca:ff:24:12:b3:fc:5b:
         0d:0c:39:4c:fc:94:e0:f3:f4:6e:41:a8:81:f1:5b:90:ad:6b:
         a0:96:ea:7e:4c:28:10:65:c1:22:f8:49:54:d7:f0:45:44:71:
         52:88:31:5d:f3:20:7e:54:2b:be:88:6a:d4:ef:49:a3:87:27:
         24:ef:7c:68:4e:ae:cf:cb:d0:fd:4b:a5:6d:1e:b8:3b:b5:0c:
         e9:59:e5:96:f0:d6:d9:05:73:d2:23:45:91:2f:c1:89:30:ed:
         0c:c2:54:c6:88:aa:3c:dd:55:d0:6e:d0:a4:f6:62:63:5e:91:
         7e:0b:bb:82:0a:5e:46:43:20:8d:2b:8e:4d:e0:83:dc:60:f9:
         c5:69:79:68:5b:d9:dd:b7:5b:ff:2c:d1:90:cd:58:38:72:86:
         3f:ad:fd:c5:25:94:63:57:a5:a5:d9:97:f8:90:a4:ea:f9:ab:
         29:60:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:26 2025 by rpki-client on console.sobornost.net