Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          KGmtYZg8uieHVYAYvE6AE33X7A1OtlUL7NsP+k1cb+4=
Subject key identifier:   D6:74:38:45:9A:BD:86:F7:C0:55:94:B7:4D:F3:0A:BB:49:AF:5C:B9
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       0835179650AA694C310E1774C14A435998EC8B38
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa
Signing time:             Sat 19 Apr 2025 20:40:38 +0000
ROA not before:           Sat 19 Apr 2025 20:35:38 +0000
ROA not after:            Sat 18 Apr 2026 20:40:38 +0000
asID:                     266178
IP address blocks:        192.144.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:35:17:96:50:aa:69:4c:31:0e:17:74:c1:4a:43:59:98:ec:8b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Apr 19 20:35:38 2025 GMT
            Not After : Apr 18 20:40:38 2026 GMT
        Subject: CN=D67438459ABD86F7C05594B74DF30ABB49AF5CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:e8:ac:35:40:c7:c5:ca:73:31:ff:81:22:
                    b4:ad:92:6d:ff:59:ad:84:6e:4c:e6:0a:be:47:b9:
                    d1:77:9a:86:47:ec:70:a0:7b:30:d6:9b:02:d9:59:
                    ed:cf:94:28:7d:97:6e:3e:8b:71:91:06:54:01:ec:
                    4f:76:06:99:fb:28:c3:5f:b5:6a:85:cc:db:51:37:
                    8e:0d:0d:75:6f:0d:46:32:c0:b3:b3:38:38:81:0f:
                    41:ac:c4:6e:a7:e0:d1:3c:ff:16:ed:97:bf:f9:a6:
                    ee:fa:c6:22:a7:b0:74:ed:8f:8e:66:65:82:9f:c6:
                    d2:cc:bb:81:fa:d1:bb:8d:dc:61:d6:41:01:ab:6d:
                    46:b8:95:d6:11:71:c6:08:c9:41:d4:88:e4:64:ad:
                    ee:34:9a:9e:a9:57:24:83:c7:24:3d:17:7d:ec:be:
                    f5:36:21:f4:45:85:b7:8d:cd:fa:53:bd:d5:16:51:
                    e8:4f:25:c0:b7:72:10:b4:9b:d5:b2:bb:6a:4a:c6:
                    59:bf:26:5d:f7:b3:3d:fb:f4:77:8e:f5:1d:3b:7b:
                    51:90:ef:5e:06:50:8a:53:63:ed:7c:9f:9f:f6:21:
                    a7:a7:f4:e1:b0:9f:c1:40:5d:4c:a3:a1:5d:87:b7:
                    59:f5:86:d0:f7:f3:9f:13:9a:2e:4d:20:e3:0f:72:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:74:38:45:9A:BD:86:F7:C0:55:94:B7:4D:F3:0A:BB:49:AF:5C:B9
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a5:80:b5:a7:9c:61:c3:79:7d:96:49:15:63:28:f8:d8:4c:
         c9:10:ab:b6:f0:2f:9b:a6:3c:b8:11:9d:3a:c1:dc:33:8b:9f:
         88:a4:b7:de:c6:1d:be:88:34:76:78:ff:b2:76:a1:69:c4:24:
         f4:d3:0c:dd:32:cc:0a:58:0a:df:9e:26:5d:bc:33:30:20:f5:
         2f:ac:33:0a:7f:8e:76:b8:f4:83:6b:cf:e9:79:40:4b:15:b3:
         0c:a7:62:80:22:46:11:3d:be:16:4a:6b:bf:6b:c8:3a:be:7b:
         87:f4:7e:b6:80:13:07:20:97:f7:35:da:50:ff:85:de:a6:f7:
         21:8d:d4:59:af:d2:12:ea:21:70:17:1e:ac:db:14:fd:f9:52:
         4f:c3:cf:50:bc:2f:e1:b5:9d:ec:2e:de:20:a4:99:78:56:5b:
         d9:4f:b0:b6:fd:10:fe:50:33:5e:83:9b:84:c3:cd:65:e3:e7:
         f5:5e:7c:7b:67:bf:2b:78:2e:9b:c1:dc:5a:65:80:e6:cf:9a:
         94:02:0e:9b:9e:30:c2:a1:5e:0a:48:bd:ed:81:99:b1:25:60:
         da:cf:08:62:e2:bc:84:e9:39:0b:39:9a:26:25:23:37:41:05:
         21:49:98:0e:e2:5a:f9:84:aa:9a:38:14:ec:cc:2c:6b:ac:c1:
         00:71:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:26 2025 by rpki-client on console.sobornost.net