Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          P/6F0xqM7ALCFemYV1RZV52zukIiu4vvaA4/gx+2hZA=
Subject key identifier:   6B:B7:F0:10:81:A3:2E:5E:82:E9:D3:F2:D1:9F:B3:4E:21:61:72:73
Certificate issuer:       /CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
Certificate serial:       0473758940628686CA8E27A4D8C05B8DE22D40FE
Authority key identifier: 47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa
Signing time:             Wed 09 Apr 2025 19:13:38 +0000
ROA not before:           Wed 09 Apr 2025 19:08:38 +0000
ROA not after:            Wed 08 Apr 2026 19:13:38 +0000
asID:                     267426
IP address blocks:        181.191.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:73:75:89:40:62:86:86:ca:8e:27:a4:d8:c0:5b:8d:e2:2d:40:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
        Validity
            Not Before: Apr  9 19:08:38 2025 GMT
            Not After : Apr  8 19:13:38 2026 GMT
        Subject: CN=6BB7F01081A32E5E82E9D3F2D19FB34E21617273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:d1:6a:b2:8d:cc:6a:03:8b:ed:16:ae:96:
                    d1:65:e9:70:dc:01:5e:7c:db:47:c6:15:4e:6e:33:
                    01:22:04:db:e2:f9:06:34:32:e8:19:c9:e0:89:1e:
                    3a:50:2b:3c:ba:29:a8:98:73:82:05:e8:70:43:88:
                    3b:66:c6:34:5b:a4:04:4b:62:58:23:30:14:85:96:
                    0a:81:95:99:37:ab:6d:5d:24:ef:24:af:26:5c:bf:
                    e3:2c:b1:42:61:74:d9:bf:d9:aa:31:88:76:cc:be:
                    3b:c0:11:69:28:76:fb:91:7f:97:ba:26:e4:14:64:
                    81:28:56:85:06:04:95:44:1f:9a:a5:8c:a8:4a:2e:
                    2c:e0:5c:08:52:df:88:ad:ee:ce:45:c1:6f:24:2a:
                    87:7d:20:12:8e:9e:81:0f:c9:92:31:9e:b1:b7:7c:
                    82:4c:5b:75:db:e8:04:4c:1a:d7:51:89:78:ec:e3:
                    4b:ee:60:b4:5e:c3:21:9c:e5:9a:09:df:b2:77:00:
                    1b:20:b6:ac:93:6d:0c:f6:96:89:9e:1a:d8:8c:24:
                    05:14:9d:6e:97:a5:3b:21:ac:40:95:b2:71:ea:7a:
                    e6:70:30:99:cc:01:31:5d:14:2b:26:9f:9d:ab:a2:
                    c8:7e:91:1f:76:8f:51:a4:05:aa:ee:c5:c8:46:c5:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B7:F0:10:81:A3:2E:5E:82:E9:D3:F2:D1:9F:B3:4E:21:61:72:73
            X509v3 Authority Key Identifier:
                keyid:47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:41:8f:0b:9f:94:5b:66:40:4e:bb:af:6b:d5:be:62:b0:70:
         7d:f5:f8:b5:58:df:7c:59:8a:1c:5d:67:f7:51:c7:bc:9a:a8:
         e2:8f:dd:cd:83:d9:61:36:d8:21:62:2f:3b:b7:27:4f:dc:bc:
         01:c5:a9:94:5d:75:5b:eb:34:54:20:37:96:39:6e:e4:5a:73:
         7e:0f:1e:e6:14:23:56:26:5e:ee:8b:8b:72:bb:3c:5b:bb:14:
         61:ed:5f:20:a4:0d:3a:59:29:d8:21:b2:08:bf:af:f1:7f:03:
         f6:71:1e:9b:1c:3e:17:16:68:2a:32:f5:57:23:40:9e:3b:c7:
         f7:ff:76:91:fb:95:59:c7:58:bd:3e:28:28:9e:c1:66:99:11:
         be:f6:51:4b:de:7d:b8:79:c3:15:35:a6:84:1c:c7:07:06:ea:
         bb:df:54:ce:bc:b8:5a:33:ef:b7:79:68:ba:7f:8b:07:b1:97:
         2b:5e:00:4a:bf:a9:6a:bf:dc:dc:f0:a2:d2:e4:82:7a:a2:73:
         c5:43:52:c7:f2:3d:ff:24:51:3c:cb:de:52:17:d8:a4:dd:2b:
         03:e9:57:46:41:cb:c0:bd:41:1f:85:9b:d3:6d:ce:b5:93:37:
         ec:15:14:90:f1:8d:f6:64:3b:07:d1:7e:58:59:c3:51:d3:cc:
         e1:bb:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:06 2025 by rpki-client on console.sobornost.net