Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3136382e3233322e342e302f32322d3234203d3e20323634393230.roa
File:                     3136382e3233322e342e302f32322d3234203d3e20323634393230.roa (raw, json)
Hash identifier:          2bleEPtFNfFzDgD6+5zCi+WCtfCLNAI0BqvqphucBjg=
Subject key identifier:   0D:5E:92:24:A9:A8:EF:C1:47:2F:91:CF:50:1A:1B:53:1A:8A:30:8D
Certificate issuer:       /CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
Certificate serial:       167EBA2B70572B1A69ACCA15C6911FCF692A7312
Authority key identifier: EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3136382e3233322e342e302f32322d3234203d3e20323634393230.roa
Signing time:             Thu 06 Mar 2025 06:42:20 +0000
ROA not before:           Thu 06 Mar 2025 06:37:20 +0000
ROA not after:            Thu 05 Mar 2026 06:42:20 +0000
asID:                     264920
IP address blocks:        168.232.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl
                          rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7e:ba:2b:70:57:2b:1a:69:ac:ca:15:c6:91:1f:cf:69:2a:73:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
        Validity
            Not Before: Mar  6 06:37:20 2025 GMT
            Not After : Mar  5 06:42:20 2026 GMT
        Subject: CN=0D5E9224A9A8EFC1472F91CF501A1B531A8A308D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:73:65:e1:00:6a:b4:76:91:96:61:bc:29:
                    a3:48:62:e4:6d:e7:2a:3e:2e:70:ec:ed:2d:de:e4:
                    8d:5b:1b:cc:3f:72:31:02:d0:d3:1e:bb:67:e5:49:
                    7c:f1:0e:b7:00:00:58:09:da:c8:51:ec:53:20:c7:
                    87:4d:e8:1f:26:94:da:2a:b1:69:22:6f:b6:e3:0a:
                    2d:4d:70:be:a1:23:3a:05:f9:ab:52:37:2a:27:50:
                    bb:15:89:a8:6b:2d:1a:c6:8c:ae:c3:6e:7e:27:37:
                    82:14:bc:bb:24:ad:8d:dc:e6:1d:fb:77:05:39:23:
                    ac:27:4a:5e:be:3e:89:d9:0f:1e:60:b9:a6:4e:53:
                    a9:1e:ea:6a:91:36:99:7a:83:0a:e8:a8:d1:f7:99:
                    88:50:a5:73:61:7b:ea:2d:c3:f7:19:8a:82:69:47:
                    d5:4d:e5:3e:c9:7f:72:27:84:7c:74:cf:0c:45:a1:
                    b0:fb:ae:a6:11:b6:db:93:e0:b3:dc:43:7e:fe:e0:
                    9b:f1:72:21:0d:8c:00:7d:32:46:89:e4:e1:6a:94:
                    0d:25:a0:a7:ee:af:36:fd:10:84:35:30:db:ac:67:
                    c2:7d:49:75:47:b0:05:24:00:4f:73:79:3a:e8:16:
                    ff:b3:62:81:c0:f2:a3:da:96:f9:77:53:b3:13:35:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:92:24:A9:A8:EF:C1:47:2F:91:CF:50:1A:1B:53:1A:8A:30:8D
            X509v3 Authority Key Identifier:
                keyid:EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3136382e3233322e342e302f32322d3234203d3e20323634393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:71:97:51:32:13:01:18:9a:fd:92:58:95:4b:fb:1b:f1:b3:
         90:7a:2b:87:79:67:a5:b4:3b:f9:98:85:6a:92:36:f6:9a:f1:
         0e:e2:f8:1d:09:72:bb:f5:65:ee:f0:e4:81:65:d5:50:7a:84:
         23:7d:a3:ad:12:8b:e6:79:b9:2b:2b:68:fd:7a:6e:26:90:17:
         f6:4b:90:1c:75:6d:05:b5:3f:ef:69:7a:0c:f8:48:dd:ab:6d:
         76:7b:10:4c:2c:52:99:c8:94:df:9b:56:4a:20:b2:30:65:f2:
         61:17:4d:80:37:96:3f:34:f4:b5:d9:ac:d8:0b:c1:15:5e:cc:
         c6:2e:a9:0f:6c:fb:eb:72:30:07:10:91:1f:9a:9e:d8:c9:a3:
         90:88:d8:47:7b:d3:be:d9:ce:63:1f:5f:af:48:91:87:c7:bc:
         be:6e:f2:5e:64:eb:4a:e8:b6:53:8c:5d:74:30:76:e4:28:92:
         11:3c:ec:a1:6b:13:ad:a6:fb:e3:57:7b:4b:ad:5f:38:98:60:
         f6:37:53:4b:ee:a6:95:78:64:e9:fb:0b:9d:da:c5:ba:4a:39:
         5f:e9:cd:43:66:94:3d:dd:a9:3f:28:e1:57:43:a9:a8:97:19:
         b8:ab:6b:2a:3c:50:b9:d3:58:22:1b:80:cd:4d:f4:d1:a8:05:
         7b:08:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net