Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e36322e302e302f31382d3234203d3e203232363839.roa
File:                     3138372e36322e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          MJWmIxIVah0tZuL1Hbw2dTPx0RczsyLfTJuqQaixI48=
Subject key identifier:   E9:41:2A:55:51:97:B8:AB:B0:14:21:4A:42:83:1D:55:2F:BF:0F:3C
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       167F9011FED4821688AB967211DBCA5949794957
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e36322e302e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 07 Mar 2025 02:18:06 +0000
ROA not before:           Fri 07 Mar 2025 02:13:06 +0000
ROA not after:            Fri 06 Mar 2026 02:18:06 +0000
asID:                     22689
IP address blocks:        187.62.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7f:90:11:fe:d4:82:16:88:ab:96:72:11:db:ca:59:49:79:49:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Mar  7 02:13:06 2025 GMT
            Not After : Mar  6 02:18:06 2026 GMT
        Subject: CN=E9412A555197B8ABB014214A42831D552FBF0F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:0a:09:0f:40:a7:63:17:ec:07:3b:e4:62:
                    0a:59:27:56:99:55:b5:f9:75:d0:fa:c2:32:e0:9b:
                    96:37:80:ba:a0:5b:cb:ed:9a:75:64:65:b7:6e:9f:
                    2e:19:89:fd:dc:68:15:f6:72:e4:ed:3a:57:64:2a:
                    f9:a8:37:47:1f:ca:c4:bc:54:8a:ae:83:90:0a:88:
                    e9:73:30:1c:a6:d0:ed:38:6d:b8:b6:65:7a:b1:39:
                    16:ab:72:bf:9d:01:6b:c1:1e:4c:24:e9:59:e0:14:
                    e9:ac:8a:e8:d4:89:f4:7c:ca:b6:c6:9e:5c:da:05:
                    93:05:38:1b:d4:35:26:f6:ae:99:c6:bc:ec:81:67:
                    16:87:ba:1a:49:1e:d4:2f:04:57:e6:f9:b4:cb:e6:
                    46:19:e9:1c:8b:45:4a:36:af:7d:ec:98:1a:b1:3f:
                    9c:73:41:69:b0:90:77:de:f5:97:0e:0a:e9:dc:ab:
                    1f:97:59:e4:7d:05:94:82:d6:c1:e1:f1:1a:3b:e1:
                    c5:0b:c1:e5:64:ec:97:4f:82:2b:16:fc:e9:82:c4:
                    3b:a4:2b:ff:42:ff:15:87:35:e6:d3:18:3b:2b:57:
                    62:34:fc:6d:0d:de:6f:84:67:b4:1f:96:55:83:c4:
                    50:1c:42:b2:8e:15:5c:b2:56:ea:98:2d:51:77:ea:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:2A:55:51:97:B8:AB:B0:14:21:4A:42:83:1D:55:2F:BF:0F:3C
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e36322e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:5d:bd:53:e3:98:ab:53:73:73:8e:7e:61:bd:73:9b:fe:
         29:d3:8d:67:fc:86:d8:c4:8a:22:d5:41:6e:69:02:d8:10:6e:
         98:c0:3a:d9:c8:cc:35:d6:ff:4b:29:2a:d5:7d:6d:d3:63:12:
         e7:43:c3:4f:49:69:fc:f2:90:ad:7d:73:47:f1:38:15:25:ce:
         ee:c7:6b:13:eb:35:16:18:28:d0:34:42:1f:b2:e6:c5:9a:c9:
         75:02:b0:e7:a3:15:e2:19:89:f6:57:75:e7:0c:33:a7:26:41:
         72:8e:0a:cb:b6:0f:d6:c9:24:4c:f1:94:e2:38:2c:3a:7c:8b:
         1b:9d:fd:6b:b1:8d:0d:51:09:b5:da:3c:ca:b3:43:92:09:70:
         dc:f1:c3:02:99:61:bd:e1:72:69:bc:19:e5:16:0e:3f:ad:9e:
         cf:50:7d:62:35:67:1e:40:17:e3:6f:ed:f7:27:19:90:6d:5c:
         24:32:42:7a:3d:2d:a2:0f:7e:10:63:91:d6:08:1d:cc:7b:1a:
         55:f9:fd:0b:d6:29:91:f0:a3:05:f3:2c:1a:c7:cc:5d:7f:8b:
         97:33:70:74:77:43:be:ef:21:e4:73:3d:ce:17:f4:07:33:6b:
         6a:4f:2f:4d:05:49:ae:7f:78:9e:20:2d:d5:4f:d3:2e:18:e1:
         a8:6f:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client on console.sobornost.net