Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa
File:                     3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa (raw, json)
Hash identifier:          ksejObepEmWpjfogctCswME5aMdYuL59ynqkksXdS6s=
Subject key identifier:   03:4B:94:23:ED:74:CF:85:3E:27:A6:C5:72:D0:FD:2C:7B:DD:A9:D1
Certificate issuer:       /CN=764567616A60FC68D3BC1B6D3EC8446979113187
Certificate serial:       16041A280EDE371BE8AAAB1FBC057FA62E5A440C
Authority key identifier: 76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa
Signing time:             Thu 03 Apr 2025 18:13:53 +0000
ROA not before:           Thu 03 Apr 2025 18:08:53 +0000
ROA not after:            Thu 02 Apr 2026 18:13:53 +0000
asID:                     265307
IP address blocks:        168.90.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl
                          rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:04:1a:28:0e:de:37:1b:e8:aa:ab:1f:bc:05:7f:a6:2e:5a:44:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764567616A60FC68D3BC1B6D3EC8446979113187
        Validity
            Not Before: Apr  3 18:08:53 2025 GMT
            Not After : Apr  2 18:13:53 2026 GMT
        Subject: CN=034B9423ED74CF853E27A6C572D0FD2C7BDDA9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:42:c8:0a:17:1b:3e:ce:c7:80:03:e6:9b:
                    ae:05:56:3b:62:43:3f:9b:d6:c7:f0:35:6e:6a:7b:
                    05:20:ed:80:f4:0c:1c:cd:36:97:a9:d8:82:38:99:
                    0c:32:17:6e:86:37:8b:3b:85:df:8d:b5:2f:45:ff:
                    f9:3e:03:82:1b:07:cd:2b:31:34:a0:c1:13:65:57:
                    df:d0:cf:12:83:69:b8:83:36:c9:05:f8:fb:b1:48:
                    e3:6d:ea:8a:88:c4:12:17:63:d7:90:4b:61:1f:98:
                    a7:31:16:87:0e:bf:27:81:22:ad:82:3b:7c:e4:e9:
                    c6:09:84:81:99:f6:37:c3:34:e1:34:bb:8f:0c:7e:
                    95:55:09:73:18:6d:86:d3:60:c3:9d:75:6e:5c:89:
                    18:c5:8d:4d:5b:2f:1e:c3:06:18:21:1f:4d:89:67:
                    12:d2:c6:92:0d:77:b5:3a:0c:83:a3:b2:19:7e:70:
                    b1:d1:2a:40:fb:ed:dc:67:db:9f:cb:66:0e:a3:d0:
                    9d:e4:9b:d5:12:72:ea:ee:85:b4:0c:af:2d:4e:ef:
                    da:5e:4b:46:2f:07:51:13:5f:4b:fb:c0:7e:b3:50:
                    37:62:85:b8:67:8d:b2:51:2b:4a:f2:d3:24:a4:08:
                    f7:4a:77:e2:51:e1:8b:38:e0:ff:f9:7d:1e:a5:09:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:94:23:ED:74:CF:85:3E:27:A6:C5:72:D0:FD:2C:7B:DD:A9:D1
            X509v3 Authority Key Identifier:
                keyid:76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d1:b7:57:fe:e8:44:17:07:d6:f5:9d:74:e7:f2:3b:a4:ad:
         3f:e0:fd:2f:04:6c:b3:40:d6:a9:3a:2b:cd:de:3f:8d:e6:b3:
         21:0e:dd:2c:3d:83:ff:5c:80:93:e2:9b:e4:cd:8f:2b:de:57:
         58:da:d7:13:07:ff:17:b9:ad:5e:14:1e:d7:15:b1:a8:af:3d:
         d7:36:8f:57:1a:fe:60:b7:e9:07:e4:55:d1:08:85:51:a0:ea:
         24:cc:0d:16:d0:12:ae:32:c0:2a:9e:c1:06:9c:fe:ab:d7:fd:
         5b:36:be:94:5c:3c:98:7a:d5:b7:dc:7a:25:cd:91:11:1b:37:
         58:da:42:2a:b2:96:7d:b3:2c:68:0b:d9:ce:61:33:56:d2:22:
         6d:68:b1:d9:89:4a:f3:a2:09:ee:d6:f5:d0:3d:ea:d1:60:ff:
         40:2b:53:05:07:dc:2b:f6:28:9f:bd:f3:8f:db:81:7c:3b:3e:
         eb:c3:f7:b2:2b:93:40:1d:f8:71:e2:e5:58:05:15:db:3c:0e:
         49:df:4a:38:11:6b:24:3c:d6:88:6a:e0:89:96:25:4d:8c:fd:
         3e:50:e2:9e:26:f0:d7:49:80:95:28:22:06:9f:6a:f5:49:0a:
         c4:9b:0f:41:78:8d:48:9d:d6:c7:a1:57:92:f5:f6:21:23:95:
         5f:71:59:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFgQaKA7eNxvoqqsfvAV/pi5aRAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0NTY3NjE2QTYwRkM2OEQzQkMxQjZEM0VDODQ0Njk3
OTExMzE4NzAeFw0yNTA0MDMxODA4NTNaFw0yNjA0MDIxODEzNTNaMDMxMTAvBgNV
BAMTKDAzNEI5NDIzRUQ3NENGODUzRTI3QTZDNTcyRDBGRDJDN0JEREE5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbULIChcbPs7HgAPmm64FVjti
Qz+b1sfwNW5qewUg7YD0DBzNNpep2II4mQwyF26GN4s7hd+NtS9F//k+A4IbB80r
MTSgwRNlV9/QzxKDabiDNskF+PuxSONt6oqIxBIXY9eQS2EfmKcxFocOvyeBIq2C
O3zk6cYJhIGZ9jfDNOE0u48MfpVVCXMYbYbTYMOddW5ciRjFjU1bLx7DBhghH02J
ZxLSxpINd7U6DIOjshl+cLHRKkD77dxn25/LZg6j0J3km9UScuruhbQMry1O79pe
S0YvB1ETX0v7wH6zUDdihbhnjbJRK0ry0ySkCPdKd+JR4Ys44P/5fR6lCbNDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA0uUI+10z4U+J6bFctD9LHvdqdEwHwYDVR0j
BBgwFoAUdkVnYWpg/GjTvBttPshEaXkRMYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tUTVkxY0JKQzl3MmpHWGNRYm9hQVFORUc3VHpaVW44VXZMcm5RdG1w
TG8vMC83NjQ1Njc2MTZBNjBGQzY4RDNCQzFCNkQzRUM4NDQ2OTc5MTEzMTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDU2NzYxNkE2MEZDNjhE
M0JDMUI2RDNFQzg0NDY5NzkxMTMxODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdLVE1ZMWNCSkM5dzJqR1hjUWJvYUFRTkVHN1R6WlVuOFV2THJuUXRtcExvLzAv
MzEzNjM4MmUzOTMwMmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWmYwDQYJKoZIhvcNAQELBQADggEBAJbRt1f+
6EQXB9b1nXTn8jukrT/g/S8EbLNA1qk6K83eP43msyEO3Sw9g/9cgJPim+TNjyve
V1ja1xMH/xe5rV4UHtcVsaivPdc2j1ca/mC36QfkVdEIhVGg6iTMDRbQEq4ywCqe
wQac/qvX/Vs2vpRcPJh61bfceiXNkREbN1jaQiqyln2zLGgL2c5hM1bSIm1osdmJ
SvOiCe7W9dA96tFg/0ArUwUH3Cv2KJ+984/bgXw7PuvD97Irk0Ad+HHi5VgFFds8
DknfSjgRayQ81ohq4ImWJU2M/T5Q4p4m8NdJgJUoIgafavVJCsSbD0F4jUid1seh
V5L19iEjlV9xWfU=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:50 2025 by rpki-client on console.sobornost.net