Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32332d3233203d3e203238323532.roa
File:                     3137392e3138392e3235342e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          pX4kpMlbUazEZmdNFlU7zEUdgpRwdNJjRWWRDWDma9I=
Subject key identifier:   33:31:34:B0:6F:DD:11:25:55:87:91:4F:D9:34:FF:97:6D:90:72:23
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       0D5C2DAD4DD72504C44FA549DF09CF1D2D9F9E05
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:13 +0000
ROA not before:           Wed 09 Apr 2025 18:43:13 +0000
ROA not after:            Wed 08 Apr 2026 18:48:13 +0000
asID:                     28252
IP address blocks:        179.189.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:2d:ad:4d:d7:25:04:c4:4f:a5:49:df:09:cf:1d:2d:9f:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:13 2025 GMT
            Not After : Apr  8 18:48:13 2026 GMT
        Subject: CN=333134B06FDD11255587914FD934FF976D907223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:f2:2e:ce:9d:42:cd:2f:25:c3:2e:88:34:
                    ef:bd:a0:71:f7:72:fd:2f:55:2a:fb:67:a6:66:d7:
                    f9:ae:a1:35:bd:24:0b:18:69:48:22:a5:3f:b7:eb:
                    d2:1a:ee:fa:6e:df:59:ca:92:0f:ae:f0:c0:e8:03:
                    a4:e2:4c:4c:ad:68:ce:ec:d9:06:5e:f1:38:92:ee:
                    4b:c2:9c:63:1e:27:41:67:79:68:28:a0:b4:0c:7f:
                    25:e0:14:5f:1f:03:32:16:70:ee:c7:40:59:4f:14:
                    5c:fe:92:af:53:29:46:9f:99:06:a5:a9:88:34:0a:
                    e9:ae:6f:d1:e9:4e:cd:8f:f8:ec:d3:8f:ba:17:18:
                    0c:4a:fc:d3:61:b7:2c:59:25:66:e5:d3:12:c8:41:
                    7c:aa:12:6e:5c:8e:f2:a2:b2:88:eb:ba:97:12:96:
                    e4:45:c3:24:46:a1:34:ba:8d:f4:b7:ec:42:b0:b3:
                    c2:b3:9c:d8:d4:73:d8:68:c7:87:9d:14:96:73:f6:
                    87:44:46:56:34:bb:a2:93:91:60:90:e9:ab:fe:0a:
                    1a:9a:01:b2:40:33:90:f9:f1:a0:ef:3f:df:33:c1:
                    55:f1:5a:7d:1f:6d:3a:5b:60:81:dd:5e:68:02:e3:
                    18:4e:fe:ee:1d:06:21:f2:20:22:60:42:81:de:da:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:34:B0:6F:DD:11:25:55:87:91:4F:D9:34:FF:97:6D:90:72:23
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:97:11:41:36:e5:63:a9:9d:dd:eb:18:b5:6a:9b:93:5e:6f:
         de:24:fd:d9:74:23:55:7d:e8:98:89:98:f5:e8:25:51:45:4d:
         c0:34:5b:80:05:a1:c8:9d:4f:58:0d:8e:39:2e:4b:8c:7d:1c:
         a1:64:bb:6f:67:d7:d5:1f:8a:52:6a:15:19:8e:83:b0:f2:23:
         f6:65:7e:89:1b:34:dc:fd:95:2f:45:6c:46:5a:08:e1:b0:6e:
         2e:e5:c8:76:92:f5:14:dd:db:3b:88:0e:6f:e7:56:fe:66:7e:
         8b:43:f3:d7:a1:3c:cc:d5:ec:b4:dc:75:16:09:23:33:b1:e4:
         fc:c5:c3:3f:af:6c:13:76:f6:c2:ab:64:6c:a9:f5:f0:72:95:
         4a:d8:51:3a:24:07:a5:ee:84:e5:9f:bc:00:fd:47:de:2a:6c:
         f5:14:48:ed:c3:93:48:2c:72:4c:bd:71:fd:36:30:24:94:4b:
         f4:42:91:b1:3d:6d:fe:96:9c:9a:9e:20:a7:82:79:06:48:ed:
         1d:75:bc:23:03:c3:8f:1a:76:f7:8e:3a:ed:d4:df:a7:47:c5:
         f4:0e:dd:38:16:02:75:ce:c6:af:6b:c7:f4:96:bc:b2:3b:06:
         09:f9:b6:d8:d9:5b:96:a0:f7:3a:b6:a7:e6:c8:b7:4a:5e:d1:
         77:ce:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:40:43 2025 by rpki-client on console.sobornost.net