Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136392e302f32342d3234203d3e203238323532.roa
File:                     3138372e312e3136392e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          2C9xmxYbki5IoYZD6EKwK7lQo3/ybjy3qWAkej4IkiU=
Subject key identifier:   ED:24:C6:C9:65:BB:5D:7A:86:3E:E7:AE:70:9E:1C:D3:AE:8D:FA:94
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       65F91BAD407C11EA88BF004EA14ED12FB96D06E3
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136392e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:18 +0000
ROA not before:           Wed 09 Apr 2025 18:43:18 +0000
ROA not after:            Wed 08 Apr 2026 18:48:18 +0000
asID:                     28252
IP address blocks:        187.1.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:1b:ad:40:7c:11:ea:88:bf:00:4e:a1:4e:d1:2f:b9:6d:06:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:18 2025 GMT
            Not After : Apr  8 18:48:18 2026 GMT
        Subject: CN=ED24C6C965BB5D7A863EE7AE709E1CD3AE8DFA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:14:11:70:d0:af:1d:c5:b5:14:76:f8:f7:
                    3f:b5:2c:e4:dd:d0:6b:6d:20:3d:c8:0d:b3:72:61:
                    70:7a:af:6c:80:15:ff:6f:f4:26:0a:f3:ce:d4:d8:
                    57:18:0f:7e:0d:69:8b:cc:fb:ba:f2:ce:47:9c:fa:
                    39:58:3e:7a:d2:d9:ad:c2:e1:eb:85:0a:bf:c1:be:
                    d2:d4:2e:3f:46:39:76:d1:06:70:ec:5e:d8:31:45:
                    ee:d6:25:7f:35:3e:f0:8f:8c:4b:7b:52:9f:01:16:
                    0d:19:0c:4e:33:8b:99:fb:b3:8b:bd:93:dd:c0:b4:
                    d1:f2:c3:40:f6:0c:25:75:22:86:18:dc:77:71:89:
                    6f:d1:99:9f:5e:09:91:16:d4:10:5c:5a:ce:66:c7:
                    a2:ae:4e:61:73:bd:bf:f3:b3:af:fa:1f:60:50:72:
                    52:4b:f6:db:a8:8d:f4:6e:53:cb:59:ef:95:7a:a0:
                    e4:f0:2c:f5:b4:1e:a6:1b:be:98:d7:90:7e:63:ba:
                    8b:7b:3f:23:a2:ba:3e:9f:3a:53:cc:59:9b:36:51:
                    41:00:60:18:ea:ae:43:2c:00:55:14:0a:ec:03:fd:
                    25:99:b7:e8:8d:38:69:e1:06:39:cd:1b:33:bd:7e:
                    d9:4f:cc:20:55:f8:8d:7f:16:ea:6e:40:b0:f1:1b:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:24:C6:C9:65:BB:5D:7A:86:3E:E7:AE:70:9E:1C:D3:AE:8D:FA:94
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136392e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:2b:c3:e2:08:39:79:36:b9:ae:92:78:53:d8:cf:83:74:10:
         1d:03:fb:c5:46:83:0b:ff:bb:9d:0a:1c:21:ca:30:da:a8:0c:
         d4:82:41:d6:7a:fa:7a:ad:9a:c0:43:3a:66:6e:b5:f2:b4:07:
         92:60:93:16:87:5c:eb:c7:45:b9:6e:61:0c:78:c1:69:65:7d:
         97:bc:b5:6d:2a:da:b3:1e:39:2e:b3:5b:b8:c6:45:b7:50:64:
         ea:1c:04:05:db:7d:5b:39:42:c6:3a:35:13:e2:82:6d:0e:e7:
         0a:65:53:ba:7c:b2:52:13:aa:72:50:b9:75:bc:2f:96:33:80:
         bb:d5:4f:8f:bc:10:1b:d7:07:50:17:6e:87:18:3e:19:18:88:
         de:be:d7:d0:15:b1:ef:62:35:d5:fe:69:c9:3f:e5:fe:82:ed:
         27:e6:61:08:b1:00:27:4d:f6:5c:e7:a1:09:c8:71:c1:98:bb:
         f0:04:97:db:4a:96:be:ff:02:74:1e:19:53:fa:3e:e0:27:88:
         4f:07:09:af:f9:55:6e:0e:cd:25:83:cc:fb:17:f8:40:ee:6a:
         e3:8e:ef:3d:c0:31:41:ea:20:9f:21:58:f1:e2:db:d2:e0:df:
         7c:43:76:8b:74:31:76:41:06:78:72:a9:6b:ca:4e:56:fe:b2:
         f3:58:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:40:44 2025 by rpki-client on console.sobornost.net