Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32342d3234203d3e203238323532.roa
File:                     3138372e312e3137342e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          B4n7Qp6xhZ7ue/YdQKg/bxN6THALe1AdoxlM5nnuu/o=
Subject key identifier:   58:64:25:BB:C6:BB:1F:C7:E0:4E:73:A1:7F:4D:B9:13:15:9F:10:B7
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       06EFB02D2F04BC99E0F7484CF987C8EE7B27451C
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:17 +0000
ROA not before:           Wed 09 Apr 2025 18:43:17 +0000
ROA not after:            Wed 08 Apr 2026 18:48:17 +0000
asID:                     28252
IP address blocks:        187.1.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ef:b0:2d:2f:04:bc:99:e0:f7:48:4c:f9:87:c8:ee:7b:27:45:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:17 2025 GMT
            Not After : Apr  8 18:48:17 2026 GMT
        Subject: CN=586425BBC6BB1FC7E04E73A17F4DB913159F10B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:96:f4:c2:d9:af:1f:00:cc:7b:ee:2c:0b:
                    11:9e:dd:4f:24:01:85:69:88:25:db:bd:26:03:ed:
                    b1:ee:d0:11:87:42:b4:5c:a0:1b:01:ca:c5:95:b0:
                    a3:62:82:fd:d4:1d:a9:93:64:64:48:3b:5c:08:77:
                    ed:18:29:9f:d9:6c:08:ca:e4:16:6f:f0:bb:28:98:
                    0f:dd:0d:39:7c:ed:b9:71:aa:7f:ce:e9:47:73:cb:
                    35:69:b2:90:51:1a:56:02:05:ce:db:1a:9b:b8:02:
                    bc:d3:30:75:3a:07:36:c8:3f:2e:52:32:f8:bf:5a:
                    7b:48:fe:ed:3c:4c:4b:f2:04:fa:2d:eb:02:d4:8d:
                    fa:74:03:67:35:cb:6b:93:8e:1f:17:32:93:1b:1c:
                    4a:bb:ed:11:f9:a5:a3:f8:8b:a7:22:b0:63:0a:9b:
                    7f:5e:f7:6e:66:cd:0f:10:49:60:a2:1e:4f:0c:ea:
                    62:63:97:ce:81:34:4b:6b:7f:68:b4:9f:c9:2e:96:
                    23:d8:58:74:a8:99:b5:9a:f7:49:1c:90:82:5f:f8:
                    7e:08:64:14:61:7c:c9:ff:c9:cb:94:8f:af:82:99:
                    98:e1:d5:3d:61:ee:aa:ba:b5:7b:1d:6f:de:eb:c0:
                    17:fe:67:05:14:23:b2:27:a5:01:81:7b:11:d2:4c:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:64:25:BB:C6:BB:1F:C7:E0:4E:73:A1:7F:4D:B9:13:15:9F:10:B7
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:47:1e:4b:8a:24:2f:c1:90:c4:e9:33:24:0d:af:fa:de:
         69:e6:4c:fe:ad:8d:0f:63:c9:08:1b:a2:f1:2f:b3:5b:be:8f:
         9f:5d:a6:0d:a7:cc:73:fe:68:c1:51:0a:d2:a6:d5:7a:4f:f6:
         8b:ce:2b:b7:26:c8:1d:c1:25:ee:46:53:ce:9f:eb:06:83:1a:
         b8:56:17:98:2b:cc:21:35:7b:cd:7c:d4:72:ba:dc:f6:dd:49:
         b3:9a:29:9e:d6:86:7e:30:d5:1d:72:58:70:8e:fa:f8:e5:b2:
         85:e2:dd:75:8a:0b:46:b6:20:8d:6b:cb:f4:d0:29:10:07:10:
         81:51:14:bb:bb:bc:df:8c:ae:20:e1:5b:73:12:e0:52:a8:59:
         71:65:10:42:e9:53:9c:47:64:e8:d3:d4:88:12:f2:43:02:44:
         c0:e7:59:93:d4:7c:e5:93:61:fd:49:41:a5:aa:28:9c:b2:f3:
         4f:30:47:c6:d8:43:f8:0e:40:ee:5a:16:ee:23:9f:73:a5:28:
         dd:f6:ab:fc:41:39:2c:4b:4f:04:f9:9f:4d:b2:28:a1:fd:a4:
         08:c8:53:99:87:dc:6a:fd:98:d4:50:b3:a6:30:21:5a:7e:44:
         b4:31:62:8b:e1:ee:11:11:c1:cd:6e:d2:2a:21:6a:71:cf:fe:
         03:20:0d:8c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBu+wLS8EvJng90hM+YfI7nsnRRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNTA0MDkxODQzMTdaFw0yNjA0MDgxODQ4MTdaMDMxMTAvBgNV
BAMTKDU4NjQyNUJCQzZCQjFGQzdFMDRFNzNBMTdGNERCOTEzMTU5RjEwQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTW5b0wtmvHwDMe+4sCxGe3U8k
AYVpiCXbvSYD7bHu0BGHQrRcoBsBysWVsKNigv3UHamTZGRIO1wId+0YKZ/ZbAjK
5BZv8LsomA/dDTl87blxqn/O6UdzyzVpspBRGlYCBc7bGpu4ArzTMHU6BzbIPy5S
Mvi/WntI/u08TEvyBPot6wLUjfp0A2c1y2uTjh8XMpMbHEq77RH5paP4i6cisGMK
m39e925mzQ8QSWCiHk8M6mJjl86BNEtrf2i0n8kuliPYWHSombWa90kckIJf+H4I
ZBRhfMn/ycuUj6+CmZjh1T1h7qq6tXsdb97rwBf+ZwUUI7InpQGBexHSTBkbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWGQlu8a7H8fgTnOhf025ExWfELcwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzODM3MmUzMTJlMzEzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsBrjANBgkqhkiG9w0BAQsFAAOCAQEAME1HHkuKJC/B
kMTpMyQNr/reaeZM/q2ND2PJCBui8S+zW76Pn12mDafMc/5owVEK0qbVek/2i84r
tybIHcEl7kZTzp/rBoMauFYXmCvMITV7zXzUcrrc9t1Js5opntaGfjDVHXJYcI76
+OWyheLddYoLRrYgjWvL9NApEAcQgVEUu7u834yuIOFbcxLgUqhZcWUQQulTnEdk
6NPUiBLyQwJEwOdZk9R85ZNh/UlBpaoonLLzTzBHxthD+A5A7loW7iOfc6Uo3far
/EE5LEtPBPmfTbIoof2kCMhTmYfcav2Y1FCzpjAhWn5EtDFii+HuERHBzW7SKiFq
cc/+AyANjA==
-----END CERTIFICATE-----
Generated at Tue May 6 22:40:44 2025 by rpki-client on console.sobornost.net