Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137312e302f32342d3234203d3e20323730393638.roa
File:                     3138312e3232352e3137312e302f32342d3234203d3e20323730393638.roa (raw, json)
Hash identifier:          1IBPD0SH77tuMOUQNYXGcGoz9TYOMck2b1ukjHaKbV0=
Subject key identifier:   71:34:9A:7C:57:07:C9:50:73:4E:99:26:DD:D5:E1:C8:24:A8:30:5C
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       0567B867F6A27877190A2351B8A219E89A69D7C1
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137312e302f32342d3234203d3e20323730393638.roa
Signing time:             Mon 14 Apr 2025 21:14:24 +0000
ROA not before:           Mon 14 Apr 2025 21:09:24 +0000
ROA not after:            Mon 13 Apr 2026 21:14:24 +0000
asID:                     270968
IP address blocks:        181.225.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:67:b8:67:f6:a2:78:77:19:0a:23:51:b8:a2:19:e8:9a:69:d7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Apr 14 21:09:24 2025 GMT
            Not After : Apr 13 21:14:24 2026 GMT
        Subject: CN=71349A7C5707C950734E9926DDD5E1C824A8305C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:f0:27:36:b5:04:2a:00:8f:11:90:37:1e:
                    74:31:cb:d8:b1:7a:c9:d1:49:0f:d7:52:81:5c:14:
                    55:cc:d3:a1:2a:2d:42:e5:89:19:41:58:21:b3:4f:
                    24:be:54:4a:13:9b:6b:8e:73:b8:8d:57:3f:5e:d2:
                    c2:cd:53:8b:7b:eb:4a:87:84:98:e5:ce:6e:83:d1:
                    26:40:cd:73:2c:5e:97:4d:f6:f6:40:a4:ad:d3:50:
                    5e:fd:0e:52:cf:5e:1d:98:4c:d3:7e:b2:99:a1:7d:
                    f1:ee:91:6d:93:b7:07:04:32:4e:6d:a7:65:55:90:
                    4e:52:47:ff:ee:0c:f0:da:87:69:49:dc:0d:42:d5:
                    21:ca:93:16:0b:4c:e2:97:e5:06:e1:1e:51:12:ce:
                    29:9f:41:eb:74:ef:6e:6a:11:4c:2a:e1:d9:5c:38:
                    96:ac:86:e0:58:c9:e4:75:39:d5:77:e4:e0:be:89:
                    a6:8b:fe:1e:a2:19:e4:69:80:e3:3a:1b:39:71:0d:
                    aa:18:50:30:63:55:db:ca:79:66:1b:db:31:9a:32:
                    8f:97:0c:ff:4f:4a:e0:47:ca:2b:de:e1:2a:cc:40:
                    27:fd:27:4d:df:28:b7:17:05:5e:e2:c1:f4:0b:c3:
                    61:36:90:75:09:a4:e7:7c:08:4b:76:de:90:aa:8f:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:9A:7C:57:07:C9:50:73:4E:99:26:DD:D5:E1:C8:24:A8:30:5C
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137312e302f32342d3234203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:2c:00:d7:ba:66:cf:70:83:24:d5:df:3b:4c:cd:d6:7d:
         26:d3:6c:b8:9c:70:f2:31:f5:dc:f2:c5:d9:a3:99:f2:73:c5:
         cf:74:66:a7:a9:12:33:77:92:74:62:44:5a:6b:e5:0b:fc:41:
         47:0d:82:8a:b1:bb:8b:07:60:a8:8f:b9:7c:7b:87:40:07:cd:
         7c:6d:77:69:e2:60:9d:27:ad:47:35:c1:4f:0d:c1:82:13:51:
         34:0f:57:ac:da:a4:68:80:dd:d8:2e:5f:4d:08:a2:b3:bd:76:
         ef:bc:27:b7:64:01:91:64:56:b5:34:e9:7a:4d:9e:6b:6c:66:
         96:d6:d2:67:43:42:fe:36:75:fc:1b:9c:11:44:ab:f2:56:5e:
         15:bb:97:c0:59:ce:ce:e9:ad:29:3f:2a:98:f7:64:53:34:58:
         7b:e9:2c:cb:8d:3e:5b:11:d4:fe:84:6b:cf:1a:61:87:08:a2:
         10:32:6f:92:f8:a8:f6:55:06:c9:27:0c:e7:28:4c:df:0c:c2:
         90:7b:a7:25:75:e9:68:fb:d7:71:a9:24:65:75:6f:86:14:9e:
         de:c7:4d:58:d9:25:9c:4d:fc:8d:16:d8:54:b6:52:a9:2d:00:
         06:3e:df:7e:46:7e:67:f6:8e:69:a8:04:e8:6a:1f:ed:44:13:
         e8:a5:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:09 2025 by rpki-client on console.sobornost.net