Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e34382e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          g8oz+T+E5iupv5o+gXq5VYKcfluY1c2K4V32dQKTgpw=
Subject key identifier:   5C:97:FA:D0:38:BC:46:DE:3F:ED:15:5A:A6:09:E5:E0:B8:AB:92:6F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       482575D1227E53027D29648D5839C087034D259E
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32342d3234203d3e203238333532.roa
Signing time:             Wed 23 Apr 2025 08:23:40 +0000
ROA not before:           Wed 23 Apr 2025 08:18:40 +0000
ROA not after:            Wed 22 Apr 2026 08:23:40 +0000
asID:                     28352
IP address blocks:        187.0.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:25:75:d1:22:7e:53:02:7d:29:64:8d:58:39:c0:87:03:4d:25:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Apr 23 08:18:40 2025 GMT
            Not After : Apr 22 08:23:40 2026 GMT
        Subject: CN=5C97FAD038BC46DE3FED155AA609E5E0B8AB926F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:57:c1:35:0c:68:db:3a:bb:f6:c3:b6:da:
                    5f:21:fa:bf:98:30:70:a0:f6:82:70:0f:f8:5d:5b:
                    0c:08:c6:37:a2:68:07:23:4e:1d:35:6b:05:3d:44:
                    7c:98:14:ba:36:45:4c:e6:21:cc:d1:a5:a7:b7:3b:
                    b7:94:b0:ad:b8:b0:99:9b:4a:ea:a6:24:a0:57:b9:
                    b4:e6:70:b6:07:21:ec:60:8e:cb:66:dd:87:b0:8b:
                    69:9c:2c:a5:a3:4a:12:b1:a0:95:8a:52:5e:c6:63:
                    20:cd:dd:87:ab:33:5a:23:91:c3:56:57:ef:22:c1:
                    8e:35:f6:42:b2:56:49:a2:c1:18:68:94:d2:bf:33:
                    fb:b3:31:b7:fb:6d:de:e6:e6:eb:89:5b:5c:1a:2d:
                    d7:c8:c6:87:c5:db:f7:18:87:bf:83:89:03:72:57:
                    f3:9d:b9:31:16:6d:ed:9f:9e:e5:1c:08:9c:83:16:
                    eb:01:e9:f1:5b:9c:0f:9c:04:98:7f:1a:65:33:de:
                    41:ef:8e:c3:b2:26:14:85:51:61:f7:31:1b:5b:db:
                    23:25:4d:a7:33:a1:9f:f3:23:21:d8:8d:e8:22:ed:
                    4a:09:f9:79:fc:b4:00:ce:23:4f:41:27:a9:cd:55:
                    62:e5:40:74:de:93:8d:ab:73:6a:06:6b:f8:ea:5a:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:FA:D0:38:BC:46:DE:3F:ED:15:5A:A6:09:E5:E0:B8:AB:92:6F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:c6:ab:5a:b7:0e:a1:9a:09:29:6a:82:17:92:79:7d:33:
         b6:9f:a6:36:86:6b:29:95:e2:33:0b:7e:cf:d4:29:92:47:bf:
         3e:10:03:78:5d:bb:d7:fc:74:44:9f:65:26:a8:9d:38:df:a5:
         a4:f6:4f:e3:6e:4d:2e:71:90:f0:e7:a9:6d:f5:59:6f:6c:ab:
         23:6f:fb:66:64:55:68:29:25:3e:0c:22:f3:5c:20:4f:dd:3b:
         57:12:b2:9d:b4:c4:ac:52:88:45:41:0f:cb:56:84:b0:8e:ff:
         42:d8:4d:5f:29:fe:bd:e1:44:c4:58:35:89:a5:ed:3b:fc:63:
         ca:fc:f7:f5:f3:44:9f:bc:e6:bc:bc:60:21:82:ce:ab:1a:c5:
         d7:45:fe:ee:c1:34:0b:82:dc:d1:e7:85:6c:b4:12:c7:0b:67:
         85:f1:1e:d2:c7:c2:dc:78:d5:25:32:fd:31:df:19:25:4e:37:
         27:37:09:38:7e:40:4d:26:1a:73:1f:fd:6d:bf:73:fb:79:a8:
         e2:9a:22:95:be:01:c2:46:21:fd:30:6f:69:f1:b6:9a:05:2a:
         dd:be:fe:6d:0a:f9:2c:5d:24:8a:e6:41:dc:ae:14:96:6f:c1:
         e8:c8:1a:af:a0:a3:d9:02:92:dd:30:3b:98:b6:e0:43:1d:6a:
         3d:a5:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net