Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa
File:                     3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa (raw, json)
Hash identifier:          06fgBCcceseO8whIgtEKVm2JPDck/QyOI3l44RAWZxk=
Subject key identifier:   30:6F:98:95:98:B9:3A:56:52:06:12:4C:A4:7E:50:3E:DE:64:58:78
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       65B31C59745B838B4A17151473BF0482783D9D44
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     53141
IP address blocks:        186.194.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b3:1c:59:74:5b:83:8b:4a:17:15:14:73:bf:04:82:78:3d:9d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=306F989598B93A565206124CA47E503EDE645878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:73:c8:5b:29:4a:5a:64:f5:d3:b9:e6:36:
                    9d:19:fa:51:a7:7b:fc:a9:ff:0d:51:d3:ce:58:a2:
                    34:f4:1d:94:e5:c9:87:17:2d:ef:d5:87:73:fd:f3:
                    47:39:74:d6:d1:90:40:e7:34:4a:dd:de:d8:89:9d:
                    c5:55:f4:f6:9d:06:1e:dc:a8:b7:bc:95:7d:fb:4b:
                    bb:3d:fc:7e:3a:d0:cb:43:47:5b:21:e6:50:4c:41:
                    25:8e:c6:d0:ae:73:e1:ed:29:62:2c:1c:aa:f4:47:
                    20:18:04:e9:36:21:fb:fe:f5:d8:d4:eb:d8:02:7b:
                    0c:73:36:bd:e4:03:ec:5c:62:68:dc:54:21:c8:05:
                    26:0a:94:8a:d1:c6:0f:80:d1:3e:05:ec:0e:06:4b:
                    e4:a0:cf:4f:61:86:31:4d:85:63:43:21:0e:30:8f:
                    fb:95:e3:90:72:d5:bd:87:69:31:ea:42:ea:a2:74:
                    c6:8d:59:fd:5f:e8:f3:2f:d9:be:d6:3f:1e:f6:ae:
                    83:e4:aa:40:5c:a4:df:30:e8:1c:ca:53:c8:47:dd:
                    21:67:91:e3:76:40:c5:3f:59:c4:41:d4:ed:a3:0f:
                    93:00:e1:b0:f7:fe:25:8b:fe:ca:3e:86:20:0b:c5:
                    9b:a9:1a:25:1e:6a:8a:3c:55:d2:9b:35:22:89:44:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:98:95:98:B9:3A:56:52:06:12:4C:A4:7E:50:3E:DE:64:58:78
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:3f:47:c4:a0:d0:36:b0:28:f5:cd:7e:00:1f:ba:2e:b8:
         a0:88:1a:cc:3b:ef:48:f6:14:74:6e:e1:e2:db:52:5a:c4:ab:
         b5:48:f8:d7:68:ed:88:db:54:be:e3:01:74:12:2d:d7:bd:d3:
         4e:57:25:78:14:de:c7:47:a5:65:6a:4a:0e:8f:22:50:21:84:
         31:e6:68:83:4f:a8:6b:fe:6f:97:ff:b5:60:8c:03:35:11:90:
         9d:2e:c3:6d:57:21:b5:d1:b5:e1:a9:21:86:61:ce:7f:bb:3c:
         f4:7e:fd:17:a7:b8:b3:57:ab:8d:cc:aa:04:ec:9d:26:ea:03:
         c3:1e:63:0d:95:99:83:74:92:8b:a4:00:70:18:bb:f1:bf:60:
         8b:db:7d:19:58:b7:ee:c3:2f:91:c4:77:e2:c1:90:12:ed:2d:
         68:29:7e:d1:46:b5:64:43:f8:fc:a1:4c:a4:05:48:35:39:15:
         06:7d:c3:b8:2c:fb:9a:17:07:95:43:fd:a6:35:46:15:0f:5e:
         42:c9:5b:70:93:9b:9a:3e:10:99:05:47:b7:3c:38:16:ae:de:
         d6:68:74:e1:bd:22:b6:0b:30:7c:65:3c:6f:ee:d6:5c:d5:5f:
         5b:32:32:31:7b:7a:77:1b:a6:8c:85:33:c9:50:c5:62:ce:aa:
         16:44:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:18 2025 by rpki-client on console.sobornost.net