Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32322d3332203d3e20323635313932.roa
File:                     3136372e3234392e3134342e302f32322d3332203d3e20323635313932.roa (raw, json)
Hash identifier:          f+NYv033QzxSbrYunPKgIahFmNtSXTCM6/8YMUvIy+8=
Subject key identifier:   E6:43:AC:0E:F8:37:34:5D:97:F9:70:3D:D6:F0:25:F1:E3:63:F4:B7
Certificate issuer:       /CN=F1E405EB4918A33663A8375931A74893C3CABF02
Certificate serial:       56945F95CF41797A1AAB3247E4B06B5D222C0D4A
Authority key identifier: F1:E4:05:EB:49:18:A3:36:63:A8:37:59:31:A7:48:93:C3:CA:BF:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E405EB4918A33663A8375931A74893C3CABF02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32322d3332203d3e20323635313932.roa
Signing time:             Mon 21 Apr 2025 18:09:42 +0000
ROA not before:           Mon 21 Apr 2025 18:04:42 +0000
ROA not after:            Mon 20 Apr 2026 18:09:42 +0000
asID:                     265192
IP address blocks:        167.249.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/F1E405EB4918A33663A8375931A74893C3CABF02.crl
                          rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/F1E405EB4918A33663A8375931A74893C3CABF02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E405EB4918A33663A8375931A74893C3CABF02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:94:5f:95:cf:41:79:7a:1a:ab:32:47:e4:b0:6b:5d:22:2c:0d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E405EB4918A33663A8375931A74893C3CABF02
        Validity
            Not Before: Apr 21 18:04:42 2025 GMT
            Not After : Apr 20 18:09:42 2026 GMT
        Subject: CN=E643AC0EF837345D97F9703DD6F025F1E363F4B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:68:cd:5d:ad:77:4d:7c:0c:6b:2c:13:fb:5f:
                    80:f9:f6:57:b5:4d:fd:a5:9f:21:10:d5:8e:56:cf:
                    be:0e:65:3f:11:a1:16:4c:c4:89:d7:69:40:f3:be:
                    f0:fb:4a:bb:81:1d:07:ba:1c:6e:17:5f:77:85:2e:
                    61:a6:62:83:24:39:9d:84:e0:51:f3:a1:b1:61:4e:
                    d2:7b:fb:40:65:bd:dc:b5:28:e6:38:30:e2:fd:dd:
                    7c:c1:26:14:d6:53:39:6a:1f:96:f4:81:e3:50:b9:
                    9f:e7:7f:e0:7c:56:8e:9f:48:f5:97:fc:28:65:d6:
                    36:1a:43:cc:49:59:cc:18:f3:c2:2a:ec:fb:56:6e:
                    5a:98:3f:4e:1c:e8:8c:84:48:1f:78:bb:fb:57:4c:
                    2c:39:b2:a5:a3:d4:2f:18:39:a6:03:d7:32:81:3e:
                    66:bc:81:c0:e2:f5:c6:40:47:86:4a:bc:ab:1d:04:
                    54:f2:18:23:da:35:59:07:39:e9:42:42:b4:53:1d:
                    72:fa:2e:7e:b4:cd:d9:42:01:80:2a:46:30:2d:c1:
                    c0:7b:58:28:ec:2b:b2:55:d4:f0:17:a8:38:04:c9:
                    61:bb:cb:b5:31:7e:7f:38:01:73:92:e5:8d:b5:fa:
                    73:ba:5c:d3:ca:7c:aa:d6:2f:02:f0:ad:eb:7d:41:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:AC:0E:F8:37:34:5D:97:F9:70:3D:D6:F0:25:F1:E3:63:F4:B7
            X509v3 Authority Key Identifier:
                keyid:F1:E4:05:EB:49:18:A3:36:63:A8:37:59:31:A7:48:93:C3:CA:BF:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/F1E405EB4918A33663A8375931A74893C3CABF02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E405EB4918A33663A8375931A74893C3CABF02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32322d3332203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:bf:2e:66:c6:ef:a9:5e:99:63:b4:5f:cd:00:08:bc:38:84:
         89:12:6c:23:0e:58:cd:de:ef:c8:71:62:f5:0e:7d:c2:87:eb:
         a7:82:7f:77:3a:d3:2f:92:ff:37:ce:d6:62:a4:15:1f:9d:96:
         95:a2:b4:fc:73:41:36:e6:77:04:a6:72:e4:8c:8f:3e:2d:e5:
         46:b6:38:47:09:b0:cf:5f:ba:68:b9:8e:3d:53:e9:2b:0f:90:
         89:b2:5d:15:a2:18:0a:02:f6:c7:61:02:91:72:14:7e:d2:74:
         2f:d3:76:2b:7f:5e:b2:85:ca:c8:b9:7e:fc:15:82:23:67:ba:
         a4:db:e8:fb:8f:7b:6b:4a:03:a3:d8:fe:9d:6e:23:94:94:a8:
         59:fe:27:0c:22:f9:05:d7:c2:0d:9b:cd:35:45:6f:e1:ea:db:
         f8:5c:89:fa:48:8f:ab:23:f7:77:aa:80:a9:60:27:80:63:cf:
         e4:34:3c:85:0a:32:8f:cb:1e:0b:13:36:b5:b7:a8:84:68:36:
         63:40:96:81:70:22:64:81:86:1e:aa:35:ad:ed:e5:f9:f5:20:
         2d:ac:8d:19:7c:9e:8f:69:19:5b:33:a6:37:d0:7c:87:f4:85:
         80:ef:0f:e6:64:22:0d:9e:2a:4f:a8:bf:c5:4a:f2:46:b6:b6:
         84:9e:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:09 2025 by rpki-client on console.sobornost.net