Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/3138372e36332e3230382e302f32302d3234203d3e203533303937.roa
File:                     3138372e36332e3230382e302f32302d3234203d3e203533303937.roa (raw, json)
Hash identifier:          V/2doQOw0GwCQVupNF+lz0jfjC1q/Orhu3tKE0OC7cA=
Subject key identifier:   46:E3:E0:01:5A:A8:95:81:1D:72:F2:32:34:96:F0:0B:55:72:B7:E9
Certificate issuer:       /CN=8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A
Certificate serial:       7ADD714C98F80E40585CE4A224796CDE941882A3
Authority key identifier: 88:86:BA:0B:7E:A7:A5:EE:DD:66:D0:C1:4C:E0:FD:0F:9B:8C:87:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/3138372e36332e3230382e302f32302d3234203d3e203533303937.roa
Signing time:             Wed 19 Feb 2025 20:43:41 +0000
ROA not before:           Wed 19 Feb 2025 20:38:41 +0000
ROA not after:            Wed 18 Feb 2026 20:43:41 +0000
asID:                     53097
IP address blocks:        187.63.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.crl
                          rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:dd:71:4c:98:f8:0e:40:58:5c:e4:a2:24:79:6c:de:94:18:82:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A
        Validity
            Not Before: Feb 19 20:38:41 2025 GMT
            Not After : Feb 18 20:43:41 2026 GMT
        Subject: CN=46E3E0015AA895811D72F2323496F00B5572B7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:ef:99:60:03:90:8e:fb:a1:8b:46:23:dd:
                    66:01:bc:67:6d:06:fa:bd:52:55:a9:dc:d1:bf:5b:
                    98:aa:aa:d8:91:47:ea:b0:45:9f:c7:9a:2c:be:64:
                    8a:e8:b4:f8:08:9f:09:1f:dd:86:c3:a9:8b:c0:ec:
                    01:32:dd:12:de:b4:94:3a:54:c8:a6:ea:5c:2d:1b:
                    61:64:26:19:c6:12:e2:2f:12:66:13:7d:8e:4a:4e:
                    2a:c8:48:18:04:c5:eb:57:4d:ca:82:be:7d:43:5f:
                    b7:1d:31:03:06:fb:1d:fb:b0:7d:7c:e4:e6:b9:3a:
                    25:71:82:21:4e:e2:31:89:a4:cb:cb:5a:a2:54:64:
                    b6:35:8a:15:ff:8a:dd:74:f3:2f:7a:f0:23:c1:d4:
                    7c:d0:e1:aa:64:2e:6a:d8:0f:a4:28:99:9b:39:31:
                    46:e1:20:6b:c7:4e:48:e2:88:5c:56:23:b3:71:14:
                    10:45:2e:9e:4f:8a:85:d0:e0:09:f9:3e:e2:df:ab:
                    fb:da:bd:92:98:45:26:a5:0e:07:54:60:04:f8:4d:
                    a8:40:11:34:a0:02:e8:fb:92:fe:af:50:67:ba:1e:
                    c0:f1:e0:bf:96:45:65:6c:3b:f8:8e:9e:78:a5:07:
                    7a:4e:ba:c9:a1:1b:0a:af:0c:19:90:02:61:4a:f1:
                    eb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:E0:01:5A:A8:95:81:1D:72:F2:32:34:96:F0:0B:55:72:B7:E9
            X509v3 Authority Key Identifier:
                keyid:88:86:BA:0B:7E:A7:A5:EE:DD:66:D0:C1:4C:E0:FD:0F:9B:8C:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/3138372e36332e3230382e302f32302d3234203d3e203533303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:8d:ce:73:03:b0:42:e6:41:9b:52:e2:cb:90:fd:b0:f9:
         16:f4:33:f4:91:d2:52:08:4d:19:3c:1a:1b:fc:9f:22:13:be:
         4b:02:ad:57:a5:c6:14:91:a3:2c:1d:1e:a7:15:af:ea:61:8f:
         47:f5:08:ff:c8:95:70:1f:f7:bf:7f:da:21:21:cc:83:44:07:
         4a:3e:67:f8:65:d0:36:e6:59:1f:0f:3a:a8:45:d6:8b:e2:4e:
         24:9a:cb:d9:c8:3d:3f:d8:67:bb:33:e5:4b:5f:ff:f4:ac:5a:
         77:43:08:10:42:bc:fb:71:8b:0e:a7:7f:40:0e:2f:e9:e3:a7:
         8e:ff:4c:85:76:1b:eb:73:72:0f:15:6b:7c:0a:5d:44:ba:a6:
         d8:ed:41:a2:5e:13:2b:c7:1f:ee:ed:da:f0:1c:4c:20:1f:e5:
         67:6b:77:c2:73:39:d0:88:7e:f4:5e:4c:a4:93:1c:a0:74:30:
         d8:d5:58:a3:cc:51:67:86:9d:1b:fc:20:74:d0:ed:12:89:93:
         90:f5:2e:29:ae:eb:ca:6f:d2:2d:9e:03:7b:f2:cd:3d:0d:8c:
         0a:e8:ef:21:86:35:a4:72:36:9a:d7:42:d4:fe:16:ac:50:28:
         9e:68:fd:d5:5d:7f:df:48:89:20:d9:79:14:2e:59:5c:71:62:
         71:f6:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:26 2025 by rpki-client on console.sobornost.net