Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa
File:                     3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa (raw, json)
Hash identifier:          m8PnMa8wPCh6vpKlOCXWg44wlUxXzVU2xDd3DhSUVRA=
Subject key identifier:   9B:23:BD:47:B9:92:85:8E:6A:5B:F7:3D:BD:D9:B5:12:32:CC:7C:38
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       0F078C573DA2D6FE0D5C8A2202AC403543F2FD02
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     270820
IP address blocks:        186.194.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:07:8c:57:3d:a2:d6:fe:0d:5c:8a:22:02:ac:40:35:43:f2:fd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:96:19:97:44:78:c5:b7:d8:01:33:73:ce:
                    cf:df:a6:dc:26:60:b8:04:93:b8:ae:b3:4c:35:3a:
                    11:49:57:eb:43:1c:20:73:20:a7:bd:5a:8c:b5:4e:
                    ad:42:5c:bb:42:33:94:91:9b:71:14:9b:1a:72:96:
                    bc:eb:d8:75:ee:aa:8d:d4:31:8b:69:e3:8b:55:1f:
                    6f:b7:07:2d:9f:57:3c:fc:58:45:98:5b:c7:26:c5:
                    22:d1:88:c9:0c:44:90:50:74:f2:29:38:c5:3f:dd:
                    b0:8c:69:5f:f6:5d:9e:9d:19:59:8d:4f:4d:6d:15:
                    72:36:4b:c3:ee:6d:36:00:bc:b6:c8:0d:27:39:df:
                    bd:d6:99:ed:fb:ee:95:7c:80:86:06:fa:3c:6e:be:
                    f3:33:b8:59:11:6a:d3:91:06:ab:5e:d7:4f:6d:a4:
                    a0:be:0f:57:db:b0:76:13:be:c4:d9:41:c2:d5:9c:
                    8d:31:10:51:42:99:78:84:ca:38:fc:12:b3:72:21:
                    56:c2:83:99:9a:16:14:0b:70:89:e7:17:de:71:86:
                    db:a3:27:5c:15:38:4f:b9:ef:3a:9f:d7:eb:59:b2:
                    3e:7f:12:9c:0a:4e:a0:c0:72:c8:b2:f8:c9:9d:fb:
                    b0:a3:e7:fa:37:d9:fe:23:81:f9:c6:4e:73:eb:cc:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:23:BD:47:B9:92:85:8E:6A:5B:F7:3D:BD:D9:B5:12:32:CC:7C:38
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:23:bc:c4:59:44:f7:27:c9:da:12:a5:98:99:3f:4a:93:
         7b:89:38:de:13:68:13:19:89:a1:9e:2b:6a:46:d1:0a:34:65:
         69:2b:fd:24:7b:1e:c4:b7:a8:9b:ee:ea:bc:e9:f4:6c:ac:b0:
         a2:4e:85:98:dd:ee:08:50:c1:d4:8a:97:e5:20:40:c8:df:49:
         9f:17:f6:ce:ca:1d:d1:a8:52:96:9b:d0:24:97:73:51:bf:f5:
         7d:ad:21:87:e7:3e:78:1f:25:ca:4c:17:57:df:a1:6e:be:0f:
         4b:a2:ff:ff:e4:e3:15:bd:84:91:e5:f0:51:04:db:39:a4:ed:
         63:87:ea:a9:d2:fb:21:c8:c0:2e:ce:b6:f9:25:d9:86:0e:68:
         42:c8:07:2b:0a:16:4b:99:a8:e4:01:1b:de:70:31:44:90:36:
         f3:66:c1:3a:bb:c7:9c:52:98:c2:f5:02:e0:a8:d3:36:e4:69:
         b3:04:e1:17:fd:ad:33:0f:e6:af:e7:9b:51:2b:2a:b7:2e:a4:
         45:57:8d:4c:d5:6f:9e:cf:3f:78:c1:49:4a:f5:4d:59:4b:ad:
         59:66:ef:3f:74:33:21:8a:70:c2:85:3b:49:a1:51:5b:dc:5c:
         56:14:be:17:45:84:97:83:f8:38:0f:19:d5:d4:bc:ac:16:2b:
         e7:d5:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:25 2025 by rpki-client on console.sobornost.net