Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e36332e302e302f32302d3234203d3e203238363538.roa
File:                     3138372e36332e302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          g3+o7IN8s9cG27XBYZ/RI/NkbaOI4vSvbHwbPlpaJKg=
Subject key identifier:   32:FF:59:11:60:DF:4A:97:CB:1F:63:5B:EB:B0:5B:4A:D3:09:A7:BD
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       1F60B881B12DAD94091E668D5E5A9A47C21404
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e36332e302e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 06 Mar 2025 10:17:15 +0000
ROA not before:           Thu 06 Mar 2025 10:12:15 +0000
ROA not after:            Thu 05 Mar 2026 10:17:15 +0000
asID:                     28658
IP address blocks:        187.63.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:60:b8:81:b1:2d:ad:94:09:1e:66:8d:5e:5a:9a:47:c2:14:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Mar  6 10:12:15 2025 GMT
            Not After : Mar  5 10:17:15 2026 GMT
        Subject: CN=32FF591160DF4A97CB1F635BEBB05B4AD309A7BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:e7:30:99:81:d4:7a:fa:df:fa:a2:9c:2e:
                    ef:69:5c:43:6a:12:a0:a5:d0:46:7e:77:12:44:c4:
                    82:af:e1:95:2b:77:71:ea:61:c9:24:2b:1f:18:b9:
                    cf:db:61:a9:e0:22:12:24:8e:c3:ef:82:ca:e7:90:
                    6b:07:05:f4:d4:7b:65:8b:57:34:ab:9b:bb:6e:f8:
                    e6:86:18:02:c2:52:9e:b8:d1:40:c2:e7:45:5f:9f:
                    b3:49:8b:64:28:a3:45:aa:2e:4e:6a:52:b2:54:2a:
                    e2:af:ba:64:57:3b:92:fc:dd:7c:35:45:e2:b6:49:
                    ee:58:81:0d:de:eb:c5:9f:d7:d4:3c:fd:b6:27:aa:
                    52:d3:cc:bf:44:2d:33:3a:1f:02:27:f6:73:25:d5:
                    cf:07:fa:55:32:dd:68:a6:e9:70:20:d1:7c:28:de:
                    47:3e:54:10:0e:54:f4:eb:6d:57:78:a8:f8:42:e0:
                    fb:09:3d:09:5d:32:2c:b2:fb:68:a4:68:38:75:c5:
                    1b:b9:a8:dd:08:4d:7d:94:46:6a:40:d7:5a:77:fb:
                    df:38:1e:4b:50:42:0b:a2:12:4e:37:ca:07:85:a8:
                    fb:61:c5:97:8d:1f:80:e2:77:06:7d:c0:77:12:5d:
                    08:24:46:d9:58:00:10:ee:58:d7:d3:a0:cb:f8:e8:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FF:59:11:60:DF:4A:97:CB:1F:63:5B:EB:B0:5B:4A:D3:09:A7:BD
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e36332e302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:eb:b6:a1:b3:7d:cc:ce:a6:61:88:8b:07:78:bb:7e:4a:
         61:e7:86:f6:b2:bf:84:6c:aa:50:7e:b2:89:e9:a3:08:41:37:
         0d:be:a1:39:84:c2:86:39:06:5e:d6:a9:12:b5:78:d2:8b:6a:
         64:07:c9:ed:62:d6:a4:99:2c:f7:eb:40:34:99:4b:d1:64:85:
         fa:a2:37:da:4a:48:64:ff:88:e3:29:ec:b2:aa:80:00:73:b5:
         c7:a5:fb:10:a7:55:5d:36:2f:b0:c2:90:16:b8:30:3a:0e:1b:
         37:0e:a3:9d:2c:0c:ff:38:c1:b2:43:1c:5f:71:97:7c:f7:c6:
         8a:9a:42:d4:c4:8b:0a:8b:6e:46:d1:2c:a0:05:4b:f4:c3:a5:
         cc:4a:7e:ce:f2:0a:d9:40:65:4e:8e:0d:90:4a:e1:93:b5:82:
         6d:44:31:21:de:d0:c7:3d:f1:e5:2b:c5:a1:9c:e4:53:b8:e4:
         3b:40:fb:d5:ab:e7:21:45:bf:c4:47:5f:f0:4f:49:14:56:c1:
         8f:96:37:96:2b:cf:44:12:8e:ec:5f:3d:5a:60:83:8d:5d:db:
         14:69:72:56:58:a6:b7:7d:97:70:9c:cc:50:1c:8f:3e:47:20:
         71:c7:15:59:25:1b:00:b9:3e:0d:a7:90:14:0d:18:12:fe:33:
         f4:79:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:21 2025 by rpki-client on console.sobornost.net