Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3139312e372e37322e302f32312d3234203d3e203533313330.roa
File:                     3139312e372e37322e302f32312d3234203d3e203533313330.roa (raw, json)
Hash identifier:          uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=
Subject key identifier:   F0:6E:96:DB:AE:73:F6:C9:56:68:66:8E:CB:D5:31:B9:63:A4:C7:34
Certificate issuer:       /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial:       7A275F1A4795C27A81411138101EE012BB2C2816
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3139312e372e37322e302f32312d3234203d3e203533313330.roa
Signing time:             Thu 06 Mar 2025 05:59:43 +0000
ROA not before:           Thu 06 Mar 2025 05:54:43 +0000
ROA not after:            Thu 05 Mar 2026 05:59:43 +0000
asID:                     53130
IP address blocks:        191.7.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:5f:1a:47:95:c2:7a:81:41:11:38:10:1e:e0:12:bb:2c:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
        Validity
            Not Before: Mar  6 05:54:43 2025 GMT
            Not After : Mar  5 05:59:43 2026 GMT
        Subject: CN=F06E96DBAE73F6C95668668ECBD531B963A4C734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:e0:cb:05:67:a1:76:ed:99:06:5a:dc:fd:
                    25:cc:17:76:ea:a6:cd:8f:1c:d2:5e:3f:5b:4c:95:
                    36:ab:5c:63:f5:8d:4d:14:70:78:54:a5:fb:0a:ae:
                    d1:a3:e5:7d:bf:62:fd:5c:43:c5:be:d3:33:56:b2:
                    8d:a7:35:0a:0d:0c:7c:ef:bb:9f:a2:c8:86:ff:bd:
                    9e:12:4b:86:ae:7f:53:13:81:4d:cf:c3:0f:70:9d:
                    57:ab:5b:f6:f0:1c:f1:75:54:e4:7e:bf:aa:0e:55:
                    3e:3d:8e:de:44:5b:cd:90:d0:4c:bf:85:29:ec:6b:
                    6f:2b:9f:c1:32:52:17:9f:0b:07:92:1e:82:ca:83:
                    95:28:38:7f:0e:0e:29:07:05:84:a0:19:6f:c8:8c:
                    f8:c1:4f:a9:8b:82:b1:78:cd:f3:f3:3f:d9:fb:b1:
                    21:c1:6a:26:e2:e5:7a:70:69:5b:84:46:d5:f1:61:
                    5f:a8:3f:92:7f:25:10:e7:4a:ec:9c:92:3f:11:69:
                    b7:89:a7:fc:c1:15:02:cc:ce:c9:32:b3:62:2b:ac:
                    05:86:93:3c:47:a1:62:5a:b4:b7:5e:0d:d5:11:ab:
                    41:5e:ca:17:27:d2:c0:95:70:70:fc:25:58:31:20:
                    66:68:df:bd:a9:8d:53:ee:1d:d3:97:95:16:06:09:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:96:DB:AE:73:F6:C9:56:68:66:8E:CB:D5:31:B9:63:A4:C7:34
            X509v3 Authority Key Identifier:
                keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3139312e372e37322e302f32312d3234203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:ea:fc:25:71:d7:d2:56:f1:0c:c9:b6:71:82:f8:4a:ab:
         a0:e2:84:d1:4a:13:36:aa:ca:0e:1e:53:de:b6:71:4e:76:46:
         50:6f:e0:b4:90:2d:f6:0a:39:e0:60:08:1b:f2:09:82:ab:ae:
         3c:04:18:21:53:7d:5a:a0:ae:75:8f:d3:e3:c9:42:68:c2:57:
         3a:06:9e:31:1c:41:17:25:f1:92:00:77:a7:96:0c:b2:52:e5:
         96:15:a1:b8:7d:3e:1b:2d:54:28:06:9f:25:65:79:05:f5:70:
         02:8d:f2:f8:ee:2c:2f:fb:e9:25:95:54:74:9f:a1:60:4a:79:
         c8:a4:4f:84:3a:68:28:2d:20:e3:e5:9c:ba:ad:f1:3b:36:3a:
         56:3d:dc:3b:06:fb:95:ee:84:d7:f9:81:e0:fe:d0:fc:86:0b:
         97:5f:a1:75:b7:c2:12:9a:43:c1:d0:be:ca:4e:a6:fa:39:07:
         db:ed:74:3b:f2:8e:49:d0:ba:cb:3e:5e:d4:6d:64:08:0c:f2:
         b9:47:0d:35:4e:6f:d8:e5:dd:a4:38:23:83:68:fb:5e:7b:3c:
         de:c4:57:67:17:ce:1c:b5:2c:b2:a7:ef:cf:b1:ec:fe:c5:a8:
         62:16:7a:5c:76:2e:58:dd:06:ce:33:8f:a2:a5:40:1b:8f:59:
         08:01:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:27 2025 by rpki-client on console.sobornost.net