Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133382e302f32332d3233203d3e20323730353936.roa
File:                     3138372e31372e3133382e302f32332d3233203d3e20323730353936.roa (raw, json)
Hash identifier:          T6XFyMdoEGHpctMOJ24+2iVVktiH5YZDG2t8cH1Z+e0=
Subject key identifier:   83:CE:31:D6:57:BC:69:2F:CC:65:71:B1:52:F5:18:73:9A:7C:99:7B
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       7C0E6C7C4F1DFE6E5AEADA9F35D34BC7476E8C19
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133382e302f32332d3233203d3e20323730353936.roa
Signing time:             Mon 14 Apr 2025 21:15:29 +0000
ROA not before:           Mon 14 Apr 2025 21:10:29 +0000
ROA not after:            Mon 13 Apr 2026 21:15:29 +0000
asID:                     270596
IP address blocks:        187.17.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0e:6c:7c:4f:1d:fe:6e:5a:ea:da:9f:35:d3:4b:c7:47:6e:8c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Apr 14 21:10:29 2025 GMT
            Not After : Apr 13 21:15:29 2026 GMT
        Subject: CN=83CE31D657BC692FCC6571B152F518739A7C997B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:2c:2b:67:fa:71:96:88:9b:eb:49:8d:04:
                    11:9d:e6:ea:09:cc:64:03:da:98:29:3f:66:ef:6b:
                    48:d1:1e:4c:79:a1:ff:57:2e:79:61:1a:5f:2c:85:
                    d0:81:62:7b:a9:fa:b2:da:79:8c:f0:1e:ba:1f:2c:
                    dd:99:30:f3:a9:ec:14:d5:87:b7:9f:d0:b8:53:98:
                    58:56:1b:f2:78:4d:55:e4:d0:47:1a:9d:53:8f:75:
                    65:98:8a:72:df:c3:23:73:b3:0b:4f:fe:2f:5b:0e:
                    9b:d3:67:3c:1a:c0:60:f3:f1:11:7b:20:bb:36:12:
                    ca:d5:0e:bc:c2:d5:5e:64:1d:e4:4a:d1:fa:52:bc:
                    5d:8b:bf:f5:3e:1f:d2:f9:a7:a4:45:6c:d4:8d:e2:
                    5f:0b:3b:01:b7:71:b7:9f:78:f4:bc:98:3b:4b:22:
                    b0:91:de:5d:36:98:f0:65:5f:c6:48:05:8e:ea:ff:
                    21:eb:b8:37:c0:18:8f:a9:3d:64:05:8c:f1:b7:ff:
                    83:57:1e:df:fe:3c:b3:e3:cc:21:c6:d2:52:f6:3c:
                    d6:1d:b9:f2:01:9e:3f:0e:68:8c:46:a9:39:f0:bd:
                    fd:ee:00:a4:72:64:42:2c:9d:9a:0e:86:b5:f4:f1:
                    92:2b:98:4f:73:87:41:d2:7f:1b:5a:2f:4b:63:1f:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:31:D6:57:BC:69:2F:CC:65:71:B1:52:F5:18:73:9A:7C:99:7B
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133382e302f32332d3233203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:0e:7e:4b:08:97:56:5d:c0:be:f0:7d:db:1b:15:49:89:
         6a:23:44:bd:96:e6:c7:8d:67:45:06:89:db:a2:80:fa:23:8b:
         81:69:73:b8:ff:8a:45:12:4a:91:9a:0f:01:7b:f9:b8:5a:a2:
         84:1c:37:a2:9c:15:1f:16:72:a6:7a:ad:0b:8a:dd:b9:87:19:
         28:dc:f2:d1:7c:14:47:05:cf:1c:ae:92:62:89:f4:7e:d5:39:
         fe:a8:cc:37:1c:71:31:cc:bf:ad:40:42:ef:51:fb:2e:13:0d:
         a7:72:77:a3:d9:60:43:80:b4:6b:36:4e:84:f9:a3:18:d9:bb:
         af:90:a5:18:07:10:be:8f:ac:44:b4:69:f7:9d:a7:7f:0e:32:
         53:f5:6c:36:f3:71:71:fe:83:12:a4:f3:a7:01:dc:7b:46:3f:
         50:de:7c:d4:00:86:b5:07:ae:e9:34:60:31:ea:c3:13:ff:57:
         34:8d:5b:2c:c5:65:78:ae:59:9d:3c:01:39:9d:66:76:0f:57:
         27:1d:4f:05:a9:f1:ea:9a:ca:95:5e:c5:a9:1d:c6:bc:20:4d:
         6a:e6:9e:ed:be:bc:88:01:89:e0:c3:32:cb:a0:f8:93:e6:4b:
         ca:a8:11:20:96:45:b0:6e:6a:35:de:dd:8e:d9:ee:73:01:cc:
         4e:a0:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net