Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
File:                     3138372e38352e3134342e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          Pen0urV5V3UpAnZ7f1lXPi0xwJMnFbgupGCdKf8t9pg=
Subject key identifier:   EE:FA:32:FC:9E:42:31:71:17:5D:93:76:B1:6F:63:89:4E:FB:FC:06
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       42C0B3AFF6BBFAAE8F6EEF238AD06C6FD20E8A1C
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:07 +0000
ROA not before:           Mon 07 Apr 2025 18:05:07 +0000
ROA not after:            Mon 06 Apr 2026 18:10:07 +0000
asID:                     53062
IP address blocks:        187.85.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c0:b3:af:f6:bb:fa:ae:8f:6e:ef:23:8a:d0:6c:6f:d2:0e:8a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:07 2025 GMT
            Not After : Apr  6 18:10:07 2026 GMT
        Subject: CN=EEFA32FC9E423171175D9376B16F63894EFBFC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:3d:78:e9:85:38:ff:15:c0:c0:27:f7:14:
                    d2:5c:be:dd:54:14:2b:d1:8a:81:62:06:8e:0a:a3:
                    03:0c:8c:e3:bf:db:8b:ff:b6:3f:e7:3c:2f:53:3c:
                    ae:96:f5:b7:ba:9d:fd:54:2d:7d:72:36:0e:65:2e:
                    8b:cb:1a:f6:8a:42:ec:1a:69:df:3b:49:7f:97:2f:
                    8c:4f:cc:78:d2:66:b9:7c:4d:e8:51:bb:cb:fa:e1:
                    c1:98:ac:d4:0f:2e:af:a5:bb:c0:67:ef:61:3e:1f:
                    32:84:36:4b:2e:66:f5:6a:ac:53:af:70:6a:ba:c0:
                    a7:87:f2:d0:7e:41:a4:87:21:0e:9f:ab:0d:ec:cf:
                    ec:ee:78:e0:e1:78:78:c8:b3:b9:db:37:a5:63:c8:
                    da:b5:ac:b5:2c:f9:4c:09:f3:ad:d3:b4:f0:89:a1:
                    cf:24:8b:d0:36:e1:52:0b:45:a5:50:34:f9:41:e6:
                    e1:d0:b3:ad:cb:6e:e8:f0:ca:3f:37:b9:9b:a0:e1:
                    24:f3:e7:c2:0c:43:b5:58:28:46:1e:8f:c2:af:e5:
                    95:a3:97:65:91:7d:2c:d2:e4:26:79:33:24:35:ab:
                    4d:b2:15:66:a3:42:7e:82:bd:4b:8a:73:95:37:df:
                    c7:c9:04:8d:d3:2b:f0:29:e3:a7:5b:d6:ee:13:24:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:32:FC:9E:42:31:71:17:5D:93:76:B1:6F:63:89:4E:FB:FC:06
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:7a:d1:82:1e:97:09:8a:38:3f:7a:58:e2:81:ff:aa:3a:f4:
         50:17:43:21:89:cf:8f:ac:49:9e:72:ed:e6:68:26:46:30:92:
         9c:6c:9e:13:71:c9:80:e8:df:31:52:70:24:0e:f0:ed:ee:e8:
         a3:f1:1f:6e:75:74:8a:e2:90:2e:38:32:e3:fd:24:c4:8d:e9:
         68:a2:bf:31:73:11:40:6d:0b:24:8e:51:37:a6:31:fa:bc:6f:
         5f:f4:d5:d2:16:10:72:58:e0:e2:d5:c6:2c:04:b6:a2:56:b9:
         7f:e7:b6:0e:37:b5:05:4a:fe:f4:b7:bb:bf:8e:3b:db:b1:2b:
         54:92:e1:e9:89:ed:e8:71:6f:2f:1d:58:b4:42:37:73:cc:c9:
         58:ad:31:1a:2e:9e:e0:d7:70:cb:a5:76:7d:08:b9:76:d2:af:
         64:c8:9b:32:05:11:3e:fd:2a:92:8d:91:54:85:42:0d:85:ea:
         6c:d2:e5:31:73:e4:d7:44:06:a1:9f:f6:3c:00:22:1c:c3:a3:
         d6:51:77:76:f1:f9:a8:0e:33:60:5b:c5:75:df:08:a3:99:c7:
         74:00:41:74:d7:55:e6:7d:b1:44:9e:cb:1c:f7:87:17:5a:85:
         1c:50:45:99:db:ec:91:10:20:d1:f3:9b:76:de:18:1f:41:77:
         bf:bb:50:79
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUQsCzr/a7+q6Pbu8jitBsb9IOihwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg0MTBENTQyNTI5MjZDM0FFNUE5MUFGRDM5OTJBQzgy
ODgyOTAzMTAeFw0yNTA0MDcxODA1MDdaFw0yNjA0MDYxODEwMDdaMDMxMTAvBgNV
BAMTKEVFRkEzMkZDOUU0MjMxNzExNzVEOTM3NkIxNkY2Mzg5NEVGQkZDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zz146YU4/xXAwCf3FNJcvt1U
FCvRioFiBo4KowMMjOO/24v/tj/nPC9TPK6W9be6nf1ULX1yNg5lLovLGvaKQuwa
ad87SX+XL4xPzHjSZrl8TehRu8v64cGYrNQPLq+lu8Bn72E+HzKENksuZvVqrFOv
cGq6wKeH8tB+QaSHIQ6fqw3sz+zueODheHjIs7nbN6VjyNq1rLUs+UwJ863TtPCJ
oc8ki9A24VILRaVQNPlB5uHQs63Lbujwyj83uZug4STz58IMQ7VYKEYej8Kv5ZWj
l2WRfSzS5CZ5MyQ1q02yFWajQn6CvUuKc5U338fJBI3TK/Ap46db1u4TJOgtAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU7voy/J5CMXEXXZN2sW9jiU77/AYwHwYDVR0j
BBgwFoAU+EENVCUpJsOuWpGv05kqyCiCkDEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzIvRjg0MTBENTQyNTI5MjZDM0FFNUE5MUFGRDM5OTJBQzgyODgyOTAzMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GODQxMEQ1NDI1MjkyNkMzQUU1
QTkxQUZEMzk5MkFDODI4ODI5MDMxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzIvMzEz
ODM3MmUzODM1MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzAz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEu1WQMA0GCSqGSIb3DQEBCwUAA4IBAQBAetGCHpcJijg/
eljigf+qOvRQF0Mhic+PrEmecu3maCZGMJKcbJ4TccmA6N8xUnAkDvDt7uij8R9u
dXSK4pAuODLj/STEjeloor8xcxFAbQskjlE3pjH6vG9f9NXSFhByWODi1cYsBLai
Vrl/57YON7UFSv70t7u/jjvbsStUkuHpie3ocW8vHVi0QjdzzMlYrTEaLp7g13DL
pXZ9CLl20q9kyJsyBRE+/SqSjZFUhUINheps0uUxc+TXRAahn/Y8ACIcw6PWUXd2
8fmoDjNgW8V13wijmcd0AEF011XmfbFEnssc94cXWoUcUEWZ2+yRECDR85t23hgf
QXe/u1B5
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:15 2025 by rpki-client on console.sobornost.net