Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32332d3233203d3e20323730393932.roa
File:                     3138372e38362e3136302e302f32332d3233203d3e20323730393932.roa (raw, json)
Hash identifier:          mp+G2dSr26MLOZK+IKWXbPYAfEdd3fUCwvPWDYq2Xyo=
Subject key identifier:   66:0B:A0:DA:D1:E2:9B:69:34:26:58:89:B0:3A:F1:63:1A:64:02:67
Certificate issuer:       /CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
Certificate serial:       1187682B1A31B0CB5A4CB540C6FBBBE818431A94
Authority key identifier: 84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32332d3233203d3e20323730393932.roa
Signing time:             Thu 06 Feb 2025 01:29:51 +0000
ROA not before:           Thu 06 Feb 2025 01:24:51 +0000
ROA not after:            Thu 05 Feb 2026 01:29:51 +0000
asID:                     270992
IP address blocks:        187.86.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl
                          rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:87:68:2b:1a:31:b0:cb:5a:4c:b5:40:c6:fb:bb:e8:18:43:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
        Validity
            Not Before: Feb  6 01:24:51 2025 GMT
            Not After : Feb  5 01:29:51 2026 GMT
        Subject: CN=660BA0DAD1E29B6934265889B03AF1631A640267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:71:83:ab:ca:e8:70:86:f2:a2:48:12:6e:
                    e9:21:4f:a7:db:63:e2:7e:04:44:66:ec:c3:c9:ca:
                    98:20:33:53:b5:57:db:84:c8:2a:f2:cf:7a:b4:6e:
                    95:83:5c:84:f4:94:da:6e:83:df:3f:a4:89:02:44:
                    2d:77:36:bf:ab:df:a4:8b:f3:74:da:be:c6:c9:9d:
                    bd:db:14:6d:8e:70:64:a5:b1:38:b8:4e:43:f8:64:
                    f7:a5:91:47:26:45:fc:43:69:72:28:a1:2f:f1:e3:
                    1b:58:0b:3f:d5:95:f4:15:be:6a:28:22:c5:3b:1a:
                    e1:e5:e1:1c:d8:b2:d1:75:c7:67:d7:ab:7e:9c:51:
                    fb:fd:95:6f:ff:ca:4a:e1:99:a0:fa:45:ea:2a:7c:
                    54:66:ae:f1:59:87:cb:03:8b:72:c9:3d:9c:fe:b5:
                    84:f6:fa:49:b1:44:b3:62:0e:ad:ea:7b:54:09:02:
                    8b:b0:71:6b:59:5e:39:ed:96:0f:77:3a:4d:97:80:
                    e5:35:7a:ee:82:ab:ee:d4:66:29:16:61:06:0e:c2:
                    c6:04:a6:70:a9:cd:87:29:47:b9:55:c8:7c:ac:46:
                    66:5e:2c:62:02:c0:5c:45:d5:c7:07:37:c5:09:07:
                    77:81:fd:3b:21:00:98:3a:3b:10:1f:da:c6:a4:b3:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:A0:DA:D1:E2:9B:69:34:26:58:89:B0:3A:F1:63:1A:64:02:67
            X509v3 Authority Key Identifier:
                keyid:84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32332d3233203d3e20323730393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:31:62:87:a6:ad:93:52:c9:b5:e9:32:3b:23:6b:88:1e:a6:
         3e:fe:4b:3d:19:45:e4:c8:88:65:bd:35:29:37:ca:06:7a:88:
         98:82:e7:1d:ea:64:54:a7:cf:19:01:72:6e:99:2f:79:5e:58:
         d2:d9:ad:8a:2c:f5:83:9d:3f:7c:28:c5:89:ec:f5:72:bc:cb:
         81:78:b4:43:10:cb:f8:33:4b:0e:e8:2d:e2:d0:14:80:0a:0b:
         67:9e:85:33:4c:5e:63:22:8c:cb:b6:4c:77:cb:61:58:dd:7b:
         52:2a:28:c2:a5:87:19:e4:08:23:f6:7b:8f:b4:2a:fb:03:fb:
         4e:2d:e2:7e:00:77:ef:04:9d:68:af:d9:ea:bd:44:3d:50:43:
         20:9a:d0:07:7a:9a:98:4e:4d:29:8f:6f:65:40:f9:50:e4:ca:
         72:85:1b:f4:ab:3e:45:72:8f:5b:d4:22:88:20:87:46:d0:70:
         88:b3:cd:70:6a:df:85:8e:02:6b:fa:d4:94:18:83:32:ea:63:
         8f:dc:65:09:37:c2:f3:6b:3c:d8:f1:d5:9b:12:4d:11:d8:1b:
         de:65:e1:d8:e4:11:83:d3:71:2f:13:41:ee:f2:1d:84:2c:63:
         1a:ef:8c:8a:98:f1:ae:33:b4:9c:78:1d:29:10:6e:c6:4a:b5:
         bd:86:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:17 2025 by rpki-client on console.sobornost.net