Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
File:                     3138372e38342e39362e302f32302d3234203d3e2038303535.roa (raw, json)
Hash identifier:          WRDHVuyN0p8XA8F4/s8ryt7Io1MnmSM3XaSoWnTiXG8=
Subject key identifier:   71:E2:A7:6D:09:80:3B:BC:07:2B:48:37:A3:2D:21:72:9B:6F:29:E4
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       6ED66B8BBC81B271FEF8F2E0487E2E2809A2F7BA
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
Signing time:             Fri 18 Apr 2025 14:30:49 +0000
ROA not before:           Fri 18 Apr 2025 14:25:49 +0000
ROA not after:            Fri 17 Apr 2026 14:30:49 +0000
asID:                     8055
IP address blocks:        187.84.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d6:6b:8b:bc:81:b2:71:fe:f8:f2:e0:48:7e:2e:28:09:a2:f7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: Apr 18 14:25:49 2025 GMT
            Not After : Apr 17 14:30:49 2026 GMT
        Subject: CN=71E2A76D09803BBC072B4837A32D21729B6F29E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:99:f7:c9:b9:fa:ae:7b:f8:10:85:87:17:
                    64:52:f5:8a:2f:c1:23:25:2d:7a:33:4a:8a:8f:55:
                    64:ba:76:29:0c:d0:ad:b4:db:24:13:3b:99:72:82:
                    b4:8d:6c:04:3d:a0:65:73:40:e7:68:54:68:94:e4:
                    f7:cf:00:6e:0d:57:9b:8a:4b:0c:3f:dd:e2:36:7c:
                    39:68:f6:47:27:9c:73:bb:18:e4:68:ab:11:b5:64:
                    09:45:f1:09:75:fa:94:ae:a1:29:d5:f9:5b:8f:5d:
                    22:25:49:d6:b1:90:06:08:a3:ac:62:94:0f:33:01:
                    4b:4f:a5:02:05:b8:43:a5:ca:42:b0:11:c4:74:ab:
                    29:23:a6:a4:13:ee:f7:7b:d1:74:4b:be:87:3b:fc:
                    11:cb:f9:fa:d9:84:06:37:ca:28:7f:e5:67:d4:ca:
                    65:78:42:38:43:70:23:5a:a2:64:c8:62:a6:0c:1f:
                    a7:4e:68:eb:16:3f:7d:83:59:38:13:4d:f9:f7:4e:
                    af:ed:63:83:8e:cf:0e:dd:a9:57:45:a6:6c:bf:d2:
                    22:13:82:36:bc:4a:85:01:62:50:9c:f8:6b:b9:1e:
                    d6:eb:c0:bc:26:da:a5:a2:fd:de:af:67:05:84:bf:
                    6e:29:20:9c:52:f2:2a:aa:32:75:8e:28:98:f5:c5:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:A7:6D:09:80:3B:BC:07:2B:48:37:A3:2D:21:72:9B:6F:29:E4
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:8d:58:c1:3b:1f:80:d5:a3:fc:dc:14:25:7a:ca:75:4e:
         ef:d1:9b:25:b5:56:05:c0:b7:81:3b:ab:43:71:65:08:be:c5:
         5b:ad:2b:4d:de:8e:d7:66:ea:74:33:75:34:24:a4:de:aa:4e:
         f0:ba:fc:18:4b:96:1c:f0:2a:1b:a4:29:18:48:bc:4e:7b:e9:
         77:8e:c4:66:f1:e4:b9:63:b9:fc:b9:26:2a:f0:7e:4a:af:4f:
         d7:d7:46:10:fe:0f:a2:5f:d7:1f:93:5c:93:d3:8a:ba:10:a4:
         31:06:67:07:74:56:ee:ef:17:64:ff:11:18:17:33:be:b3:06:
         08:dc:f4:c7:f3:7f:df:11:13:08:43:74:ec:a5:25:cb:94:a7:
         42:68:e8:35:87:c7:1b:de:e2:60:8d:ed:8f:8e:55:e3:db:9a:
         71:04:cf:8f:a1:20:c2:13:65:64:a1:93:4c:24:84:99:00:f2:
         4f:09:4f:d4:d3:34:67:b4:bd:f4:02:b9:ec:ec:69:76:c0:ac:
         af:9f:65:c7:2c:87:ee:b5:c8:1e:32:eb:c0:1d:f2:62:cf:2e:
         29:4b:a3:83:0f:78:73:cc:fe:eb:01:70:d5:bd:4e:21:54:4d:
         62:f9:2b:7e:c2:58:00:33:36:cd:bc:08:01:6a:79:fb:16:5b:
         83:00:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net