Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138372e34342e36342e302f32302d3234203d3e203238333039.roa
File:                     3138372e34342e36342e302f32302d3234203d3e203238333039.roa (raw, json)
Hash identifier:          ytWMeT7a+5e3RhiY9vsuprXfI161f6tC472OLXTHDx0=
Subject key identifier:   C1:8F:AB:A1:88:3D:BB:E2:2C:01:C6:1B:12:16:F2:A6:BC:57:B6:7D
Certificate issuer:       /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Certificate serial:       23A584606DE8498EEF1E01DA18AFA6BE5FD7237E
Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138372e34342e36342e302f32302d3234203d3e203238333039.roa
Signing time:             Thu 03 Apr 2025 13:12:01 +0000
ROA not before:           Thu 03 Apr 2025 13:07:01 +0000
ROA not after:            Thu 02 Apr 2026 13:12:01 +0000
asID:                     28309
IP address blocks:        187.44.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl
                          rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a5:84:60:6d:e8:49:8e:ef:1e:01:da:18:af:a6:be:5f:d7:23:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
        Validity
            Not Before: Apr  3 13:07:01 2025 GMT
            Not After : Apr  2 13:12:01 2026 GMT
        Subject: CN=C18FABA1883DBBE22C01C61B1216F2A6BC57B67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:29:35:7a:95:aa:4f:21:76:02:38:cb:24:
                    99:88:eb:ba:95:57:fd:8f:a2:72:78:cd:b7:50:ed:
                    fd:0c:4b:30:76:f4:8d:76:fa:16:59:1c:5a:e4:9c:
                    cb:18:79:c4:6a:fe:a1:30:50:d4:36:43:1b:5d:63:
                    46:2b:dd:28:7c:e4:40:12:f9:d6:fa:33:58:4e:62:
                    0e:9b:6a:88:b5:06:71:45:f2:c1:ab:a7:ba:d3:0e:
                    38:76:d6:b9:a4:0d:14:7d:a1:3a:5b:1c:5d:3b:0f:
                    78:11:11:41:19:a5:eb:81:0f:16:3f:b5:70:ab:0f:
                    5d:cf:11:cf:a4:10:be:e5:3c:5e:a8:30:2f:25:10:
                    46:f5:9f:b0:63:bb:e9:2f:f3:3a:ca:05:4d:cf:60:
                    47:01:f3:7b:66:7a:ec:81:12:f9:6a:ad:79:70:0f:
                    16:ac:94:fa:92:0a:04:97:b9:99:d0:2a:62:c3:b0:
                    a3:af:17:f5:84:43:f2:ba:36:c2:d2:fe:9e:e5:2b:
                    c0:d4:23:ee:fb:ce:df:fd:6f:02:3c:ab:ac:7d:c8:
                    6a:b0:b6:4c:20:b0:42:5c:18:64:b3:05:a4:3f:2f:
                    13:9a:8f:f8:84:51:b8:d4:17:50:b8:c9:fd:b3:da:
                    c8:b7:b4:14:36:6d:67:57:38:87:0b:c2:d2:3c:6f:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8F:AB:A1:88:3D:BB:E2:2C:01:C6:1B:12:16:F2:A6:BC:57:B6:7D
            X509v3 Authority Key Identifier:
                keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138372e34342e36342e302f32302d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:33:73:37:f5:5b:28:bc:a6:78:7d:d5:ea:8b:a1:a9:79:9d:
         2d:9a:42:1b:f8:4b:a1:33:a1:0b:cc:14:8b:1c:65:be:16:37:
         d5:04:ff:b4:7e:ff:48:a5:8c:42:9e:0f:00:8a:79:74:eb:41:
         5e:e9:f7:38:4d:fa:f7:d7:33:26:8c:a1:da:f1:fa:5b:8d:a9:
         45:e2:7d:18:7f:62:39:ed:20:8f:b6:0d:31:b0:fa:65:54:95:
         e2:ca:74:37:0e:ca:33:89:64:77:b3:9b:97:19:68:87:59:3b:
         38:14:b3:4e:08:8c:da:7f:9a:16:f5:7f:de:85:a7:b7:e2:fb:
         90:8f:db:20:05:4f:3e:4e:2e:7c:f8:8c:86:3e:50:93:34:71:
         2d:7b:84:a5:9b:47:f7:28:cf:6e:3e:f3:49:34:ec:9e:b9:43:
         71:a0:a7:bf:14:cb:65:9c:ab:62:1f:38:73:ce:24:64:59:6d:
         06:ee:ef:02:ca:83:24:fa:aa:8d:4b:97:59:79:74:e6:38:3d:
         4a:96:14:c1:af:25:13:30:d5:d9:dd:a2:1b:e3:c4:29:53:b1:
         ff:da:ff:44:42:36:b7:e5:2e:4c:65:48:92:b5:79:c8:c9:7d:
         e7:ce:9a:a2:ca:67:ff:9c:58:1b:3e:27:ba:51:d5:e5:7c:1b:
         27:72:ab:b2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUI6WEYG3oSY7vHgHaGK+mvl/XI34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlERTVBRDFBNUIxRjk3ODg0RDE5REMzRTlFRkRBM0Y5
NjU0QzEyMzAeFw0yNTA0MDMxMzA3MDFaFw0yNjA0MDIxMzEyMDFaMDMxMTAvBgNV
BAMTKEMxOEZBQkExODgzREJCRTIyQzAxQzYxQjEyMTZGMkE2QkM1N0I2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Oyk1epWqTyF2AjjLJJmI67qV
V/2PonJ4zbdQ7f0MSzB29I12+hZZHFrknMsYecRq/qEwUNQ2QxtdY0Yr3Sh85EAS
+db6M1hOYg6baoi1BnFF8sGrp7rTDjh21rmkDRR9oTpbHF07D3gREUEZpeuBDxY/
tXCrD13PEc+kEL7lPF6oMC8lEEb1n7Bju+kv8zrKBU3PYEcB83tmeuyBEvlqrXlw
DxaslPqSCgSXuZnQKmLDsKOvF/WEQ/K6NsLS/p7lK8DUI+77zt/9bwI8q6x9yGqw
tkwgsEJcGGSzBaQ/LxOaj/iEUbjUF1C4yf2z2si3tBQ2bWdXOIcLwtI8b/C3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwY+roYg9u+IsAcYbEhbyprxXtn0wHwYDVR0j
BBgwFoAUad5a0aWx+XiE0Z3D6e/aP5ZUwSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3
Q28vMC82OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5REU1QUQxQTVCMUY5Nzg4
NEQxOURDM0U5RUZEQTNGOTY1NEMxMjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3M0RhZzlveXJHd1c5eUU4Q3J1MUtCdG9lZWZhaEphdGJpeXg0eEg4d0NvLzAv
MzEzODM3MmUzNDM0MmUzNjM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLssQDANBgkqhkiG9w0BAQsFAAOCAQEAITNzN/VbKLym
eH3V6ouhqXmdLZpCG/hLoTOhC8wUixxlvhY31QT/tH7/SKWMQp4PAIp5dOtBXun3
OE3699czJoyh2vH6W42pReJ9GH9iOe0gj7YNMbD6ZVSV4sp0Nw7KM4lkd7Oblxlo
h1k7OBSzTgiM2n+aFvV/3oWnt+L7kI/bIAVPPk4ufPiMhj5QkzRxLXuEpZtH9yjP
bj7zSTTsnrlDcaCnvxTLZZyrYh84c84kZFltBu7vAsqDJPqqjUuXWXl05jg9SpYU
wa8lEzDV2d2iG+PEKVOx/9r/REI2t+UuTGVIkrV5yMl9586aospn/5xYGz4nulHV
5XwbJ3Krsg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:04 2025 by rpki-client on console.sobornost.net