Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa
File:                     3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa (raw, json)
Hash identifier:          lcS/7Jm6IDKlArZVVfkI+eLNcqAoTj0M0D24A6nrqq8=
Subject key identifier:   8A:31:A9:97:80:CA:1D:F9:29:CD:33:D4:D7:E1:6A:8A:13:99:09:73
Certificate issuer:       /CN=44D3F1577250CA6E2174DFB39A484561766D6292
Certificate serial:       74EF850A65D0A80BE7A6ECA3491C7696770CCF83
Authority key identifier: 44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa
Signing time:             Wed 05 Mar 2025 23:27:20 +0000
ROA not before:           Wed 05 Mar 2025 23:22:20 +0000
ROA not after:            Wed 04 Mar 2026 23:27:20 +0000
asID:                     271183
IP address blocks:        168.90.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl
                          rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 08:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ef:85:0a:65:d0:a8:0b:e7:a6:ec:a3:49:1c:76:96:77:0c:cf:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D3F1577250CA6E2174DFB39A484561766D6292
        Validity
            Not Before: Mar  5 23:22:20 2025 GMT
            Not After : Mar  4 23:27:20 2026 GMT
        Subject: CN=8A31A99780CA1DF929CD33D4D7E16A8A13990973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:0b:f6:ee:9f:dc:7d:70:78:72:31:73:0e:
                    2d:1d:18:ba:2b:12:04:25:d1:fb:c6:e4:2b:f0:26:
                    a1:e9:db:60:a3:a0:eb:d2:25:23:49:99:f6:52:4b:
                    e2:c5:2d:48:22:34:46:f0:37:f9:a3:68:e7:3b:13:
                    65:3c:5f:02:92:a6:61:9c:80:ec:61:1c:7f:39:e7:
                    37:59:ed:31:c1:c4:29:fb:b9:cf:09:e9:a2:c6:20:
                    29:40:49:22:3a:27:06:55:3c:16:b4:eb:b6:dc:61:
                    2c:f9:31:7e:67:96:73:cb:12:a5:d1:09:de:fe:a1:
                    96:ba:83:76:24:4e:6d:ee:e8:30:6f:55:e0:e5:c7:
                    c2:a2:e9:5f:25:32:98:41:57:f7:f4:e1:26:6f:16:
                    e4:97:d2:c5:41:82:99:50:7d:0a:1b:48:4d:e7:0c:
                    d4:4a:ae:4a:66:b9:c6:57:52:f3:16:4d:66:6d:b0:
                    6b:d9:de:dd:d9:d8:f4:33:5a:7b:01:1d:ad:6c:71:
                    d1:e9:66:c9:31:48:1c:11:29:c9:17:31:35:15:7a:
                    b7:f9:d0:27:9c:09:7c:f6:0d:ce:c3:b0:e8:8a:50:
                    c2:ae:ec:70:fd:15:34:f3:18:35:2e:06:74:cf:1e:
                    80:b6:1e:19:33:ed:3c:85:ab:4a:dd:45:ce:cf:50:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:31:A9:97:80:CA:1D:F9:29:CD:33:D4:D7:E1:6A:8A:13:99:09:73
            X509v3 Authority Key Identifier:
                keyid:44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:14:f7:9a:ae:e2:8d:38:8d:f4:e2:26:b3:11:59:7a:60:
         df:62:63:e8:c8:75:28:fe:66:2e:89:13:d2:54:ca:66:69:ae:
         12:0f:94:ab:3f:64:0c:48:dd:26:3f:8f:69:5e:ea:4d:14:f7:
         91:1a:95:2b:eb:87:b6:83:21:60:37:37:de:e3:d0:87:b1:88:
         37:84:66:32:eb:22:1d:87:38:6a:fa:43:b4:78:05:9d:81:bc:
         06:31:69:c8:f8:14:3c:29:5d:b8:0f:71:1d:1c:76:f0:e3:0e:
         07:a4:23:cb:fa:bb:33:9f:6b:6b:b6:19:c5:3b:af:e0:06:b2:
         d3:00:d3:46:16:11:dd:64:2a:70:90:cd:17:36:ad:69:2d:7e:
         15:2a:b8:b6:54:69:ac:30:31:d9:f7:b5:bb:f5:18:10:60:03:
         cd:da:ba:ed:0c:fe:d0:f3:d2:24:88:9d:63:55:1d:63:cc:eb:
         13:23:4f:08:a3:f2:c5:92:ec:98:52:70:a9:96:b1:dd:5f:9f:
         3a:ea:05:92:11:4c:1c:32:1f:e0:dc:bc:c3:cc:95:71:84:c5:
         90:d5:84:30:14:a6:02:69:3f:fc:08:95:cb:6a:8a:89:84:c6:
         38:95:5c:83:78:98:f2:dc:6d:7d:06:ac:36:c7:f2:b7:b7:96:
         59:fc:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net