Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234382e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          EshFnsq6eFBI4aL1DeMHnWcvQ2EHoa41pWq71m0LNx4=
Subject key identifier:   39:1F:15:DD:57:8A:21:CA:C5:FA:D5:20:43:37:B8:41:E2:64:D6:B7
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       0D8DF8A75B00222F740DC040FEB426BB71D2407E
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:21 +0000
ROA not before:           Wed 09 Apr 2025 18:43:21 +0000
ROA not after:            Wed 08 Apr 2026 18:48:21 +0000
asID:                     28252
IP address blocks:        179.189.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 23:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:f8:a7:5b:00:22:2f:74:0d:c0:40:fe:b4:26:bb:71:d2:40:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:21 2025 GMT
            Not After : Apr  8 18:48:21 2026 GMT
        Subject: CN=391F15DD578A21CAC5FAD5204337B841E264D6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:29:7c:1c:cb:a1:63:d2:31:82:7e:30:cf:
                    14:1c:cb:aa:c2:2f:9a:2b:24:28:2b:56:32:7b:df:
                    1a:68:18:46:94:de:26:ed:ad:e8:35:ee:27:04:71:
                    f9:da:37:4b:b4:56:f1:eb:fc:88:e2:7a:e2:1d:45:
                    c6:04:4f:a9:56:f1:f8:0d:c2:05:87:41:b8:dd:5e:
                    f5:cf:6e:7b:7c:9f:b3:c5:c1:a5:cc:dc:68:52:1f:
                    5c:71:48:ff:ad:5b:ea:2e:4d:69:48:19:35:99:b7:
                    f7:b8:fc:ba:d9:69:2d:67:83:ce:b7:72:5c:61:ec:
                    f7:7f:b1:04:35:64:a3:c5:89:1c:b1:03:f8:3a:20:
                    e1:72:66:9f:1b:cb:94:40:e1:e4:79:55:b0:26:e3:
                    78:a9:06:02:55:fc:bb:16:2d:38:e4:7c:05:9d:3e:
                    b6:4e:c5:61:24:d7:63:63:4c:91:3a:0c:71:e8:d6:
                    b4:9f:f5:c2:97:c3:f7:2e:c6:1d:23:8b:c9:7f:1a:
                    f2:70:65:2e:cf:cc:b4:cd:48:04:71:49:7e:05:bf:
                    f9:b8:cb:e1:3d:1f:90:9f:c8:6a:a9:29:6b:ba:e6:
                    f9:91:88:47:9d:cb:08:1e:96:65:12:c9:66:a4:20:
                    14:1b:23:e5:fc:33:65:4c:b0:25:c0:f1:9b:30:66:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1F:15:DD:57:8A:21:CA:C5:FA:D5:20:43:37:B8:41:E2:64:D6:B7
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:92:59:af:08:9a:db:5f:75:33:65:e1:d9:23:97:be:bd:
         53:0f:70:16:dd:3b:a1:94:11:81:91:82:f1:76:6d:39:9d:97:
         0a:7a:40:df:58:a0:47:98:b3:e6:db:96:21:aa:1e:27:c9:1f:
         f7:ad:5e:47:a4:40:ce:98:b8:be:52:8d:ac:1a:ae:d9:f8:7b:
         aa:4c:6c:06:26:e7:f3:de:3b:e3:e2:68:b9:e5:e6:d5:57:4f:
         e6:9d:76:83:c9:08:fb:51:23:d3:62:a1:9e:17:85:1e:be:13:
         eb:bc:71:72:aa:8e:5c:11:12:bf:cf:6c:4e:6d:7f:a9:d7:8d:
         52:f6:c5:e1:30:5a:72:29:f1:65:8d:ff:98:f8:59:b5:d4:ce:
         55:5b:47:25:1b:05:fa:d4:d2:7d:f4:42:d6:dc:b8:e4:18:61:
         be:f3:f5:16:7b:51:50:00:a3:0e:04:3d:90:4b:71:f8:42:eb:
         a2:79:93:b6:62:76:25:3e:b0:6a:37:9f:ea:bb:74:d1:82:64:
         05:35:6b:89:59:f0:cd:24:ae:9e:6a:a6:b1:83:cc:e3:a2:38:
         dd:b1:b4:92:ed:f5:fe:22:b3:c0:79:67:33:37:0a:62:4d:e1:
         5b:85:ff:c1:46:ad:6a:8a:8b:23:42:57:b4:34:7c:d9:2f:0e:
         2b:66:14:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDY34p1sAIi90DcBA/rQmu3HSQH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNTA0MDkxODQzMjFaFw0yNjA0MDgxODQ4MjFaMDMxMTAvBgNV
BAMTKDM5MUYxNURENTc4QTIxQ0FDNUZBRDUyMDQzMzdCODQxRTI2NEQ2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGyl8HMuhY9Ixgn4wzxQcy6rC
L5orJCgrVjJ73xpoGEaU3ibtreg17icEcfnaN0u0VvHr/IjieuIdRcYET6lW8fgN
wgWHQbjdXvXPbnt8n7PFwaXM3GhSH1xxSP+tW+ouTWlIGTWZt/e4/LrZaS1ng863
clxh7Pd/sQQ1ZKPFiRyxA/g6IOFyZp8by5RA4eR5VbAm43ipBgJV/LsWLTjkfAWd
PrZOxWEk12NjTJE6DHHo1rSf9cKXw/cuxh0ji8l/GvJwZS7PzLTNSARxSX4Fv/m4
y+E9H5CfyGqpKWu65vmRiEedywgelmUSyWakIBQbI+X8M2VMsCXA8ZswZkLzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOR8V3VeKIcrF+tUgQze4QeJk1rcwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzNzM5MmUzMTM4MzkyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzvfgwDQYJKoZIhvcNAQELBQADggEBAEy6klmv
CJrbX3UzZeHZI5e+vVMPcBbdO6GUEYGRgvF2bTmdlwp6QN9YoEeYs+bbliGqHifJ
H/etXkekQM6YuL5Sjawartn4e6pMbAYm5/PeO+PiaLnl5tVXT+addoPJCPtRI9Ni
oZ4XhR6+E+u8cXKqjlwREr/PbE5tf6nXjVL2xeEwWnIp8WWN/5j4WbXUzlVbRyUb
BfrU0n30QtbcuOQYYb7z9RZ7UVAAow4EPZBLcfhC66J5k7ZidiU+sGo3n+q7dNGC
ZAU1a4lZ8M0krp5qprGDzOOiON2xtJLt9f4is8B5ZzM3CmJN4VuF/8FGrWqKiyNC
V7Q0fNkvDitmFMM=
-----END CERTIFICATE-----
Generated at Sat May 3 03:03:40 2025 by rpki-client