Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa
File:                     3138372e312e3136322e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          0j1sRK7M2WXvs/9e4q6sXtlQOxC0gFG7O6jvUpZXmSw=
Subject key identifier:   CC:D0:E6:26:9A:1D:8C:F1:88:88:D0:EC:56:59:EC:C6:45:C3:6D:8D
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       398B3A456EC9ABB5B06F23A57B8671689CA5208C
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:16 +0000
ROA not before:           Wed 09 Apr 2025 18:43:16 +0000
ROA not after:            Wed 08 Apr 2026 18:48:16 +0000
asID:                     28252
IP address blocks:        187.1.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 13:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8b:3a:45:6e:c9:ab:b5:b0:6f:23:a5:7b:86:71:68:9c:a5:20:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:16 2025 GMT
            Not After : Apr  8 18:48:16 2026 GMT
        Subject: CN=CCD0E6269A1D8CF18888D0EC5659ECC645C36D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:23:17:b9:06:40:7b:f6:f3:53:94:60:1b:
                    40:7d:28:0f:bf:0a:f8:67:e5:01:b2:e0:85:5c:0d:
                    3e:ee:68:6f:f5:c9:88:ac:c3:26:74:91:92:a7:fc:
                    09:42:93:65:32:e9:2b:56:ee:13:ae:9c:1f:64:d4:
                    8c:d1:75:c3:3c:6f:e9:67:ea:bf:90:52:40:6e:c6:
                    22:58:8f:f7:fe:e7:74:c1:23:c6:7c:ea:dd:31:7d:
                    53:78:69:71:50:3a:53:dd:c5:da:12:3d:b9:bd:ad:
                    d4:5c:14:5b:5c:b6:19:35:f9:70:db:4f:48:8d:3e:
                    42:34:77:06:00:b8:ab:87:35:46:06:a0:f0:a7:65:
                    41:20:a8:db:4d:a2:5f:b3:0a:5b:fe:ce:f6:80:ca:
                    85:69:da:57:89:45:04:f3:de:42:9e:78:4a:e9:f7:
                    cc:ba:a7:d2:9f:4e:15:cc:df:cd:7e:8b:10:c9:01:
                    6b:3d:49:bc:1b:3f:5a:0b:6c:5c:0d:47:e5:b7:cc:
                    9a:c5:7b:11:6b:ea:07:99:18:ad:8f:10:48:bf:19:
                    d9:af:12:dd:1a:d5:17:43:44:b5:50:a9:23:24:da:
                    53:34:67:be:4c:4f:79:d6:31:4e:d5:09:ad:73:cc:
                    72:20:90:53:f1:c3:73:b5:81:e5:9c:ce:94:e4:40:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:E6:26:9A:1D:8C:F1:88:88:D0:EC:56:59:EC:C6:45:C3:6D:8D
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:39:b7:c3:4d:c9:70:a7:2d:c1:cd:f1:a3:18:5f:81:07:
         c5:f9:85:9b:fa:cb:29:47:c8:2e:de:cc:f6:30:12:49:4b:d2:
         93:c2:fb:d6:8e:5d:c2:c1:44:8f:5d:4d:9b:62:14:4d:6b:77:
         31:db:fb:48:90:33:c9:54:14:c3:6e:b6:2c:25:74:f0:14:2b:
         64:84:b7:d8:c5:2e:ba:2d:09:5a:12:b8:69:7e:ba:72:0e:34:
         af:ba:88:4c:99:02:a5:47:5c:37:cc:a4:ce:08:e0:3e:85:b0:
         81:2e:b1:62:d3:15:54:36:24:f8:83:0a:b6:78:56:d3:89:a2:
         20:98:0c:f0:ec:b3:fb:37:db:d6:fa:de:76:d7:78:3c:55:ab:
         92:f0:bd:55:00:38:c4:b5:6f:62:96:58:29:47:c1:c3:fa:ff:
         04:75:11:9c:99:67:21:a6:ff:61:b8:51:72:f7:ca:61:cd:db:
         4e:02:f3:74:31:53:39:e6:30:7b:f2:b8:3f:8a:73:f4:11:48:
         7b:7d:c9:19:54:cc:fa:91:f0:8e:37:02:f1:d2:61:c7:c5:5e:
         64:22:29:df:4a:e1:a7:b3:64:28:55:5a:d1:78:a8:0c:cf:14:
         14:4e:c2:11:08:e5:8b:d0:94:ed:9b:86:71:1b:f9:88:32:30:
         6b:ee:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:51:00 2025 by rpki-client