Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136342e302f32322d3232203d3e203238323532.roa
File:                     3138372e312e3136342e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          LA1g12YVsamMy0T8zzjdmIATnGCwo6CfTeX94lWxlME=
Subject key identifier:   26:9A:93:7C:E7:23:9C:F2:52:FA:F0:9C:59:70:BB:B8:DF:AD:61:B7
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       33B5E0398E08464CA9105BFEA3DE968873AE7FEC
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136342e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:18 +0000
ROA not before:           Wed 09 Apr 2025 18:43:18 +0000
ROA not after:            Wed 08 Apr 2026 18:48:18 +0000
asID:                     28252
IP address blocks:        187.1.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:e0:39:8e:08:46:4c:a9:10:5b:fe:a3:de:96:88:73:ae:7f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:18 2025 GMT
            Not After : Apr  8 18:48:18 2026 GMT
        Subject: CN=269A937CE7239CF252FAF09C5970BBB8DFAD61B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:e5:fa:8b:3c:c8:7e:2f:80:4d:b1:ae:ad:
                    1b:36:e6:2e:70:8c:8d:16:59:42:b1:ac:06:40:ae:
                    58:7f:3a:ca:c6:38:62:dd:08:d1:e8:36:0c:c7:c8:
                    e0:85:c3:32:c9:28:aa:d0:89:f5:5d:1c:95:f7:c0:
                    24:d4:dc:91:c9:f8:9b:27:d5:9e:b6:6d:d9:c0:f3:
                    4b:7e:ad:ca:4c:2e:c9:c4:35:f7:9d:f5:26:79:3b:
                    2b:df:75:e9:bb:fb:1d:a4:9d:ae:40:da:87:c9:05:
                    cb:34:da:e9:14:c9:5f:1f:c9:1a:c7:30:65:c8:0b:
                    b8:cc:21:87:be:db:2e:7b:8f:3a:4d:8e:49:ae:5a:
                    f8:16:ba:ff:f6:03:4d:a8:eb:43:66:f5:0f:cc:49:
                    9e:43:c7:a6:61:d6:35:9f:e6:57:52:61:20:ba:07:
                    f1:08:e6:26:a2:13:77:ed:38:79:53:6b:d4:f8:72:
                    44:e3:b3:b0:a7:67:c6:26:8a:41:c8:cc:37:49:40:
                    7c:32:c5:08:ab:24:4a:42:f4:b8:17:08:b8:67:7e:
                    31:04:26:05:64:52:d8:5e:6f:e4:b3:b5:3d:62:f2:
                    24:99:6c:9d:b6:86:4e:8d:b6:a2:e5:8f:c9:60:d9:
                    44:da:2c:3d:ef:8c:50:b6:55:75:0a:65:2e:9a:fb:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:93:7C:E7:23:9C:F2:52:FA:F0:9C:59:70:BB:B8:DF:AD:61:B7
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136342e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:db:ea:0f:81:d5:e1:bf:ee:fa:20:f3:43:9d:d2:b5:60:6a:
         61:99:34:08:18:a4:ba:85:94:0e:cb:1d:af:29:8d:3e:5b:62:
         a9:45:ff:bc:82:79:3d:d9:5c:7f:6a:2f:ed:37:09:0f:98:17:
         46:73:e9:d8:7d:1b:4d:a0:11:03:53:e3:52:90:f2:a0:89:1c:
         23:54:eb:d5:e5:81:64:bf:3a:ce:78:fa:29:bb:ec:6a:1a:15:
         a9:ef:fe:08:67:b7:d7:17:7a:4e:80:4b:7c:ea:8e:6d:da:81:
         36:0c:9b:b3:e2:e1:e9:c1:e5:50:f1:80:c7:39:12:20:c7:f6:
         9d:a4:a5:60:be:47:20:17:c8:39:95:69:32:b4:e1:f3:42:79:
         69:5c:fa:5c:9c:e4:28:2b:1a:21:b5:60:62:ac:f2:c9:f3:b1:
         67:9d:28:73:0b:72:7f:92:a2:a2:df:95:19:62:ae:aa:89:73:
         fa:9e:af:d4:ce:70:e9:98:f0:ac:19:2d:f1:de:79:da:be:f4:
         7e:4f:50:cb:9b:0f:30:b7:50:57:b2:45:14:4f:95:92:8e:2c:
         72:a7:5a:f0:a1:19:1a:9d:ab:e7:41:0f:3f:4f:f1:47:38:04:
         8f:a7:cb:4d:fc:39:08:cd:0c:9e:f3:e4:6e:ff:84:e9:fd:e1:
         fa:15:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:01:33 2025 by rpki-client