Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa
File:                     3138372e312e3136382e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          N0+5ln1fJ/Sn/WLNKxZsPILuuZ7uWeNTtcEnXvSD63o=
Subject key identifier:   9B:E8:08:23:E1:8C:6A:12:7A:8B:0A:4A:A2:4F:51:D9:23:05:76:75
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       0487C2814FB0BFC23533C7BE83C4CEE6F51D8183
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:16 +0000
ROA not before:           Wed 09 Apr 2025 18:43:16 +0000
ROA not after:            Wed 08 Apr 2026 18:48:16 +0000
asID:                     28252
IP address blocks:        187.1.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 03:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:87:c2:81:4f:b0:bf:c2:35:33:c7:be:83:c4:ce:e6:f5:1d:81:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:16 2025 GMT
            Not After : Apr  8 18:48:16 2026 GMT
        Subject: CN=9BE80823E18C6A127A8B0A4AA24F51D923057675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:15:15:38:67:db:64:a6:eb:6a:23:5b:e0:
                    0d:93:2b:15:4d:cf:c5:88:16:83:ab:31:1c:63:d8:
                    6f:45:89:07:6c:7c:47:b0:2c:54:69:34:51:9c:99:
                    71:eb:80:12:19:aa:b4:b2:72:d2:17:c3:4c:e5:88:
                    71:5e:81:1b:54:ea:71:4e:a9:bf:9f:9d:38:58:3f:
                    1c:76:4f:0b:bf:8c:a0:bb:55:ea:af:9c:a5:64:74:
                    9a:1a:6a:50:35:6d:d8:60:f2:99:31:85:af:93:1c:
                    a4:68:b9:3c:f4:c0:56:cb:e1:1f:cf:26:35:c8:d6:
                    cb:26:f9:e0:f2:49:87:be:79:95:f2:e9:c6:34:e3:
                    ee:bc:af:c8:65:33:c9:5e:e0:cf:67:23:cd:68:d0:
                    ef:3b:28:69:17:61:04:90:26:f3:28:ab:14:bf:6d:
                    1c:cd:20:14:d7:56:de:d6:90:d6:a0:c5:d6:8c:77:
                    91:69:24:3d:ca:75:5f:22:fe:b5:1e:59:6c:a4:65:
                    2b:b5:20:14:48:55:62:f4:8f:48:46:46:20:a1:66:
                    82:c0:57:06:e7:ab:7c:4c:78:3f:af:08:4b:1a:a9:
                    c8:08:c4:42:b4:10:1a:db:43:3c:91:c1:54:6e:b4:
                    43:46:9e:43:00:50:1a:69:01:3b:4f:d4:2f:80:30:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:08:23:E1:8C:6A:12:7A:8B:0A:4A:A2:4F:51:D9:23:05:76:75
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:93:86:df:7e:51:30:2c:6d:ae:bf:fb:79:f0:4e:74:45:
         50:67:1c:09:b0:1a:70:67:3c:82:21:8b:87:6f:71:f1:36:f3:
         bf:bf:fb:c3:c8:73:33:79:31:5e:56:b1:51:0f:d8:ab:1b:2d:
         74:22:29:de:a9:fa:4f:de:a5:e2:64:0d:1a:aa:f1:55:d6:f0:
         7f:f5:36:25:db:b6:49:b4:ae:fa:af:36:5e:37:63:98:9d:66:
         f8:f5:2d:78:2a:f9:63:86:29:cc:d7:aa:24:54:23:79:95:ce:
         b6:f4:38:94:32:19:a6:99:b9:79:2f:88:1a:dc:ba:e2:5d:ad:
         53:3c:28:8c:2c:93:c5:27:30:2b:53:4d:df:87:85:2c:f4:58:
         aa:fa:b6:df:d7:35:28:36:df:64:51:dc:fc:a3:45:9d:53:67:
         6e:14:8e:9a:ed:a6:21:6b:17:c5:a4:77:9a:f3:f0:c2:3a:8b:
         14:c9:2e:1f:2e:56:49:aa:9a:ff:62:30:2c:42:db:be:dd:1f:
         4d:6f:ec:c8:d3:1d:28:11:02:83:56:9b:b8:9a:0a:42:2a:7a:
         ac:d1:9a:62:0e:3f:d9:27:54:a0:f8:73:ef:42:9d:2e:d6:db:
         d5:76:ab:00:05:a4:14:44:b2:78:60:10:de:4f:4d:39:b1:a5:
         05:c4:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:13:32 2025 by rpki-client