Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137302e302f32342d3234203d3e203238323532.roa
File:                     3138372e312e3137302e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          VdNUhtquPAkib91usiB6RG3N8zlLkf8+jyjlmXncN2Y=
Subject key identifier:   A8:3E:55:4A:35:5C:A5:19:A5:40:AF:A3:97:54:6D:54:D1:DA:F2:61
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       436CD395C68A857F784100DF63A7E121B66263BC
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137302e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:18 +0000
ROA not before:           Wed 09 Apr 2025 18:43:18 +0000
ROA not after:            Wed 08 Apr 2026 18:48:18 +0000
asID:                     28252
IP address blocks:        187.1.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 08:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6c:d3:95:c6:8a:85:7f:78:41:00:df:63:a7:e1:21:b6:62:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:18 2025 GMT
            Not After : Apr  8 18:48:18 2026 GMT
        Subject: CN=A83E554A355CA519A540AFA397546D54D1DAF261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:4a:0d:e7:52:ed:5c:e6:3f:c5:db:15:33:
                    38:8f:e2:ef:90:8b:64:3b:07:0f:3d:fc:fd:30:77:
                    35:a4:bf:47:c1:da:d1:dd:44:d4:b7:d1:3b:8c:bc:
                    38:6d:d2:71:81:bd:ac:28:ad:ea:b6:2f:4b:33:c3:
                    ee:4a:80:ee:fc:c3:6a:29:1a:bc:65:66:d8:9f:d3:
                    10:95:3c:25:91:7d:9e:d5:30:b7:31:9f:be:d5:07:
                    e0:27:0a:c2:00:e9:0a:e3:52:ff:5d:6f:e9:11:8d:
                    41:01:29:9b:a1:96:9e:00:ac:e1:ef:d2:84:63:63:
                    ff:97:8c:b5:7e:76:fe:e3:0e:bc:e3:23:df:ea:3e:
                    43:c3:64:74:26:d4:72:6d:e4:f0:ba:01:09:43:cc:
                    6c:8a:8a:99:7d:99:ee:5e:6b:40:60:a2:9e:a0:71:
                    91:b5:31:f1:e6:72:ff:94:c6:40:5d:b2:94:dd:12:
                    9e:55:1a:6c:08:21:78:1e:36:83:39:1c:9b:72:a1:
                    fb:ba:c5:ef:5c:fd:9b:74:2a:9f:24:51:ca:cf:8e:
                    bf:93:dd:d2:b1:43:c1:5f:fc:e5:cf:32:12:f4:01:
                    62:a3:9d:38:5e:78:cb:d5:a9:bd:8e:d8:7a:b0:94:
                    55:6f:b6:07:9c:94:22:1d:42:34:e4:b6:da:d5:93:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3E:55:4A:35:5C:A5:19:A5:40:AF:A3:97:54:6D:54:D1:DA:F2:61
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137302e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:a2:6d:b1:07:d7:45:f9:6e:cb:01:d8:a2:ec:dc:36:d9:
         f0:f4:cc:7a:99:31:0f:a9:92:b7:c7:d1:de:e8:ea:c0:13:a1:
         ea:b1:68:d3:19:14:35:9f:8d:14:bb:23:1f:f8:2b:b2:d0:83:
         d3:0f:89:75:b3:b7:57:e9:e9:85:b6:42:ad:bc:83:12:3e:51:
         35:6f:8f:49:24:98:a0:a2:b1:8c:4f:94:11:04:1c:8b:71:c8:
         92:5d:d1:cf:f8:ce:86:c4:6b:bd:53:36:1b:09:e9:c1:aa:59:
         84:bb:55:02:77:fc:aa:23:d6:64:f2:d2:6f:ee:15:7b:4c:35:
         26:17:97:3e:00:17:b3:c0:62:c0:86:75:3b:65:46:bb:4a:97:
         96:8a:34:59:90:af:2b:f8:38:b1:ff:66:11:88:9f:ba:86:1c:
         a6:60:7b:51:3a:39:90:f4:83:e3:62:77:ea:50:36:cb:3f:17:
         91:a3:e6:1b:d0:7a:8a:3c:ec:b1:ba:df:c9:0a:e9:30:28:52:
         ab:34:3c:0f:0f:7a:bf:92:12:13:50:d4:6a:b8:3d:01:2f:5b:
         ae:05:7f:ba:c0:98:17:80:92:ca:ea:69:50:d3:a8:c7:c2:c0:
         a2:95:f2:15:44:9a:c8:17:8f:a5:82:55:e8:f5:15:13:c0:63:
         79:ad:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:38:46 2025 by rpki-client