Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3234203d3e203232303835.roa
File:                     3138372e36382e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          BfkDCImjdqncl2QFrQn7IaOtExxeI04Bo367iNixbBQ=
Subject key identifier:   73:87:11:4B:32:E8:7D:46:01:11:E1:5D:67:CF:C1:72:5F:4E:AD:16
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       19EACD3FF427601D73F4836FF876AA1265E2815B
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 17 Jun 2025 15:00:01 +0000
ROA not before:           Tue 17 Jun 2025 14:55:01 +0000
ROA not after:            Tue 16 Jun 2026 15:00:01 +0000
asID:                     22085
IP address blocks:        187.68.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:cd:3f:f4:27:60:1d:73:f4:83:6f:f8:76:aa:12:65:e2:81:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jun 17 14:55:01 2025 GMT
            Not After : Jun 16 15:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:01:90:ce:19:57:5e:20:46:07:45:09:b2:31:
                    6f:bb:97:48:66:91:f5:3a:8b:91:fc:bf:28:0b:77:
                    47:a0:29:9d:d6:6a:20:27:60:81:d1:20:10:b6:db:
                    80:82:d5:00:d1:2c:b6:90:4a:60:f9:e5:7c:85:53:
                    30:de:ec:94:80:83:c0:29:7a:79:b6:e3:5e:d3:b5:
                    5e:52:2e:86:f8:80:bb:01:ed:ff:be:fd:04:8e:86:
                    31:1b:c2:d5:98:c1:3d:b1:05:d7:78:7b:fb:69:9f:
                    04:86:ba:65:c9:45:41:77:5d:f6:2a:a8:56:f5:a9:
                    b8:30:19:9b:91:8a:35:05:47:72:39:bf:87:6e:76:
                    6b:f9:9f:59:43:0d:39:24:5b:fb:cf:ce:a2:61:84:
                    15:7b:3e:e8:1a:8f:bf:1f:8e:ae:83:e6:de:15:35:
                    a2:4a:5d:39:53:51:8f:03:e3:2c:64:fa:f3:48:e0:
                    7a:75:4b:45:f5:76:bb:23:18:e1:f5:84:7f:7b:5a:
                    16:12:2d:21:29:b3:15:15:f4:ee:29:43:16:80:0e:
                    45:48:80:a5:38:36:8e:02:4c:8d:7b:0d:90:d2:d0:
                    f6:a8:79:80:ce:ed:e3:a3:c8:5f:fa:94:b1:33:71:
                    4c:6d:2f:10:da:e3:dd:2f:5b:a1:1e:ba:a7:24:0e:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:87:11:4B:32:E8:7D:46:01:11:E1:5D:67:CF:C1:72:5F:4E:AD:16
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:32:e3:c3:41:61:f5:a1:f4:d6:26:94:cc:8a:6f:1f:ad:
         a0:1b:df:dc:89:5c:39:31:9b:31:1c:71:bf:8b:4c:18:ce:5f:
         9e:16:c1:77:05:4b:18:d3:39:10:d6:ef:1d:09:a4:59:44:46:
         2d:1e:ca:e9:37:21:86:31:f7:49:57:ff:05:1a:1f:fe:5b:c3:
         2e:fc:53:1b:f0:e2:09:48:e6:41:2e:0f:e7:e0:66:81:38:a8:
         4d:60:5a:89:1f:d4:b8:c8:7f:fc:ac:27:b9:98:08:c9:f4:59:
         f8:f3:bd:08:63:da:c9:8b:1b:93:70:8a:63:39:83:f5:b4:55:
         5e:c6:0b:cd:42:50:c0:be:f2:6b:14:9d:88:ad:e5:f5:1d:7e:
         d9:5b:ce:e0:09:c9:a9:b1:dd:d5:03:0d:95:6f:66:38:6b:ca:
         63:31:4b:c3:52:e9:6b:e1:5f:3d:6c:26:56:3a:9d:2b:b3:65:
         7d:1b:21:86:37:cf:31:e4:fe:50:7f:44:fe:7a:6b:63:9d:fc:
         47:a8:db:05:e5:34:f6:d4:f9:f7:b1:24:52:bf:af:cb:ac:29:
         7c:5b:da:ce:5f:bc:4f:d5:84:c0:e6:d6:dc:99:92:0c:8a:a0:
         8f:b9:e4:9c:a2:b7:de:a9:4d:ac:3f:af:4b:f5:de:c0:2c:d2:
         94:03:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:23:08 2025 by rpki-client