Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/3138372e39342e3233362e302f32322d3234203d3e20323731333132.roa
File:                     3138372e39342e3233362e302f32322d3234203d3e20323731333132.roa (raw, json)
Hash identifier:          8fPT3gEdOWz545wldR7+8fO6T6vXW62l7jBYv74ZWHo=
Subject key identifier:   57:A1:23:01:63:38:22:7F:18:DE:A1:DB:59:49:87:75:CD:15:C5:4D
Certificate issuer:       /CN=F928D3BD74CD4027272C7403A61CDDB0E349B34C
Certificate serial:       6385273074D91E10CE9EE31262422EE20E6F4A18
Authority key identifier: F9:28:D3:BD:74:CD:40:27:27:2C:74:03:A6:1C:DD:B0:E3:49:B3:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928D3BD74CD4027272C7403A61CDDB0E349B34C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/3138372e39342e3233362e302f32322d3234203d3e20323731333132.roa
Signing time:             Thu 12 Jun 2025 19:19:04 +0000
ROA not before:           Thu 12 Jun 2025 19:14:04 +0000
ROA not after:            Thu 11 Jun 2026 19:19:04 +0000
asID:                     271312
IP address blocks:        187.94.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/F928D3BD74CD4027272C7403A61CDDB0E349B34C.crl
                          rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/F928D3BD74CD4027272C7403A61CDDB0E349B34C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928D3BD74CD4027272C7403A61CDDB0E349B34C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 13:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:27:30:74:d9:1e:10:ce:9e:e3:12:62:42:2e:e2:0e:6f:4a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F928D3BD74CD4027272C7403A61CDDB0E349B34C
        Validity
            Not Before: Jun 12 19:14:04 2025 GMT
            Not After : Jun 11 19:19:04 2026 GMT
        Subject: CN=57A123016338227F18DEA1DB59498775CD15C54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:00:b8:7e:db:68:c7:01:d0:dd:26:5d:95:1f:
                    ff:4e:4d:0f:26:71:48:1c:64:1f:5f:bd:0c:f8:b8:
                    e1:8d:20:d3:9f:88:8c:09:bd:bf:b0:fd:d6:55:17:
                    c3:6c:8b:8a:64:0b:51:0f:79:67:5d:3f:ed:b1:b3:
                    1c:60:65:60:d8:44:93:10:6d:3b:ff:6c:35:96:82:
                    4c:09:00:a7:1b:f8:fc:09:15:aa:d4:92:8f:4f:57:
                    13:a8:98:7b:25:03:1b:ac:9a:69:d2:1d:37:61:ab:
                    a2:78:b0:6f:02:5b:a3:f1:71:45:ce:67:e0:9e:20:
                    5f:a7:c0:f4:8b:61:c0:fd:6e:d0:0f:25:f1:db:51:
                    ae:f3:d5:c1:64:70:94:b5:12:a9:8f:c4:76:92:b0:
                    d2:c6:a4:41:e9:fe:d8:d5:d5:0a:fb:c2:b3:79:d2:
                    66:4a:79:b9:4b:c1:e4:92:6e:50:ba:3b:21:df:d9:
                    69:ac:1b:7f:0c:a3:eb:c2:c5:57:15:d9:e6:6e:c1:
                    45:eb:ea:9e:6f:48:88:7c:a8:6e:cf:e8:8e:f4:b1:
                    f4:70:26:2d:58:f3:04:cc:e5:13:3f:5a:42:b9:42:
                    8e:93:63:95:b9:9d:30:e2:d0:6f:5e:f7:52:0e:7b:
                    44:28:b6:5c:01:f0:c7:6d:e2:18:89:38:be:3b:00:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:23:01:63:38:22:7F:18:DE:A1:DB:59:49:87:75:CD:15:C5:4D
            X509v3 Authority Key Identifier:
                keyid:F9:28:D3:BD:74:CD:40:27:27:2C:74:03:A6:1C:DD:B0:E3:49:B3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/F928D3BD74CD4027272C7403A61CDDB0E349B34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928D3BD74CD4027272C7403A61CDDB0E349B34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/3138372e39342e3233362e302f32322d3234203d3e20323731333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:91:43:5e:74:fa:63:8b:e3:2e:aa:c6:5c:1e:91:b4:15:e9:
         4a:2d:85:dd:43:75:08:26:49:74:30:17:26:ce:d8:9f:7d:85:
         f4:0c:2b:59:d6:da:8d:17:39:47:5c:4e:86:6f:9b:dd:6f:27:
         bd:f9:8c:6c:e1:b6:f7:6e:46:00:8b:6e:c6:d5:2a:71:37:10:
         e6:3c:48:13:2c:0b:cd:dc:34:a5:9f:1f:e7:d1:5b:c8:1d:29:
         a1:f2:78:c0:f7:53:88:9d:f1:ca:b1:c5:3c:cd:fc:03:b1:a4:
         78:f4:c9:42:58:a7:15:1f:f7:81:cb:6c:35:9c:79:72:37:6d:
         14:ef:e0:41:d8:fd:d7:1f:69:86:d7:d7:92:8f:99:e9:4a:43:
         e8:6e:5e:6d:25:b4:d0:fb:36:22:2e:e4:2c:12:e7:cc:0f:f6:
         b3:7d:2c:25:ba:bc:46:40:9a:60:7e:8e:de:e3:27:d2:f4:ad:
         f5:a6:4e:ae:64:68:7c:d1:f1:c3:17:5c:b5:a7:c7:35:31:db:
         7b:6a:6a:ed:c1:1f:c1:73:02:f8:28:12:49:20:29:83:e4:84:
         25:d7:a2:c7:95:f5:c5:e8:30:a7:19:03:b1:41:df:97:82:36:
         e2:c3:f5:0b:b9:cf:f0:10:ea:61:7e:3b:8a:0f:84:67:a6:c9:
         4e:41:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:22:04 2025 by rpki-client