Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137302e302f32332d3233203d3e20323633353038.roa
File:                     3139312e3234332e3137302e302f32332d3233203d3e20323633353038.roa (raw, json)
Hash identifier:          /Z7gCO0TtE+zd5S/jnyZOycGx6dui5YjFRQEXjFhoko=
Subject key identifier:   D8:58:53:CE:38:0D:FA:F4:88:F8:3A:C8:67:B9:8F:4A:1E:86:D0:BC
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       7EC6E377FFF3900D9F80944265216F72C8109239
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137302e302f32332d3233203d3e20323633353038.roa
Signing time:             Thu 27 Feb 2025 15:57:16 +0000
ROA not before:           Thu 27 Feb 2025 15:52:16 +0000
ROA not after:            Thu 26 Feb 2026 15:57:16 +0000
asID:                     263508
IP address blocks:        191.243.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c6:e3:77:ff:f3:90:0d:9f:80:94:42:65:21:6f:72:c8:10:92:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Feb 27 15:52:16 2025 GMT
            Not After : Feb 26 15:57:16 2026 GMT
        Subject: CN=D85853CE380DFAF488F83AC867B98F4A1E86D0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:f8:1c:ef:05:ca:07:71:41:c4:03:38:33:
                    3b:b6:2f:90:33:69:26:95:61:9b:a8:cd:bf:a3:71:
                    d3:d3:be:f0:b4:6c:7b:2d:b9:aa:34:89:0c:a8:57:
                    cf:42:33:01:2a:b0:34:b3:f7:c4:c6:d8:2d:e0:c8:
                    93:3f:9c:1d:c8:08:48:27:01:d6:79:45:b9:1a:8b:
                    e5:44:b9:8c:8e:6b:ae:f0:4f:1e:9b:9f:7a:a9:c4:
                    fa:20:93:fc:0d:4d:2c:b6:6d:39:b0:70:8e:ae:0f:
                    1c:c1:2c:2a:0b:23:78:ab:8c:ba:0d:b2:30:83:6d:
                    86:70:f3:2e:43:4e:f5:e0:63:8d:14:ed:d8:9c:3d:
                    37:4c:62:77:ea:23:79:0d:52:15:b7:37:87:63:df:
                    bb:3a:ae:7e:45:fa:1e:46:67:d1:74:cc:61:9b:5b:
                    a7:ee:59:9c:8d:92:f7:32:46:d3:b0:b7:50:4a:78:
                    85:13:60:0b:d2:69:d7:9f:41:11:e4:9e:af:80:1d:
                    c8:08:0f:57:68:ce:c9:62:1b:80:0a:02:88:46:bc:
                    63:5b:b5:ab:f0:1e:c6:01:c5:c0:9e:c2:fb:38:32:
                    8b:1d:fd:4a:2f:0e:69:ef:4f:2e:c9:ac:96:03:ef:
                    09:51:aa:a9:e5:55:c3:bb:b8:73:81:75:1e:a6:08:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:53:CE:38:0D:FA:F4:88:F8:3A:C8:67:B9:8F:4A:1E:86:D0:BC
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137302e302f32332d3233203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:59:ec:bb:fa:78:ed:8b:1e:86:00:57:7c:49:da:0b:56:c4:
         ec:cb:6c:6f:25:23:52:90:01:52:a5:36:1c:12:fb:fc:6e:91:
         50:82:fd:02:cb:54:4d:4d:5b:6d:b7:74:81:be:68:32:3d:1d:
         92:30:36:30:ac:16:c0:bf:91:80:cc:a6:bf:15:16:8b:18:c8:
         ea:7a:02:6d:b6:db:d7:58:d9:61:c1:b4:51:65:12:5c:d1:64:
         de:22:b8:e9:f8:98:ae:2f:01:c7:1a:1e:9a:88:ca:21:59:1d:
         95:24:77:44:3b:e5:b1:c7:28:fa:6e:69:03:2e:75:50:1f:d3:
         f2:5c:20:8c:f3:8e:2f:1f:d8:53:f9:48:98:70:34:4d:be:b1:
         32:b4:d4:6f:f8:53:01:19:fc:8e:9e:a1:1f:fe:41:8c:17:4f:
         cd:24:68:3e:95:c9:55:24:db:3b:5b:d2:4d:fd:73:ea:0c:b8:
         2b:75:c9:2e:52:f8:0c:4d:2f:5e:32:2d:46:05:45:6b:10:b6:
         b1:71:a8:d0:e5:a5:72:dd:fb:61:94:d8:78:7c:01:73:2b:af:
         3e:23:36:9c:3a:99:38:a7:e4:05:ca:d3:50:39:20:a9:da:bf:
         8c:76:23:4b:14:0a:a5:52:9f:4c:34:44:12:c0:13:f5:8e:ba:
         54:e4:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:12:31 2025 by rpki-client