Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e31332e302f32342d3332203d3e203232333831.roa
File:                     3138372e3132302e31332e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          vBgRwgy0xjVn03IzOsLQ6VTDssyIf72wloIKSE+h5qs=
Subject key identifier:   91:16:0F:4B:6C:DA:84:F4:B6:62:37:E6:B2:B9:EC:41:49:0D:AE:35
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       4128D0DCE8183C9E5874C2004DB7E5B4FC92AB43
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e31332e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:07:51 +0000
ROA not before:           Fri 07 Mar 2025 19:02:51 +0000
ROA not after:            Fri 06 Mar 2026 19:07:51 +0000
asID:                     22381
IP address blocks:        187.120.13.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:28:d0:dc:e8:18:3c:9e:58:74:c2:00:4d:b7:e5:b4:fc:92:ab:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:02:51 2025 GMT
            Not After : Mar  6 19:07:51 2026 GMT
        Subject: CN=91160F4B6CDA84F4B66237E6B2B9EC41490DAE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:94:ab:76:46:0b:5f:86:c5:a0:16:fb:85:
                    3b:8e:1a:0d:83:b3:b3:1b:c7:5c:61:a9:c6:eb:75:
                    26:8f:30:41:c4:b3:0b:8f:98:07:0f:30:a8:81:14:
                    84:3a:21:9a:db:30:de:22:cb:ae:8f:a0:64:3b:de:
                    57:61:bc:66:1d:08:6e:f8:17:d7:7e:98:51:86:63:
                    37:7c:ad:20:f6:94:e8:4c:bd:3b:18:c4:99:f6:a4:
                    e9:12:f1:0d:f9:93:b2:97:51:e8:31:fd:40:fe:69:
                    ef:3f:73:00:d1:75:87:47:60:be:65:2f:67:1a:5a:
                    12:11:57:c0:f3:24:b1:46:ef:68:c8:f9:98:88:78:
                    44:8a:f8:04:95:2e:cb:4f:c9:04:d8:fe:7d:ec:02:
                    c3:7d:59:dc:11:aa:a1:1e:4c:7c:87:30:43:1c:cd:
                    09:35:b7:3c:92:92:08:da:e0:9a:33:ef:9d:bf:1a:
                    80:28:02:4c:ba:58:b5:db:63:58:e2:9d:57:b6:d3:
                    1c:53:46:35:8f:9e:67:0f:cb:cd:37:e8:af:af:02:
                    9a:b9:07:a3:3a:68:41:51:f3:e5:84:ac:15:57:0c:
                    e5:fc:52:d3:8b:72:1e:1c:d6:30:2c:82:d8:5c:ed:
                    19:1b:94:14:4e:5f:67:69:0d:2b:c6:5d:0b:7c:74:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:16:0F:4B:6C:DA:84:F4:B6:62:37:E6:B2:B9:EC:41:49:0D:AE:35
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e31332e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:52:8d:5c:d7:08:66:ee:4c:f2:68:f7:80:46:0c:f3:7e:ec:
         da:e6:6c:32:79:3e:fe:87:b3:7f:42:5f:a7:8c:88:1b:a9:3e:
         64:06:90:9b:4e:27:5b:65:51:7a:d1:30:29:fb:c1:86:96:30:
         38:ac:0a:97:b2:d3:99:84:1d:e0:9d:b9:bd:3d:f7:09:b9:8e:
         1d:b8:44:07:fc:49:6d:31:c4:9c:e9:b4:71:ef:c0:00:a4:ab:
         21:e8:aa:00:05:1a:50:26:e7:9e:fa:50:46:6f:09:93:82:73:
         43:b4:d6:d4:42:b3:cc:b4:72:5c:95:86:e6:21:26:b9:98:21:
         45:ba:18:96:6b:84:8f:88:8f:1c:f0:4c:f3:cc:99:62:01:0e:
         2f:e6:26:3a:af:4b:20:13:4b:11:b0:1e:24:b2:7d:f6:b8:11:
         e5:a1:39:32:6d:6c:ee:79:3d:f6:ff:bc:6a:7f:3c:2c:e7:7d:
         de:c1:63:e2:83:49:c2:a6:ef:21:63:af:d7:ad:87:ed:dd:2b:
         f1:40:3a:fb:6b:4f:95:1d:89:40:b1:10:f5:2a:0c:f4:9f:7a:
         ad:2e:63:0b:e3:a6:c8:37:18:4f:63:1b:6b:e5:e9:06:c8:d3:
         95:f4:ac:30:c7:db:52:19:fe:30:85:48:e4:bf:f0:5c:b1:54:
         84:08:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:35:52 2025 by rpki-client