Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135362e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3135362e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          Sah+hlS+wQ2+D1MxZWxwMSySqNyNNzdYpeaDxGKgMUg=
Subject key identifier:   FB:41:95:F2:3D:D0:5B:12:3D:41:82:17:27:B4:B5:6D:81:A1:FD:C7
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       26C080C487B6774EB15C7163B362B82ED8F6E60C
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135362e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:07:05 +0000
ROA not before:           Fri 07 Mar 2025 19:02:05 +0000
ROA not after:            Fri 06 Mar 2026 19:07:05 +0000
asID:                     22381
IP address blocks:        201.87.156.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c0:80:c4:87:b6:77:4e:b1:5c:71:63:b3:62:b8:2e:d8:f6:e6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:02:05 2025 GMT
            Not After : Mar  6 19:07:05 2026 GMT
        Subject: CN=FB4195F23DD05B123D41821727B4B56D81A1FDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:0a:a5:70:84:a3:01:88:d0:6d:12:a6:e3:
                    a1:0d:28:ad:d2:1d:29:7f:1a:82:a0:66:d7:6e:c4:
                    bc:28:59:ed:4c:ce:a8:bd:b0:4b:32:1d:60:a0:e7:
                    0d:47:ca:2d:61:a8:38:d9:5e:2c:47:d6:c4:86:b5:
                    19:ff:d7:cf:4f:c3:bd:a9:0b:c5:e9:87:ab:88:a0:
                    b8:91:00:21:7e:43:fb:49:5a:c9:c1:f1:cc:7a:05:
                    9d:57:3e:8f:b2:79:6d:d1:37:c7:e3:bb:3b:1a:2e:
                    a8:f5:08:42:ee:f3:df:7a:55:80:7c:2c:10:6a:e1:
                    6a:79:af:6f:1c:a3:fd:62:12:1a:91:ad:23:91:e5:
                    d4:97:5d:1f:5e:61:de:f3:78:e9:aa:56:a9:fc:87:
                    fa:e5:03:88:86:81:87:6f:7e:eb:75:8d:93:f2:79:
                    85:72:ba:49:b7:d6:a9:c5:16:5c:c2:f8:0c:f8:35:
                    c9:4f:1c:cd:6a:06:21:e4:15:a5:70:fe:6f:9a:ea:
                    05:8f:9a:02:1d:0c:79:ac:cf:c4:2c:61:90:37:68:
                    5e:d3:0b:6a:f3:61:29:a9:97:db:d1:3a:7e:99:30:
                    4c:f1:b6:31:30:6b:4a:57:e0:0d:dc:8e:1b:a7:d8:
                    ff:69:7b:75:5e:86:9f:20:ed:aa:67:b0:59:92:d9:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:41:95:F2:3D:D0:5B:12:3D:41:82:17:27:B4:B5:6D:81:A1:FD:C7
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3135362e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:de:6b:cb:d2:44:2d:5e:23:3c:a9:10:2f:9e:1f:fc:0c:a7:
         22:3f:3a:98:c7:5d:90:68:f8:4e:ba:d5:e8:61:56:15:ef:e9:
         e0:f1:b2:02:ed:2a:7e:3a:ef:ed:cd:c2:78:57:88:f6:20:d2:
         2f:54:f1:a6:98:d5:6e:a5:d1:33:b9:c0:f1:30:7c:18:01:fb:
         65:97:9c:44:8c:2e:47:ec:42:18:0c:c4:80:c5:e1:f5:a9:f5:
         85:bf:0e:e4:9b:96:f6:db:1b:b5:63:2b:27:3b:10:ca:6b:5c:
         0b:3e:9c:6a:da:c9:17:3f:44:1b:e7:7f:b9:36:56:26:fe:51:
         88:33:18:9e:f3:45:30:a9:66:2b:df:b4:5c:cd:e2:e2:a6:ea:
         4b:a0:af:3b:47:0b:90:ef:ae:f9:09:ac:08:7e:3d:3e:76:24:
         c8:4c:d7:36:c4:ba:c7:d0:8d:14:b8:a3:b3:10:2a:6f:39:c2:
         da:19:2e:50:77:fe:df:8d:e1:9e:16:d6:3b:9a:e7:c4:3b:13:
         1b:02:a9:37:ca:55:69:88:ab:f7:05:ce:3a:84:55:b2:4d:9d:
         23:69:cd:d6:9b:66:0a:47:42:32:8c:4b:64:75:77:fc:51:76:
         d9:18:4e:25:f6:65:fc:ce:8d:4f:68:c0:32:24:47:5a:cb:df:
         23:f3:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:39:51 2025 by rpki-client