Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
File:                     3138372e38362e36342e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          wDLtVXKv0VwslhNPWWZSLs+4Oe5MjsxyV0oFc7XSJAs=
Subject key identifier:   80:7B:8A:FA:11:58:79:D0:20:6B:2D:33:5B:81:63:FD:23:B5:C1:8B
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       49E36FDD07EC7F9C0031D499B8A48D9A0F0E5EB1
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 12:33:12 +0000
ROA not before:           Wed 12 Mar 2025 12:28:12 +0000
ROA not after:            Wed 11 Mar 2026 12:33:12 +0000
asID:                     28201
IP address blocks:        187.86.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:6f:dd:07:ec:7f:9c:00:31:d4:99:b8:a4:8d:9a:0f:0e:5e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 12:28:12 2025 GMT
            Not After : Mar 11 12:33:12 2026 GMT
        Subject: CN=807B8AFA115879D0206B2D335B8163FD23B5C18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:db:b6:ec:1b:83:a0:01:ad:99:87:32:0a:
                    e4:4c:58:55:cd:8b:13:1e:e0:3c:05:d3:e7:bb:66:
                    99:11:4d:34:c6:0c:45:74:bc:7f:94:79:30:3b:fe:
                    8b:63:4e:6a:ac:ac:40:91:8c:61:77:fd:f6:8e:42:
                    ac:6e:89:6c:a4:1b:c8:c6:09:d0:2f:33:f6:c8:83:
                    6d:4c:da:66:fc:f9:16:bf:f5:8f:27:2a:c7:0f:6c:
                    ac:2e:66:6e:b0:22:30:67:75:4b:0c:a3:ac:7e:29:
                    60:8c:ad:1d:76:8d:f8:12:e6:5b:f2:a8:44:07:61:
                    6d:73:33:14:89:4a:1c:86:e9:21:c0:e2:bf:10:4c:
                    6a:79:38:c8:77:39:3a:af:16:82:de:3b:df:d8:56:
                    3e:6f:2d:a7:a2:67:f4:3f:6e:15:7d:5e:3e:f5:b8:
                    45:ca:2f:54:c0:50:a2:9d:c2:92:d5:4f:de:4f:82:
                    93:2e:e0:b6:c2:8f:54:52:f2:a6:f0:7e:39:ea:87:
                    bd:b5:54:d4:7e:58:d6:4f:42:67:3d:c8:b6:a2:00:
                    71:d4:a1:dd:83:0d:bd:ba:b8:27:cb:f5:1d:e9:f4:
                    dc:c3:e6:53:b9:e6:65:08:65:af:0e:c5:69:31:7a:
                    92:74:b2:bf:8d:a9:5f:4f:20:5f:a6:d0:f3:37:0c:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:8A:FA:11:58:79:D0:20:6B:2D:33:5B:81:63:FD:23:B5:C1:8B
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:88:63:cb:38:ff:23:9c:02:9e:9a:d4:01:bf:ee:54:07:
         94:24:13:91:b3:f6:29:ac:f8:0a:c7:9e:a0:59:9b:8c:ef:18:
         5a:85:a4:91:5d:ce:46:d9:41:66:1d:4e:cd:3f:96:d7:47:2e:
         98:8c:b1:38:4b:15:fa:cd:3a:e1:2b:da:03:2f:4b:d6:aa:51:
         69:26:fb:db:37:69:af:83:e9:24:7d:25:14:0d:c0:90:eb:e9:
         0c:91:09:d2:20:67:19:b1:f5:57:d3:f3:8d:f0:59:3b:2d:39:
         70:c7:58:c7:62:94:73:80:64:2d:c8:ad:b1:4e:06:eb:e2:7c:
         b7:56:53:a1:fd:9d:8f:ec:e3:c3:01:f1:5d:0a:79:0d:e2:bb:
         db:8c:25:ac:fc:45:fd:02:f4:fc:46:6d:19:97:47:bd:f6:7f:
         22:39:01:b2:bd:dd:43:ee:e1:4b:0b:bd:f1:70:55:a7:42:c8:
         af:97:96:63:0e:24:e1:de:8d:b1:ee:4c:78:ca:37:0b:97:50:
         d8:57:eb:8f:f0:b0:86:11:5d:f4:f6:ad:99:20:5d:6b:5e:40:
         d8:2b:b9:e2:53:ce:2f:3f:98:c9:e9:e7:5b:08:9a:80:38:f2:
         17:28:b7:33:5a:1a:5b:5b:65:98:64:0f:8b:ed:79:30:8b:3e:
         fe:00:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:20 2025 by rpki-client