Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa
File:                     3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (raw, json)
Hash identifier:          lPi5xr0QE5vLiZ/FdvAP9K8viXX1Dd0AlCfXahGzr7E=
Subject key identifier:   6D:F4:99:94:AF:11:47:14:3C:F7:45:93:30:D3:26:69:25:A6:5C:96
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       42D968B71BB8764383148B38CB64CB55B52D8630
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa
Signing time:             Wed 05 Mar 2025 20:03:40 +0000
ROA not before:           Wed 05 Mar 2025 19:58:40 +0000
ROA not after:            Wed 04 Mar 2026 20:03:40 +0000
asID:                     271562
IP address blocks:        181.174.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d9:68:b7:1b:b8:76:43:83:14:8b:38:cb:64:cb:55:b5:2d:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Mar  5 19:58:40 2025 GMT
            Not After : Mar  4 20:03:40 2026 GMT
        Subject: CN=6DF49994AF1147143CF7459330D3266925A65C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3f:96:e7:90:e1:75:9f:b5:9e:c5:b2:14:4a:
                    30:20:f1:1c:6a:45:43:c3:c5:1f:21:9a:4a:00:c4:
                    40:50:1b:c5:0d:1f:00:39:e2:3b:df:fa:39:4d:03:
                    44:fd:d2:61:6d:2a:c4:fb:20:25:39:e8:28:4c:97:
                    89:e3:16:b1:97:16:16:2a:66:78:a2:0a:a2:d7:a7:
                    1f:d1:f3:e3:ab:28:53:d4:b3:6f:5b:6e:ac:97:fa:
                    b9:38:ae:09:01:5c:a1:55:41:32:e5:ef:9f:ba:ff:
                    ec:a7:da:15:62:c6:e9:da:1c:f3:fb:6f:63:58:a2:
                    bc:f0:25:d0:70:e7:8d:e6:24:a9:4f:2d:eb:20:88:
                    58:a4:4f:37:61:bc:a1:75:a1:00:ab:d4:e7:ea:26:
                    c4:7d:8c:bc:ce:0a:e3:fe:4f:3b:b8:49:81:f7:4c:
                    55:69:d8:f5:2c:8d:67:5c:8a:f6:e7:3d:e9:b3:62:
                    3b:68:78:d1:e5:fa:69:51:17:f2:09:f8:81:ff:7c:
                    8a:db:ed:a2:bb:2d:7f:4f:77:ef:91:ad:a6:f3:0c:
                    12:b1:1d:fb:64:df:9c:19:83:cb:d8:2a:0e:79:2e:
                    57:e5:8a:de:0c:1a:52:14:5c:3a:5f:1e:c6:f3:4e:
                    a8:2a:66:f2:8c:85:7f:37:3b:fa:33:75:80:29:a3:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F4:99:94:AF:11:47:14:3C:F7:45:93:30:D3:26:69:25:A6:5C:96
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:a0:c6:d9:51:7b:cb:0c:64:a5:ac:b3:e1:34:65:e6:ed:
         8c:1d:24:05:b3:4a:19:67:77:1b:03:16:56:ce:f1:16:e8:05:
         c9:9a:9b:ac:db:d5:25:c0:ef:f7:4a:3e:1e:1a:27:9f:45:f7:
         75:57:90:fe:cb:f8:d7:4b:2e:27:11:b1:45:e9:07:43:5f:a1:
         58:04:d2:2e:34:f3:bc:eb:93:e4:94:82:ef:eb:60:6f:a7:9d:
         a9:73:17:2c:5a:a9:e0:d6:a0:a3:40:2f:cd:2c:7f:d4:10:bd:
         6a:0c:95:ee:b3:bb:ad:74:f3:1d:a8:be:9f:e4:dd:91:26:43:
         8d:e7:26:bc:d0:d8:24:27:bb:e3:8a:3d:54:1f:46:63:62:b0:
         c4:bd:e5:12:01:ad:99:4a:d1:0b:f4:e4:54:7a:79:7e:ae:94:
         8e:ec:f1:ae:dc:8b:df:aa:cd:f2:c6:6b:1f:88:eb:f9:11:12:
         3f:97:86:80:2b:34:db:4b:f6:27:30:40:34:73:c5:14:52:a4:
         26:c9:4c:0f:be:62:31:85:f1:d0:db:b7:0f:0b:df:99:b3:e7:
         a4:7b:de:b3:04:ae:65:1a:4f:9f:2e:6d:ff:fc:e3:e7:ee:c3:
         8c:c0:80:f3:55:e2:fb:ac:8e:69:67:f2:0d:65:c8:5b:6f:51:
         e1:1a:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:46 2025 by rpki-client