Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138372e3130382e31362e302f32302d3332203d3e203533313639.roa
File:                     3138372e3130382e31362e302f32302d3332203d3e203533313639.roa (raw, json)
Hash identifier:          ENXte90QoWSFc8MhzpPV6blprdOkcUslAdW49fkh70U=
Subject key identifier:   F5:C8:77:D0:49:07:11:98:B2:0D:99:D8:8C:54:2E:FA:47:E0:35:0E
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       322F9F068F91058D1ECB3B1343E5FE524BCA8514
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138372e3130382e31362e302f32302d3332203d3e203533313639.roa
Signing time:             Wed 05 Mar 2025 21:14:14 +0000
ROA not before:           Wed 05 Mar 2025 21:09:14 +0000
ROA not after:            Wed 04 Mar 2026 21:14:14 +0000
asID:                     53169
IP address blocks:        187.108.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2f:9f:06:8f:91:05:8d:1e:cb:3b:13:43:e5:fe:52:4b:ca:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Mar  5 21:09:14 2025 GMT
            Not After : Mar  4 21:14:14 2026 GMT
        Subject: CN=F5C877D049071198B20D99D88C542EFA47E0350E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d9:7a:60:c6:0a:b5:d3:e6:51:42:b8:e0:fd:
                    2a:36:54:1c:aa:52:d2:ee:26:f1:17:64:f8:9f:0d:
                    74:36:73:a5:a9:fd:e4:cc:09:e6:47:c1:c6:15:d8:
                    97:54:ba:b1:fc:57:b0:89:92:66:6c:e9:8b:6b:de:
                    06:f0:b1:74:b9:ac:1e:4d:7c:b2:8b:93:ff:e8:a9:
                    27:d1:02:3c:b4:c3:30:0f:84:eb:ea:80:32:39:cc:
                    5f:47:fe:d7:20:96:2b:06:24:7e:f4:1e:ec:a1:7a:
                    c4:22:78:c2:52:b1:f9:30:cd:7c:a9:c3:42:41:1d:
                    48:31:f4:aa:54:80:9c:c1:fc:e3:1c:86:78:b4:65:
                    f6:4f:8b:b5:b0:c2:87:4c:10:15:62:24:53:aa:4a:
                    f3:a4:6f:99:c8:f9:c6:d1:c5:b8:aa:f5:92:0b:54:
                    45:32:47:9a:44:09:95:7a:70:71:30:da:67:6a:71:
                    84:99:5e:ac:60:78:87:8d:2b:09:f0:3b:69:b3:8b:
                    22:ef:5b:1c:af:11:cd:0b:5f:9c:df:8f:69:6d:16:
                    de:b4:d5:32:dd:96:d2:18:57:7c:ab:03:97:2f:6f:
                    9a:95:67:de:27:ee:9a:d2:3e:42:33:5f:34:65:93:
                    95:7c:b8:42:0e:6f:2c:4f:e9:94:4c:a4:ab:bc:2c:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:77:D0:49:07:11:98:B2:0D:99:D8:8C:54:2E:FA:47:E0:35:0E
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138372e3130382e31362e302f32302d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:a2:f8:88:d5:4e:8a:b5:86:be:50:da:b7:10:e1:01:2b:
         9b:91:f1:c4:d4:5c:be:83:b1:a0:28:3c:3e:84:6b:31:41:f2:
         e8:05:c6:98:c4:1b:1f:69:84:a7:f3:a7:93:60:c5:73:31:6a:
         cc:1b:98:47:1b:91:6e:4f:53:0a:9d:38:d3:71:cc:5a:51:69:
         a2:08:d4:bc:d5:6d:60:c7:a3:11:ef:bf:85:b3:ca:bf:64:a1:
         3d:f5:9e:8f:9c:2f:d7:4c:9f:cf:bf:90:31:ad:c9:23:fa:0d:
         e3:6f:02:67:71:3e:f4:f8:bf:08:08:ed:cd:3f:20:58:68:54:
         3b:b2:21:a9:af:fb:5b:37:94:d6:4f:de:49:12:b3:00:2f:4d:
         88:a3:1e:21:29:8c:ec:5e:d0:be:c4:63:46:21:8a:c8:77:ea:
         cf:2c:1d:d1:25:9d:b8:ce:d8:10:92:92:26:5a:5c:d1:69:48:
         70:71:e7:c8:fe:d1:e2:d0:06:86:d3:ee:0e:5b:26:56:fd:b1:
         9d:f9:b7:10:ab:46:b9:b1:ef:e0:1a:2d:b7:4e:71:5b:7d:8e:
         f2:65:d4:6e:48:71:12:00:13:55:32:48:eb:e6:6b:0d:0e:35:
         5c:5b:6c:45:ad:58:7e:e5:a5:87:c0:06:aa:f3:29:10:be:bb:
         3e:26:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:13:27 2025 by rpki-client