Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa
File:                     3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa (raw, json)
Hash identifier:          ErJC7rrC72xAfCJYtaFbQZjemC++rLdpFmo07qy+FlQ=
Subject key identifier:   FC:71:AE:27:2F:FD:13:3D:DE:CC:2C:08:7B:30:DB:9F:16:33:DE:64
Certificate issuer:       /CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
Certificate serial:       5872F39C99840C02106C034C179DEC97DCA63461
Authority key identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa
Signing time:             Wed 12 Feb 2025 19:52:22 +0000
ROA not before:           Wed 12 Feb 2025 19:47:22 +0000
ROA not after:            Wed 11 Feb 2026 19:52:22 +0000
asID:                     271267
IP address blocks:        168.197.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl
                          rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:72:f3:9c:99:84:0c:02:10:6c:03:4c:17:9d:ec:97:dc:a6:34:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
        Validity
            Not Before: Feb 12 19:47:22 2025 GMT
            Not After : Feb 11 19:52:22 2026 GMT
        Subject: CN=FC71AE272FFD133DDECC2C087B30DB9F1633DE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:e0:ee:30:ca:51:f0:fd:2d:5f:17:49:95:
                    83:70:11:d6:a4:3a:46:9e:9c:40:cb:4d:d2:30:ae:
                    ed:e9:62:5f:4a:09:d8:de:44:dd:d9:3f:c7:04:5f:
                    60:0c:f7:90:58:fd:6f:07:4a:a8:ce:a7:41:53:c3:
                    c4:18:a4:b2:fd:1d:45:2f:9b:85:d6:20:18:0e:2f:
                    59:da:77:6a:7f:10:a0:28:b1:f7:7d:7f:0d:37:45:
                    56:12:e7:f4:b4:c3:40:6a:e4:e9:c0:b5:ec:4c:5c:
                    93:0d:7f:1e:53:5d:1d:98:08:75:f6:5d:d7:af:70:
                    92:8d:b0:8e:0b:73:64:25:df:23:79:1e:61:39:15:
                    aa:76:23:89:27:e8:bf:a3:d6:db:d5:bc:38:3b:c8:
                    a0:17:3a:5f:4d:ef:68:14:74:de:d6:e8:1e:c1:e8:
                    ea:c4:bb:a6:0b:2a:fa:cb:70:8a:c5:db:74:71:4c:
                    5b:f7:76:5c:ce:b7:cd:5c:76:d8:88:83:ef:1a:8e:
                    93:64:7d:75:2a:5e:dc:a2:82:21:0b:79:8e:11:d8:
                    31:d9:56:7c:25:2a:4c:d2:a1:6d:48:6a:ce:5f:f0:
                    39:e3:a3:e7:b4:97:60:36:7f:0e:49:35:96:82:89:
                    28:c0:e4:0a:c6:54:e8:c8:3e:a5:e7:32:ff:1b:1e:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:AE:27:2F:FD:13:3D:DE:CC:2C:08:7B:30:DB:9F:16:33:DE:64
            X509v3 Authority Key Identifier:
                keyid:8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:64:7e:b2:5a:40:d3:98:ad:2b:0d:ff:54:cf:f7:eb:36:
         10:47:58:01:eb:c3:fd:f1:90:83:56:17:ac:70:82:a1:2b:39:
         1d:38:5a:f1:28:29:77:56:38:d5:b1:55:d3:a0:a9:a2:1c:53:
         ac:7d:64:aa:9e:c4:2a:4f:6d:20:24:1c:8a:b7:1a:87:5c:16:
         7f:8e:6a:f6:19:4f:d7:21:c7:6c:12:56:57:eb:54:e8:f7:b0:
         21:c8:b3:0e:aa:a1:75:14:26:24:cc:bb:eb:5a:e4:3b:f8:bf:
         7d:e9:98:a4:eb:83:9d:92:20:47:73:b4:71:15:08:29:be:9f:
         84:ef:98:53:60:ec:96:73:b5:ea:4d:83:d9:5b:a2:b4:d1:95:
         a5:52:d9:4d:0e:e3:2b:8c:3c:b9:5d:98:d5:64:f3:36:0e:e0:
         6b:de:8a:03:47:d9:dc:56:8e:f6:70:b8:41:e1:d9:22:79:8b:
         da:55:f6:15:8b:cc:95:19:c9:41:42:29:6d:c9:57:90:ca:75:
         2f:b9:5f:e3:be:5b:3d:fc:0d:20:a5:9b:43:3e:14:43:78:dd:
         1c:1d:de:44:8a:8f:22:77:22:70:8a:24:7e:68:8e:41:a6:22:
         a5:15:dd:c5:9c:26:d8:d0:5c:2c:81:f4:14:b1:45:80:42:d2:
         f6:17:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:46 2025 by rpki-client