Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          6EOaTYvyHH7Okg4RC3CGXFik7fv0XXUBl9wCzU9+x+Y=
Subject key identifier:   8D:16:5E:23:E4:30:28:15:FD:00:C7:CF:5E:80:09:74:AB:E6:03:F8
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       21FE96ABDE17589C8BDE5A56F2EEA2D9FF14B6D3
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:06 +0000
ROA not before:           Thu 29 May 2025 14:24:06 +0000
ROA not after:            Thu 28 May 2026 14:29:06 +0000
asID:                     263518
IP address blocks:        168.197.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 18:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fe:96:ab:de:17:58:9c:8b:de:5a:56:f2:ee:a2:d9:ff:14:b6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:06 2025 GMT
            Not After : May 28 14:29:06 2026 GMT
        Subject: CN=8D165E23E4302815FD00C7CF5E800974ABE603F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:15:3c:42:10:4f:4f:89:58:67:14:05:6c:
                    a0:f3:6e:be:cd:86:0b:12:74:e9:aa:2c:65:dc:f9:
                    3f:4f:3d:a5:de:f0:4b:e9:11:d7:49:0c:cf:87:80:
                    01:3b:89:dd:16:f1:c5:15:36:57:3d:6a:5f:07:a1:
                    70:83:a3:4c:70:4a:de:60:75:8f:fc:0e:2b:7a:e2:
                    27:ea:04:62:c5:5b:4d:45:0b:32:ad:9e:b0:b0:5f:
                    ff:56:aa:b2:e7:09:1b:f8:10:fc:1d:90:8b:03:15:
                    00:9a:5d:97:34:97:b5:74:78:fe:2c:a9:3d:9d:e4:
                    c7:87:d9:9e:94:41:6a:10:77:06:b4:b8:a0:b7:7e:
                    4f:08:23:cc:80:c8:2e:56:0b:36:25:c4:db:73:34:
                    22:f5:d6:03:e3:2f:ff:e3:71:af:f1:2f:ba:1c:4b:
                    c2:2e:a7:1f:ac:7f:c7:6a:e8:70:b5:45:86:2e:43:
                    88:27:20:ce:3a:a1:5a:0f:7c:e0:c8:73:75:7c:d1:
                    96:f2:17:6f:50:04:97:8c:1e:df:f0:9f:88:1d:cd:
                    ac:d8:55:b4:d4:ed:3a:1d:7f:fb:7e:77:8d:22:df:
                    13:a8:17:7d:b8:ae:5b:f4:e5:02:5b:aa:d6:2a:bd:
                    59:ad:a3:ce:04:77:d3:f5:0c:e5:b1:53:63:d3:fd:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:16:5E:23:E4:30:28:15:FD:00:C7:CF:5E:80:09:74:AB:E6:03:F8
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:de:1a:89:9e:e7:5b:85:08:53:12:47:e5:e4:ab:8a:77:
         ce:c5:95:72:26:4f:2b:31:34:e8:60:48:8b:f9:ef:df:a3:8c:
         4d:95:68:02:bd:4c:65:51:50:94:78:92:59:29:8e:82:58:d0:
         83:fe:24:cc:ad:00:85:51:4e:19:bd:6e:b6:75:c7:ee:ed:e1:
         95:2e:96:c1:30:84:0c:c7:cc:e9:fa:29:e5:ba:1d:45:c7:66:
         ea:3d:ec:8d:a6:05:2c:59:97:19:2b:f7:48:2c:f5:cf:dc:c2:
         6b:fb:7d:0c:80:ff:b0:44:68:03:7b:ad:bf:1f:39:ea:e2:e1:
         2d:76:ed:d0:2c:45:c7:ee:e2:27:3e:3b:98:9a:66:cb:7d:51:
         ec:ce:b6:57:9f:71:34:10:3e:a9:79:81:55:94:a1:fc:d0:05:
         9d:97:47:d7:b6:fd:61:9c:3c:5b:fd:a8:23:9b:79:cc:4c:14:
         1f:bc:38:27:7e:51:ef:23:ea:b2:de:62:45:f8:af:03:6b:73:
         7c:26:e3:9b:cb:90:8c:c8:64:e8:69:41:4d:a1:bb:96:57:a7:
         cd:be:f8:e7:4d:93:1d:b0:02:ab:4d:0d:19:6b:64:50:32:e4:
         a0:74:e9:21:47:ff:a1:7a:04:b4:4b:c4:96:30:92:99:08:c1:
         95:e2:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:07 2025 by rpki-client