Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/3138392e3132372e3138342e302f32322d3234203d3e20323730373231.roa
File:                     3138392e3132372e3138342e302f32322d3234203d3e20323730373231.roa (raw, json)
Hash identifier:          YBXzmdHvfJN2me3DAHytoGVbKsuHOUzBHKbyJG4sBkE=
Subject key identifier:   9B:1B:3C:52:E3:79:27:72:F5:DB:48:32:02:6C:AB:B8:DD:48:FA:D8
Certificate issuer:       /CN=88317B76B846F9CB3074395BEF7D4F045F879D1E
Certificate serial:       24F090800932B156EBC7E85C3C6676E334291A52
Authority key identifier: 88:31:7B:76:B8:46:F9:CB:30:74:39:5B:EF:7D:4F:04:5F:87:9D:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/3138392e3132372e3138342e302f32322d3234203d3e20323730373231.roa
Signing time:             Wed 25 Jun 2025 20:41:01 +0000
ROA not before:           Wed 25 Jun 2025 20:36:01 +0000
ROA not after:            Wed 24 Jun 2026 20:41:01 +0000
asID:                     270721
IP address blocks:        189.127.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.crl
                          rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 12:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:90:80:09:32:b1:56:eb:c7:e8:5c:3c:66:76:e3:34:29:1a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88317B76B846F9CB3074395BEF7D4F045F879D1E
        Validity
            Not Before: Jun 25 20:36:01 2025 GMT
            Not After : Jun 24 20:41:01 2026 GMT
        Subject: CN=9B1B3C52E3792772F5DB4832026CABB8DD48FAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b1:dc:7e:f0:18:a0:ed:ef:1d:52:61:3c:1d:
                    e2:80:cc:7a:02:71:c3:66:60:4a:ed:d0:91:5c:ca:
                    af:ad:9e:da:f2:98:7a:40:58:84:21:9a:d2:2a:b1:
                    4d:f0:0d:89:79:cb:30:4d:e9:8e:de:85:6e:e9:d3:
                    46:dc:43:4f:eb:9c:71:50:e2:28:c8:9f:ad:90:c1:
                    d6:4f:a2:e9:cc:2a:88:5b:c6:3b:56:d9:8c:cb:2a:
                    03:89:8f:10:6c:02:ae:b0:a4:93:4b:78:8d:45:f6:
                    a0:77:75:2f:59:61:79:a0:74:92:94:62:04:29:2f:
                    1a:65:c3:09:f3:fb:14:12:6f:bf:ac:a6:32:0e:a8:
                    a4:01:1e:51:72:ad:80:c9:44:b8:14:97:57:c1:6b:
                    97:a9:af:59:ed:ce:96:0f:32:e3:ae:78:85:cd:df:
                    18:3d:1e:6e:48:e0:85:41:26:bc:06:e0:46:2d:c3:
                    e2:03:90:dd:c1:38:f3:8b:17:36:af:ba:e1:85:ab:
                    d6:5b:97:4d:50:db:c6:c4:ca:04:d0:dd:b5:8e:6e:
                    ce:65:f6:33:99:56:cd:0d:03:b4:4f:bf:a4:f4:85:
                    6c:9e:2a:7e:55:78:3e:8f:ef:d0:84:f2:cf:74:cc:
                    48:07:97:66:f7:48:fb:22:9f:75:d1:28:c7:34:3d:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:3C:52:E3:79:27:72:F5:DB:48:32:02:6C:AB:B8:DD:48:FA:D8
            X509v3 Authority Key Identifier:
                keyid:88:31:7B:76:B8:46:F9:CB:30:74:39:5B:EF:7D:4F:04:5F:87:9D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/3138392e3132372e3138342e302f32322d3234203d3e20323730373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:36:9c:e9:a9:22:78:20:70:e3:06:4d:30:ec:cc:a0:b1:7e:
         b1:22:93:a4:3c:f0:c9:17:02:a3:0f:3b:bf:78:71:68:26:e1:
         47:05:8b:96:3a:81:da:f4:39:57:79:e0:75:d0:c4:4e:f5:a1:
         6f:cf:fa:c4:15:9d:0c:bf:03:01:10:c7:6b:2e:cc:d7:d4:4e:
         81:01:46:bb:b4:6d:85:c1:55:37:64:83:bf:8c:7a:3d:f2:e7:
         10:9b:f3:74:40:68:7a:ad:de:cf:d5:bc:1e:02:32:b1:01:76:
         86:e3:dd:7d:4c:d2:76:bd:16:9b:bf:2a:9b:7f:ad:d0:28:d1:
         42:01:17:38:c5:16:bf:b8:3a:b1:00:36:5a:6d:cf:1a:5a:ac:
         6f:aa:66:04:07:f0:84:b1:ce:3e:7c:b8:61:29:39:07:33:53:
         08:09:ee:32:26:01:77:66:3b:65:4c:68:d6:36:56:c1:47:9f:
         c6:80:a7:d6:af:a4:84:bd:00:81:d0:3a:d5:2f:7f:e1:94:d8:
         48:d0:3e:e8:c4:fd:f5:87:9f:c8:f6:92:5c:97:24:2e:61:c2:
         be:e2:df:50:34:75:aa:6c:49:11:71:08:1d:23:2f:f8:ad:a2:
         71:54:94:0b:64:64:7e:6f:0d:e6:85:20:39:15:10:51:70:8a:
         1b:06:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:47:01 2025 by rpki-client