Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32332d3332203d3e20323635303136.roa
File:                     3137302e38342e3136342e302f32332d3332203d3e20323635303136.roa (raw, json)
Hash identifier:          kHXbgZg7rygQyfin7C/TYfcR2ot5QCGlK4QcindM7ks=
Subject key identifier:   BD:D4:BF:B2:CE:63:B7:3F:B7:A6:6E:B3:9E:EA:EB:40:AB:50:5C:3A
Certificate issuer:       /CN=28AEA4799AA16796C18CA8950931D4394F01179A
Certificate serial:       1B7807C3D9A835A81DA061E181A8C967F6D2E9E1
Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32332d3332203d3e20323635303136.roa
Signing time:             Tue 17 Jun 2025 14:15:00 +0000
ROA not before:           Tue 17 Jun 2025 14:10:00 +0000
ROA not after:            Tue 16 Jun 2026 14:15:00 +0000
asID:                     265016
IP address blocks:        170.84.164.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:78:07:c3:d9:a8:35:a8:1d:a0:61:e1:81:a8:c9:67:f6:d2:e9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A
        Validity
            Not Before: Jun 17 14:10:00 2025 GMT
            Not After : Jun 16 14:15:00 2026 GMT
        Subject: CN=BDD4BFB2CE63B73FB7A66EB39EEAEB40AB505C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:55:73:a3:d5:82:d8:b8:7a:be:95:cf:05:
                    f0:ac:d8:5b:f8:d9:7e:4a:2f:e4:7c:bd:9d:6b:c1:
                    b0:82:b1:43:87:f4:4f:c1:54:c2:88:1f:6a:6c:14:
                    35:fb:21:5e:31:e5:eb:72:45:00:06:01:6d:b6:d0:
                    c6:35:05:11:34:5f:76:5f:b8:38:91:27:10:2a:59:
                    1b:08:d4:f8:39:54:05:e7:3a:af:dc:77:04:a6:1f:
                    8f:49:53:d8:39:ff:16:90:d9:ce:6b:1b:35:f6:e5:
                    da:d1:1e:fb:de:43:e9:1c:3f:98:c0:00:29:c7:59:
                    37:57:58:e4:26:f8:5d:c1:c5:82:38:8c:df:e8:e6:
                    34:66:da:cf:75:bc:fb:a5:dd:75:5c:95:26:e9:a6:
                    bc:b6:63:60:6b:96:52:d3:b9:3e:80:1c:2b:89:cb:
                    22:ab:48:f3:1c:1c:93:fe:7d:a9:87:8b:71:d4:e0:
                    95:18:35:8b:9c:fd:b0:19:ff:65:5f:0c:d7:c5:37:
                    87:30:72:84:ba:62:98:31:4c:95:43:7a:7b:ad:d6:
                    c1:88:d2:8f:58:21:ce:72:31:ad:c1:a8:c5:ec:1f:
                    ed:0c:65:8d:1f:65:69:c5:fa:66:d1:2c:7e:6b:e8:
                    e0:91:ed:3e:a6:9c:c4:b6:61:3e:42:6b:fa:ba:46:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:BF:B2:CE:63:B7:3F:B7:A6:6E:B3:9E:EA:EB:40:AB:50:5C:3A
            X509v3 Authority Key Identifier:
                keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32332d3332203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:99:1a:6d:0d:04:cb:37:66:b2:09:83:ba:30:b1:94:b8:
         f7:1b:3c:00:2e:60:09:75:94:f3:ed:26:52:ca:19:ee:9a:75:
         bf:a4:6c:9a:f0:90:b4:4e:e0:42:6b:02:79:22:a2:c6:0e:25:
         4e:04:f4:cc:93:54:ce:47:8f:8e:fd:95:69:ae:80:d7:88:f9:
         3c:95:ac:ba:ba:db:05:8d:fe:b7:50:31:59:29:6b:23:52:ad:
         01:ca:37:89:fc:52:2a:de:3e:b6:38:00:74:c3:17:f1:41:8f:
         df:a7:61:cb:ef:c7:0e:6e:64:a5:30:e7:3a:fb:c9:b9:ee:28:
         60:bf:36:1e:0e:cf:c7:67:8f:82:13:29:fb:70:40:3a:69:87:
         05:ff:0f:2c:04:70:33:d5:b6:ce:15:1d:d7:45:80:32:c2:e0:
         0c:31:8d:23:65:30:6d:e8:b1:3a:ed:ac:0a:fc:ba:18:ba:7b:
         87:e4:f3:20:cc:73:00:fa:2e:2b:b6:be:8c:bc:8a:82:6a:27:
         15:5b:0a:e7:17:0b:07:d1:3e:79:c2:1b:7a:ac:fb:40:32:78:
         ce:dd:5f:c2:44:ae:3e:b0:12:06:cc:4c:b1:d3:37:02:d1:d0:
         f2:5b:1e:6b:82:c3:36:3c:c0:96:9f:26:5d:46:d2:07:c1:79:
         ba:43:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:55:16 2025 by rpki-client