Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa
File:                     3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (raw, json)
Hash identifier:          nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=
Subject key identifier:   90:F5:AD:D0:3D:65:5B:97:72:0D:0B:AD:04:EC:39:08:04:C5:A9:DE
Certificate issuer:       /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial:       1012988FC7D7426A440FFAE17F5DC2F8C37E7542
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa
Signing time:             Sat 02 Aug 2025 14:15:49 +0000
ROA not before:           Sat 02 Aug 2025 14:10:49 +0000
ROA not after:            Sat 01 Aug 2026 14:15:49 +0000
asID:                     270517
IP address blocks:        187.73.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
                          rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:98:8f:c7:d7:42:6a:44:0f:fa:e1:7f:5d:c2:f8:c3:7e:75:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
        Validity
            Not Before: Aug  2 14:10:49 2025 GMT
            Not After : Aug  1 14:15:49 2026 GMT
        Subject: CN=90F5ADD03D655B97720D0BAD04EC390804C5A9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:f3:6d:6d:3e:8a:f1:db:bb:53:fa:77:de:
                    a0:49:48:92:44:20:bc:15:c4:a4:7c:9e:d5:cc:76:
                    26:c8:88:a5:c5:ec:49:b0:fa:17:02:52:7f:99:01:
                    2c:06:7e:0f:43:b3:08:e6:74:aa:ec:30:2d:8d:5b:
                    f2:9d:89:f2:c7:80:8f:cb:f7:62:af:86:18:f7:64:
                    7b:34:dd:2d:19:7a:ba:aa:81:f4:86:d6:e7:b1:92:
                    89:59:6d:18:b2:b5:d0:f7:5f:aa:a4:de:cc:11:59:
                    9e:9d:9f:2b:5a:ed:6c:64:1b:a3:fa:4f:e8:22:7e:
                    14:3a:29:70:bb:a4:56:fd:99:8a:6a:2d:d0:0b:67:
                    ab:c4:d6:07:6d:30:e5:73:ae:c7:a5:89:a0:d8:2c:
                    5c:d1:be:73:37:cc:36:88:83:59:04:e8:9c:54:1d:
                    46:9b:c2:d1:10:8e:98:4c:dd:29:1e:b9:6e:c5:e1:
                    c7:d1:55:83:98:2f:ed:1c:0e:0a:ab:a9:69:d0:7c:
                    15:d7:7b:25:79:10:62:54:df:74:f8:9d:64:ca:49:
                    7d:3d:d0:6d:bf:e2:17:f5:67:fa:09:58:54:74:e4:
                    8e:b9:2e:cc:0c:5f:5c:3a:0b:3f:95:d0:4f:0b:b5:
                    78:e7:e6:5b:cd:43:d2:cf:7f:83:1d:af:cc:f2:c2:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F5:AD:D0:3D:65:5B:97:72:0D:0B:AD:04:EC:39:08:04:C5:A9:DE
            X509v3 Authority Key Identifier:
                keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:21:1f:0e:fa:2e:b2:b5:0d:c5:ce:1c:4b:3a:4e:b8:e9:62:
         58:ea:f1:4a:db:7b:86:c5:46:c0:6e:d9:6e:f2:ba:b1:ba:9b:
         b4:c5:58:92:e9:dd:a1:f8:5f:4d:a0:f4:b0:1d:24:df:62:2f:
         6f:93:b6:07:1d:aa:a6:70:bd:1b:0d:d6:6f:35:ca:56:e3:42:
         52:01:1c:6a:d7:a7:b9:23:f7:c9:78:d2:8b:5a:cd:0a:fe:31:
         d6:41:1b:48:39:ee:5d:e4:d2:4f:1e:1d:10:26:8b:b7:d6:3d:
         f3:f2:88:c0:31:00:c3:ff:15:aa:27:56:8b:15:55:a4:7b:4e:
         0c:6d:38:f9:04:3a:c9:41:46:f6:c3:c6:ca:28:38:6e:0f:20:
         ce:0f:63:5c:b5:33:08:64:75:d4:3c:ec:a9:cb:53:2c:5d:4b:
         35:2d:5f:a7:cd:58:84:1f:b2:95:eb:fc:f6:02:97:ee:be:ba:
         df:78:f4:48:31:c1:8a:45:85:c2:79:e7:dd:25:3a:51:5d:ce:
         e8:c1:df:c6:3e:02:15:9a:ae:4d:50:7e:7a:f5:42:71:3b:bc:
         1e:ea:59:04:f6:5b:56:80:d9:31:83:60:85:7f:fe:e0:55:9e:
         75:4f:75:59:21:f3:c3:57:2c:69:c9:f2:3b:24:41:de:f0:93:
         7c:26:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:23 2025 by rpki-client