Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa
File:                     3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa (raw, json)
Hash identifier:          oy6MJVfpXmZPCFxJxIXaSuPLw1CsCo9hdbzNeeqAkPQ=
Subject key identifier:   76:F8:DD:04:7D:5C:93:90:B0:16:B9:7F:01:80:41:DC:65:96:87:A0
Certificate issuer:       /CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
Certificate serial:       50D3ACF76910E6A7313296F6883479ECBACB1D9B
Authority key identifier: FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa
Signing time:             Tue 01 Apr 2025 19:14:55 +0000
ROA not before:           Tue 01 Apr 2025 19:09:55 +0000
ROA not after:            Tue 31 Mar 2026 19:14:55 +0000
asID:                     53100
IP address blocks:        187.103.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl
                          rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 03:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d3:ac:f7:69:10:e6:a7:31:32:96:f6:88:34:79:ec:ba:cb:1d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
        Validity
            Not Before: Apr  1 19:09:55 2025 GMT
            Not After : Mar 31 19:14:55 2026 GMT
        Subject: CN=76F8DD047D5C9390B016B97F018041DC659687A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:85:92:65:47:33:3f:e1:11:90:bd:a2:2a:
                    59:18:c3:75:e3:ac:16:2f:60:81:3c:5f:25:f7:02:
                    76:72:d4:da:11:a8:db:bb:53:88:42:78:a4:92:06:
                    c3:7e:c1:0f:c0:7e:19:a5:14:8c:04:a0:85:bd:f1:
                    bb:c3:3d:3e:2f:6f:04:50:ad:15:a4:5c:a5:e6:50:
                    c4:07:97:e5:97:d9:90:47:6b:1a:09:4d:db:0c:b4:
                    60:7e:ea:74:99:7f:56:6d:48:39:ab:c2:e3:5a:9f:
                    a8:1d:46:d5:bf:97:12:13:69:46:da:6b:92:fc:11:
                    ea:34:6f:51:0e:b9:1c:0b:93:9c:19:dc:5a:66:3c:
                    6d:40:8b:30:10:81:eb:a1:17:22:aa:41:9a:55:e7:
                    f6:2f:ff:f5:36:7f:93:b5:8b:10:fe:e1:5e:93:60:
                    7d:2c:e7:f6:f0:91:ec:85:42:dc:da:5e:ad:76:85:
                    71:c6:89:ec:3c:6c:eb:e8:94:4c:90:59:cf:12:c1:
                    c2:c3:f5:f4:ae:63:be:56:51:83:67:88:ae:fc:9a:
                    1f:7e:0c:a8:66:88:f7:02:61:73:30:f3:73:a4:d4:
                    9f:c5:8f:d7:69:44:0f:6e:be:ee:b7:9c:94:ac:12:
                    c3:da:db:bf:ad:39:c8:9a:f5:0d:27:66:44:a6:80:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:DD:04:7D:5C:93:90:B0:16:B9:7F:01:80:41:DC:65:96:87:A0
            X509v3 Authority Key Identifier:
                keyid:FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:2f:63:10:a0:0c:6c:78:95:78:40:06:b1:69:f9:76:4f:ab:
         09:2a:a1:34:37:c6:da:02:7e:e0:33:cf:a2:6d:54:de:0f:bc:
         ab:a2:ed:a4:10:e1:b2:67:0d:e1:45:d1:61:3f:d6:2f:78:24:
         1f:dc:12:99:e4:e6:ff:af:4f:9f:03:42:c9:2e:92:88:22:27:
         61:2c:18:2c:2b:b4:18:72:7e:0d:48:5f:53:87:d0:a5:5a:ef:
         3e:08:2a:3f:4a:29:d8:06:ea:65:41:99:db:bf:fd:da:53:63:
         ae:ca:9a:49:f5:d7:31:d6:19:7c:e4:67:e8:d8:4e:83:85:9c:
         00:52:fe:be:48:87:aa:b9:d9:b3:0d:7d:e8:94:77:10:06:2d:
         43:85:53:99:91:55:fa:32:4e:f3:61:80:8d:67:79:89:28:a4:
         55:d5:32:c9:01:68:a9:1d:7a:06:8a:4e:53:96:7b:c6:d9:33:
         cf:5a:25:c3:b0:de:97:9b:b7:bc:60:58:e6:6a:f7:2e:4f:be:
         d4:58:9b:a9:08:ab:c0:c4:27:bd:24:fb:67:2b:fb:93:3b:a9:
         cf:bd:05:6b:5a:c7:e4:e9:8d:c0:ab:b3:91:df:82:26:0d:83:
         74:c4:be:37:93:a6:c6:5b:90:f1:46:14:5b:1b:d6:26:11:50:
         1c:9c:fe:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUNOs92kQ5qcxMpb2iDR57LrLHZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwMENBMDU5OEE3MzQ5MEVGMERCRjQ0OUMxRDc4NThC
MUI4NzVDRjAeFw0yNTA0MDExOTA5NTVaFw0yNjAzMzExOTE0NTVaMDMxMTAvBgNV
BAMTKDc2RjhERDA0N0Q1QzkzOTBCMDE2Qjk3RjAxODA0MURDNjU5Njg3QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ4WSZUczP+ERkL2iKlkYw3Xj
rBYvYIE8XyX3AnZy1NoRqNu7U4hCeKSSBsN+wQ/AfhmlFIwEoIW98bvDPT4vbwRQ
rRWkXKXmUMQHl+WX2ZBHaxoJTdsMtGB+6nSZf1ZtSDmrwuNan6gdRtW/lxITaUba
a5L8Eeo0b1EOuRwLk5wZ3FpmPG1AizAQgeuhFyKqQZpV5/Yv//U2f5O1ixD+4V6T
YH0s5/bwkeyFQtzaXq12hXHGiew8bOvolEyQWc8SwcLD9fSuY75WUYNniK78mh9+
DKhmiPcCYXMw83Ok1J/Fj9dpRA9uvu63nJSsEsPa27+tOcia9Q0nZkSmgB9xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdvjdBH1ck5CwFrl/AYBB3GWWh6AwHwYDVR0j
BBgwFoAU+wDKBZinNJDvDb9EnB14WLG4dc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhVUWsxRHBWQ25WUkFITTl6amtKRFpKa0pobWFiVVVVd1NCUTQxZm8y
ZmEvMC9GQjAwQ0EwNTk4QTczNDkwRUYwREJGNDQ5QzFENzg1OEIxQjg3NUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMDBDQTA1OThBNzM0OTBF
RjBEQkY0NDlDMUQ3ODU4QjFCODc1Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4VVFrMURwVkNuVlJBSE05emprSkRaSmtKaG1hYlVVVXdTQlE0MWZvMmZhLzAv
MzEzODM3MmUzMTMwMzMyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7Z4AwDQYJKoZIhvcNAQELBQADggEBAJwvYxCg
DGx4lXhABrFp+XZPqwkqoTQ3xtoCfuAzz6JtVN4PvKui7aQQ4bJnDeFF0WE/1i94
JB/cEpnk5v+vT58DQskukogiJ2EsGCwrtBhyfg1IX1OH0KVa7z4IKj9KKdgG6mVB
mdu//dpTY67Kmkn11zHWGXzkZ+jYToOFnABS/r5Ih6q52bMNfeiUdxAGLUOFU5mR
VfoyTvNhgI1neYkopFXVMskBaKkdegaKTlOWe8bZM89aJcOw3pebt7xgWOZq9y5P
vtRYm6kIq8DEJ70k+2cr+5M7qc+9BWtax+TpjcCrs5HfgiYNg3TEvjeTpsZbkPFG
FFsb1iYRUByc/rM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:29:06 2025 by rpki-client