Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e3131322e302f32302d3234203d3e203238313436.roa
File:                     3138372e34352e3131322e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          40/oCqBSGlSfiILMkrvOs8sOZF5k+y1gokrpLvirqNM=
Subject key identifier:   3B:28:57:24:67:0D:76:0B:E5:B7:5A:29:FE:B0:53:98:08:AA:2F:97
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       373CB15CADBDAA404EEF9F648C3785EDA8D55622
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e3131322e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:52:42 +0000
ROA not before:           Mon 12 May 2025 12:47:42 +0000
ROA not after:            Mon 11 May 2026 12:52:42 +0000
asID:                     28146
IP address blocks:        187.45.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 01:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3c:b1:5c:ad:bd:aa:40:4e:ef:9f:64:8c:37:85:ed:a8:d5:56:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:47:42 2025 GMT
            Not After : May 11 12:52:42 2026 GMT
        Subject: CN=3B285724670D760BE5B75A29FEB0539808AA2F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:ad:f9:e5:c8:ae:d7:d8:f1:ed:ec:83:f8:
                    de:56:8b:f4:db:37:ac:21:94:da:78:b0:c1:c9:06:
                    40:7d:e1:42:97:5d:75:aa:89:17:28:14:96:5e:21:
                    2b:56:0b:c4:35:01:d0:cb:99:75:9b:26:c0:78:a9:
                    4f:bf:9f:be:a7:03:87:df:b4:fa:da:7a:8d:a1:2c:
                    b6:59:17:ca:ea:51:60:9a:de:39:1b:ae:ec:17:bf:
                    d8:5b:ef:5d:cd:ce:1d:d9:1e:ab:e6:68:02:9c:ce:
                    37:e4:b9:64:d9:1b:c3:23:30:f5:45:66:fe:59:5e:
                    84:36:99:1b:48:5a:0b:7a:93:c2:09:0f:07:83:1c:
                    f1:86:ea:08:1a:f3:87:ae:d9:a5:1c:73:25:a6:22:
                    6e:02:6c:cf:e6:a8:34:13:fc:c2:29:bb:f2:05:e3:
                    83:cd:84:e4:bc:79:87:fc:2f:43:e4:5e:1d:e0:2d:
                    5b:9e:bb:34:ec:61:89:09:23:9a:58:47:01:1d:6f:
                    b5:3c:1e:7f:48:4d:db:37:a5:f9:e1:39:82:b0:6b:
                    39:29:47:dd:96:94:c4:42:06:89:f7:f2:4c:62:af:
                    85:dc:ed:69:00:76:5e:e9:b4:c9:bb:97:8c:36:a9:
                    c6:06:21:fe:91:4a:2e:d6:29:33:af:ca:ca:5d:25:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:57:24:67:0D:76:0B:E5:B7:5A:29:FE:B0:53:98:08:AA:2F:97
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e3131322e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:96:a2:72:7a:1f:76:fc:ca:19:cc:b4:dc:9e:72:3a:e3:1e:
         ec:6c:9e:d9:52:f5:9e:07:29:08:82:29:7c:4c:ac:f3:a3:05:
         59:ea:c1:4c:c3:2b:8e:06:29:b8:b9:59:a5:8c:33:cb:57:ba:
         a2:2b:a7:42:1d:9f:0d:80:1d:5f:d1:6c:7f:4f:26:21:7d:21:
         81:3f:b1:d7:4c:7f:d8:b9:4f:01:f3:a8:11:34:cf:24:c8:c3:
         b6:bc:c5:07:f7:da:96:ad:67:76:78:a7:03:b2:1c:97:9d:9f:
         46:87:81:6f:27:a9:28:ae:09:8e:3d:9e:3a:1b:ac:f9:77:58:
         a7:4c:ed:c6:e5:c4:f6:10:c0:41:66:12:0d:11:25:23:bc:84:
         e5:06:e1:d3:42:2f:e6:35:c5:15:3e:28:b4:a9:46:cf:6c:bd:
         ed:b1:58:b1:c2:c6:00:dd:bb:ab:d5:16:66:c5:7d:70:57:79:
         bc:33:e7:72:80:3c:1c:d2:63:3e:0b:5d:a4:a1:43:61:12:3d:
         5d:50:06:00:c7:b3:41:ba:d3:86:74:e1:0b:b8:72:4e:a1:ce:
         09:68:d5:c1:79:a0:50:df:d1:59:5f:13:b6:b9:d7:d3:b7:4f:
         aa:51:68:be:e3:93:66:fd:41:7e:32:b9:90:d7:b9:33:67:24:
         43:88:1a:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNzyxXK29qkBO759kjDeF7ajVViIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjQ3NDJaFw0yNjA1MTExMjUyNDJaMDMxMTAvBgNV
BAMTKDNCMjg1NzI0NjcwRDc2MEJFNUI3NUEyOUZFQjA1Mzk4MDhBQTJGOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUs6355ciu19jx7eyD+N5Wi/Tb
N6whlNp4sMHJBkB94UKXXXWqiRcoFJZeIStWC8Q1AdDLmXWbJsB4qU+/n76nA4ff
tPraeo2hLLZZF8rqUWCa3jkbruwXv9hb713Nzh3ZHqvmaAKczjfkuWTZG8MjMPVF
Zv5ZXoQ2mRtIWgt6k8IJDweDHPGG6gga84eu2aUccyWmIm4CbM/mqDQT/MIpu/IF
44PNhOS8eYf8L0PkXh3gLVueuzTsYYkJI5pYRwEdb7U8Hn9ITds3pfnhOYKwazkp
R92WlMRCBon38kxir4Xc7WkAdl7ptMm7l4w2qcYGIf6RSi7WKTOvyspdJdybAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOyhXJGcNdgvlt1op/rBTmAiqL5cwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzODM3MmUzNDM1MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuy1wMA0GCSqGSIb3DQEBCwUAA4IBAQBxlqJyeh92
/MoZzLTcnnI64x7sbJ7ZUvWeBykIgil8TKzzowVZ6sFMwyuOBim4uVmljDPLV7qi
K6dCHZ8NgB1f0Wx/TyYhfSGBP7HXTH/YuU8B86gRNM8kyMO2vMUH99qWrWd2eKcD
shyXnZ9Gh4FvJ6korgmOPZ46G6z5d1inTO3G5cT2EMBBZhINESUjvITlBuHTQi/m
NcUVPii0qUbPbL3tsVixwsYA3bur1RZmxX1wV3m8M+dygDwc0mM+C12koUNhEj1d
UAYAx7NButOGdOELuHJOoc4JaNXBeaBQ39FZXxO2udfTt0+qUWi+45Nm/UF+MrmQ
17kzZyRDiBpI
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:23:18 2025 by rpki-client