Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e39362e302f32302d3234203d3e203238313436.roa
File:                     3138372e34352e39362e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          +iXoqtzafTeC7HJsbtDBywZG0JMO2ORZLxoq9VmMLuc=
Subject key identifier:   90:D6:39:01:DC:B0:2A:C3:F2:A7:9C:F7:DD:80:23:F4:77:C7:F8:30
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       358BE1480173F81988E07A41628ED4DDB9FFD9AD
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e39362e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:52:32 +0000
ROA not before:           Mon 12 May 2025 12:47:32 +0000
ROA not after:            Mon 11 May 2026 12:52:32 +0000
asID:                     28146
IP address blocks:        187.45.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 01:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8b:e1:48:01:73:f8:19:88:e0:7a:41:62:8e:d4:dd:b9:ff:d9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:47:32 2025 GMT
            Not After : May 11 12:52:32 2026 GMT
        Subject: CN=90D63901DCB02AC3F2A79CF7DD8023F477C7F830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9c:cc:33:0a:02:4f:69:64:58:59:04:0d:a1:
                    84:ca:23:16:df:da:5a:8c:c1:07:b0:48:7e:87:bd:
                    0f:7b:38:5f:66:89:2f:4f:e4:3c:6d:4b:cd:5a:7e:
                    f9:6a:f5:2a:f7:1e:34:db:81:8e:d8:3a:69:89:85:
                    ba:4f:8f:c3:bd:41:e7:f0:07:bb:fb:6a:97:69:86:
                    58:cd:61:2c:31:53:6e:71:f9:60:7e:fd:5a:96:7a:
                    e5:c4:ff:5c:05:8d:bc:a5:be:a2:f3:cc:a7:20:97:
                    f8:37:f1:07:21:ca:f1:d3:d4:bd:d0:bf:e2:78:fb:
                    66:5c:53:2f:0b:33:59:97:40:4b:99:40:b6:63:36:
                    d0:4f:c2:d6:e1:bb:85:7f:ce:f7:dd:92:bb:be:07:
                    2b:1e:6c:68:51:bc:72:87:18:9e:b7:f1:5b:a5:d9:
                    c7:fc:0e:10:f7:ce:70:8c:6d:dd:62:14:6a:2f:f5:
                    d8:c7:9c:e2:95:8b:ab:42:0a:2a:f7:b5:64:cf:19:
                    18:42:d0:38:a2:ca:ad:42:cd:0e:a6:72:1d:63:5a:
                    0c:91:ee:0e:b5:8a:d7:d5:7c:c5:4c:f3:25:62:9d:
                    47:81:6b:a1:f0:59:7a:58:d1:dc:98:5c:d4:ab:64:
                    32:56:05:07:a6:07:e7:f8:19:c0:fa:22:cf:39:61:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D6:39:01:DC:B0:2A:C3:F2:A7:9C:F7:DD:80:23:F4:77:C7:F8:30
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34352e39362e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:73:6e:65:ad:57:ff:40:e5:44:33:99:3f:e4:6c:11:b2:
         f9:57:6a:a7:0f:e6:84:a5:e3:62:2a:94:26:bb:9b:bb:e5:9e:
         43:14:ae:e3:5f:29:79:a6:e9:01:b1:0b:7c:b1:dd:c9:e8:08:
         3f:74:6b:a5:ec:3b:dc:1e:6c:7c:1b:fa:79:df:94:d2:8d:ce:
         12:96:66:1d:fc:70:47:da:36:4d:af:61:3a:94:cb:d7:85:06:
         51:90:01:e3:e7:81:a2:5e:ca:f6:54:0b:36:69:b7:2d:9e:c7:
         f3:ed:43:40:b9:31:3d:1a:51:40:41:59:79:08:4e:cf:05:8c:
         40:27:a9:01:32:dc:f2:40:99:d3:ad:76:3d:85:b6:bc:d9:bf:
         ff:79:c1:e1:06:08:4d:a6:92:bd:4b:c8:af:4d:73:f1:f4:c0:
         0c:cc:27:79:0e:1f:f1:6a:e8:00:1f:5c:a3:7e:ff:c1:89:a2:
         7d:9f:e9:6f:14:e6:3b:33:05:d4:fc:7d:be:92:bd:ae:85:04:
         d6:39:7d:1d:de:c8:e9:48:36:92:01:bf:c9:4f:59:6e:98:21:
         e3:3f:73:1f:13:00:52:3b:7a:9b:15:18:15:76:df:37:4a:79:
         52:9a:e0:7b:19:33:75:4d:8e:a2:56:42:a5:55:d5:ab:aa:5b:
         a9:96:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:04:53 2025 by rpki-client