Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa
File:                     3138392e3132362e34382e302f32302d3234203d3e203238323234.roa (raw, json)
Hash identifier:          riB2XwIgOLQhnuOoS8r0rS6l04Z7uV9I80LiMJj0e+k=
Subject key identifier:   7D:57:43:F3:E8:EC:4C:43:37:F1:FB:83:21:74:18:66:22:A6:B1:5F
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       113E5CE6C05F6254E31553F23DD8952C80A06903
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa
Signing time:             Mon 12 May 2025 13:00:19 +0000
ROA not before:           Mon 12 May 2025 12:55:19 +0000
ROA not after:            Mon 11 May 2026 13:00:19 +0000
asID:                     28224
IP address blocks:        189.126.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 22:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3e:5c:e6:c0:5f:62:54:e3:15:53:f2:3d:d8:95:2c:80:a0:69:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:55:19 2025 GMT
            Not After : May 11 13:00:19 2026 GMT
        Subject: CN=7D5743F3E8EC4C4337F1FB832174186622A6B15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:d8:ce:04:65:10:d2:24:e5:a0:ec:93:a1:
                    84:ae:64:87:68:50:df:f7:52:a7:0f:4a:ce:3c:6f:
                    dd:52:28:53:c8:04:c1:1a:e6:fb:47:0e:72:fb:05:
                    8b:47:8e:21:a4:e2:67:fd:bf:ab:de:d4:8e:be:1a:
                    fb:a3:00:87:9e:a8:31:38:48:d1:e1:d7:48:92:fc:
                    63:b6:c0:ad:87:37:e7:6c:bd:63:8d:a8:8d:64:3a:
                    4b:54:52:3e:81:4e:28:3d:d9:b7:86:a6:af:f3:0a:
                    72:db:14:3d:d5:21:d9:b2:34:0e:00:39:fb:30:5b:
                    ff:25:d6:19:87:93:4a:20:0a:4c:21:fb:8f:1a:6a:
                    4f:8b:ae:19:89:a7:54:6a:8c:33:7d:27:b0:34:b2:
                    54:ea:7f:e9:6b:b7:50:42:e8:f0:cf:48:54:9f:68:
                    38:9a:62:96:43:ea:cc:5f:bf:c8:b1:2b:cb:af:ca:
                    0a:4b:8b:f0:54:f6:f2:23:73:59:07:f0:ad:da:86:
                    81:95:f6:2e:60:dd:a5:17:49:96:5a:fc:80:26:30:
                    43:e6:90:29:df:3a:08:6e:a5:37:b7:77:0d:79:d0:
                    4f:ea:07:ad:d4:4c:73:60:74:8e:52:76:21:aa:a4:
                    d9:7b:f5:03:08:67:40:b1:53:80:21:41:19:69:fd:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:57:43:F3:E8:EC:4C:43:37:F1:FB:83:21:74:18:66:22:A6:B1:5F
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:9d:34:d6:9a:33:d7:7f:95:03:e2:fe:b6:3b:b7:47:52:
         94:0f:91:56:fd:1d:8a:ca:b1:a5:70:2b:da:1c:58:46:24:de:
         ef:d2:e4:e5:d5:96:18:fd:16:60:f0:b9:9b:4f:ee:00:a9:4d:
         c2:b7:3f:b5:b1:c2:02:dc:a8:76:68:28:86:0d:61:e7:cd:5c:
         4a:ac:c8:27:c4:5e:1a:57:ce:9e:81:05:1f:78:4e:eb:2e:bd:
         94:04:aa:4e:38:18:5e:d2:e6:7d:4e:14:6e:54:dc:30:a1:af:
         9e:87:e0:02:62:f2:c4:5b:be:38:f2:6f:3a:78:1e:6b:dd:a3:
         c4:9f:ca:45:4f:6f:3c:c7:05:12:2b:43:1e:ee:b3:48:ea:9c:
         04:f3:21:3e:16:aa:f3:26:85:d4:aa:10:9d:5e:f3:72:73:3a:
         8e:a8:0e:9b:79:94:1e:23:27:7c:e7:de:26:ac:d7:a6:a3:9b:
         97:8a:16:a4:d1:bc:7f:4b:54:f0:e2:ba:44:32:4d:d5:ec:86:
         0f:01:07:59:fa:be:08:23:e9:b4:6a:a0:45:2e:ff:45:47:06:
         dd:76:17:14:2d:0f:3c:8c:82:a5:64:f9:47:2f:f8:db:de:e4:
         53:7f:0c:be:8a:7b:c1:6c:1f:ac:0a:95:98:70:de:87:e0:1d:
         36:76:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:19:45 2025 by rpki-client