Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e35362e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          Ne2A6Qk+tUo0Y9qTyEgCSCcA4DNzv5G/usXpbwQpkyU=
Subject key identifier:   08:16:A7:50:EA:5A:E6:8A:10:C0:75:52:A4:B6:BE:30:59:13:D6:5B
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       7DCA257A5507A18A298D4F990DE959C393509A08
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32322d3232203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:25 +0000
ROA not before:           Tue 04 Feb 2025 12:01:25 +0000
ROA not after:            Tue 03 Feb 2026 12:06:25 +0000
asID:                     28352
IP address blocks:        187.0.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ca:25:7a:55:07:a1:8a:29:8d:4f:99:0d:e9:59:c3:93:50:9a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:25 2025 GMT
            Not After : Feb  3 12:06:25 2026 GMT
        Subject: CN=0816A750EA5AE68A10C07552A4B6BE305913D65B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:94:50:1f:00:0c:90:e3:ae:86:86:b2:c4:52:
                    32:7e:38:83:e0:cc:aa:53:52:d5:09:bd:65:d6:75:
                    75:9c:57:b0:fb:2b:79:cd:ac:31:fb:42:0a:74:e6:
                    16:6a:d1:51:4c:60:6e:c4:ee:2c:23:9a:02:73:be:
                    4f:dc:f1:4a:5e:5d:42:70:ac:c0:12:e7:c5:ca:79:
                    db:e1:1f:6f:f2:38:90:4c:84:d5:ee:82:98:a3:ce:
                    a5:a4:aa:1b:98:73:82:c8:d4:2a:97:31:a4:25:86:
                    c7:24:cd:42:bd:4f:d6:58:86:0a:ce:dd:67:0f:ec:
                    bb:22:81:f1:51:9a:4f:12:c7:f0:23:9d:fb:bb:a7:
                    9c:43:ad:a0:ef:aa:ee:f8:0c:e2:d3:ef:67:39:6a:
                    c9:16:db:59:fe:fb:47:21:77:30:a2:d2:31:cf:83:
                    d8:c0:f9:88:8d:ab:9c:cc:78:c8:8a:b3:cf:b2:0e:
                    62:22:e6:cb:9e:d2:50:28:c3:ac:52:ff:da:74:29:
                    5d:5d:16:ba:82:2a:e7:43:3f:62:c3:7e:e5:31:da:
                    e1:fe:42:a7:1b:e0:da:6e:65:c8:4e:bf:c2:f5:53:
                    d2:97:7d:93:93:d2:4d:bf:16:38:5e:80:5c:f9:c0:
                    bd:43:30:54:ed:c1:23:d2:11:ae:03:41:ca:68:cb:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:16:A7:50:EA:5A:E6:8A:10:C0:75:52:A4:B6:BE:30:59:13:D6:5B
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:9b:8a:5c:9a:76:65:36:06:ee:6a:4d:ec:86:bc:d4:ad:
         ba:d3:68:16:17:fd:1e:ba:aa:bb:89:a6:ff:ff:d0:7a:13:3e:
         87:ce:73:eb:60:c2:69:cc:97:65:1e:59:fb:2b:3d:b7:ed:34:
         5c:2d:6c:5c:61:dc:cd:8b:47:bb:b5:9e:bf:48:31:b1:a6:6b:
         6a:ca:25:86:84:b2:d3:27:0f:c4:d8:e7:f4:f3:f7:14:c8:a4:
         f7:2d:af:af:f3:5d:86:46:28:da:0b:db:5c:d6:69:7d:ef:d3:
         00:67:e5:d6:57:46:19:b0:28:fc:90:45:09:9c:74:47:ff:2d:
         51:f9:fe:af:35:07:50:6e:d5:6a:9e:c0:67:f7:df:29:6a:9a:
         79:af:35:d2:e6:ea:24:bd:a6:b1:80:c8:9c:7b:48:fd:07:99:
         e0:28:0a:3a:e2:36:5f:1a:be:39:d5:8b:b6:18:96:2c:d4:a4:
         c2:4b:74:15:37:3a:56:04:cf:eb:91:d7:0c:3b:01:01:7a:ae:
         46:f0:f1:51:fc:54:44:e7:8d:17:aa:15:de:07:76:21:6e:a9:
         8d:00:f2:a3:0b:4b:ee:9d:38:00:8f:4b:1a:c5:5a:98:2e:e9:
         83:91:76:6d:bc:23:7b:77:e7:7a:da:45:40:00:e8:29:f7:91:
         b1:6a:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:38:14 2025 by rpki-client