Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
File:                     3138392e35312e3139362e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          U1rNzdNpbJ0moOdCt4WLWoZSEujwQeSu2VYeIjtkpoo=
Subject key identifier:   34:B8:99:EE:EE:CB:21:7A:AF:42:87:6D:4B:F9:E1:91:58:52:B8:A5
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       3842ABC83883CA471203C8CC11B8D06114BEF60B
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:25 +0000
ROA not before:           Tue 04 Feb 2025 12:01:25 +0000
ROA not after:            Tue 03 Feb 2026 12:06:25 +0000
asID:                     28352
IP address blocks:        189.51.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 08:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:ab:c8:38:83:ca:47:12:03:c8:cc:11:b8:d0:61:14:be:f6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:25 2025 GMT
            Not After : Feb  3 12:06:25 2026 GMT
        Subject: CN=34B899EEEECB217AAF42876D4BF9E1915852B8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:fa:31:7d:b1:16:94:78:9e:38:0b:2d:65:
                    af:f7:77:8f:4c:28:26:1c:d5:8d:ce:27:74:15:7d:
                    ac:91:3d:45:79:7e:51:23:df:cb:68:85:8e:74:c5:
                    a6:e7:91:b8:03:d6:6d:29:58:a7:98:fe:71:ce:2e:
                    8f:9b:06:15:17:4f:b9:fc:bb:2a:59:d1:16:83:d7:
                    14:9c:2e:c1:f6:ea:e7:08:5c:37:25:1e:32:bf:d8:
                    a3:38:ad:dd:1f:23:0d:dc:d3:1d:3d:a0:ac:98:44:
                    ae:5e:99:1b:fe:5f:4c:e2:03:c6:3d:59:c4:9f:1a:
                    c6:dd:da:ba:c3:0a:0f:d4:48:a8:1d:39:ee:73:53:
                    4e:3e:ac:c0:56:ad:e2:3c:a4:2f:67:6c:ec:d5:55:
                    b2:99:c3:55:83:8e:92:84:c6:64:e0:b9:22:c2:61:
                    01:c7:c6:84:5d:4b:a9:55:dc:a9:fd:01:40:55:34:
                    20:0f:23:6d:f3:0a:a1:1f:d4:73:b5:71:69:67:83:
                    c6:03:ba:5d:bb:d9:cf:4c:fd:a8:f6:df:e6:cd:c8:
                    55:5a:66:75:20:5f:58:eb:51:da:fa:e8:2a:4a:7c:
                    8f:ba:ef:71:e8:e9:f0:52:47:7c:2e:9b:cb:ab:ef:
                    9f:bc:d5:e5:52:0b:a9:3b:4e:02:ac:86:dc:4e:1b:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B8:99:EE:EE:CB:21:7A:AF:42:87:6D:4B:F9:E1:91:58:52:B8:A5
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139362e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:ee:d0:9b:d1:fd:09:89:a0:59:71:d6:24:1c:1c:6d:e3:ae:
         81:07:af:a4:3d:d1:c8:c9:e1:f5:80:bf:8d:91:19:17:d0:91:
         70:b7:f5:38:cf:b2:72:1a:94:b3:3b:a4:20:4b:cd:b5:72:1c:
         29:46:3d:97:de:af:25:3d:0c:84:a4:89:05:28:09:84:f8:51:
         66:81:89:6d:ac:4a:41:8f:6e:e7:22:00:d5:09:86:f2:5f:5b:
         4b:e7:34:f7:ac:d9:1e:0a:b8:88:24:65:1c:a7:43:21:12:21:
         43:ea:0d:99:31:98:c6:9e:1a:31:1b:fb:54:cf:58:2c:47:ca:
         90:91:99:c3:96:35:cc:f1:31:5b:c1:f5:7b:ac:90:97:cc:c7:
         59:9b:0d:e6:98:d7:a3:c5:db:f7:b0:ef:7a:61:d3:da:81:12:
         03:af:8b:01:0e:39:56:04:5a:d3:72:81:e1:68:bc:a0:57:d5:
         fd:28:88:ba:05:69:b7:1c:b4:4c:0b:58:1d:a3:a8:d5:4b:d5:
         3d:43:26:ef:0f:9e:b6:8f:47:0a:5b:89:b3:c3:59:8a:c4:51:
         3f:eb:7c:5f:cd:b5:8b:05:ba:63:7d:68:d2:f4:0f:1b:4e:f8:
         24:a8:cd:39:ff:ee:ba:08:10:22:89:f4:34:30:e5:e0:a7:5c:
         f3:1b:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:41:16 2025 by rpki-client