Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32332d3233203d3e203238333532.roa
File:                     3138392e35312e3230342e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          4sqdVa3Wt4TGo2skUX8AAG41kSQNTaYS/OqFMMB0ADo=
Subject key identifier:   61:5B:DD:FB:1E:A6:FB:9F:2E:34:DC:CA:22:87:A4:90:1C:75:16:97
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       57FBD918FD1179F0C2ABCA557ADD714C1EE46C1B
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:23 +0000
ROA not before:           Tue 04 Feb 2025 12:01:23 +0000
ROA not after:            Tue 03 Feb 2026 12:06:23 +0000
asID:                     28352
IP address blocks:        189.51.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 13:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fb:d9:18:fd:11:79:f0:c2:ab:ca:55:7a:dd:71:4c:1e:e4:6c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:23 2025 GMT
            Not After : Feb  3 12:06:23 2026 GMT
        Subject: CN=615BDDFB1EA6FB9F2E34DCCA2287A4901C751697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:ba:2f:68:84:0e:2e:69:af:ee:fb:ce:3e:
                    3a:19:77:ae:d5:33:f7:df:80:91:94:ea:d7:e6:27:
                    0c:1f:0e:44:cd:d6:c7:27:ed:4d:94:a5:e7:63:de:
                    d0:af:90:84:17:c8:fc:65:08:c9:da:79:3f:ec:84:
                    ec:54:2f:27:1b:7c:28:ae:27:69:85:5f:d4:11:10:
                    a0:e4:05:de:61:4c:dd:eb:0b:61:0e:5f:5e:58:35:
                    67:58:f7:9d:2b:d9:67:a7:70:aa:2d:d9:fc:eb:03:
                    66:ee:05:22:5d:d8:b2:a8:c2:be:6c:1b:d8:70:77:
                    17:15:42:3b:9c:a3:65:42:de:7f:4c:c2:e2:d7:46:
                    b1:cd:dc:23:d5:3d:2b:1c:63:b3:70:97:4d:05:88:
                    82:0f:e0:d6:b1:19:90:84:2d:22:17:fb:bd:a9:67:
                    03:46:b5:87:e4:34:ff:03:c6:b3:42:d6:8b:f2:5d:
                    ed:a6:ef:76:c7:fe:16:7c:0e:9a:d4:ea:a0:5c:f7:
                    d7:a7:48:86:df:27:d5:01:bd:fa:74:a2:05:89:d0:
                    67:44:3d:62:f2:56:56:a1:a9:09:c4:4c:cf:c7:8e:
                    8c:10:c9:91:e8:e2:94:14:3b:27:f6:4e:d0:d1:29:
                    1c:4d:31:c3:81:f3:f9:0c:e7:0c:84:bf:c0:07:09:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:DD:FB:1E:A6:FB:9F:2E:34:DC:CA:22:87:A4:90:1C:75:16:97
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:ec:1e:0a:99:3c:37:68:14:11:28:d6:41:a5:25:2a:24:
         b5:52:b7:a5:98:91:77:3d:25:17:b4:42:97:d4:a0:d6:bf:77:
         37:82:57:e1:ea:1b:87:76:f3:00:2b:ae:19:25:ab:f8:d0:0b:
         8d:58:8d:51:56:b7:a4:36:69:32:a3:77:68:35:c5:bc:92:4f:
         ab:76:63:68:5b:c3:06:06:14:35:b3:9c:3e:5a:31:f2:7f:ad:
         3b:be:91:c7:98:5b:c2:1f:cb:85:c5:83:2b:14:ee:6e:98:4b:
         b6:ce:ee:da:90:28:ea:84:7f:9e:0a:b4:97:a5:0c:5f:82:cd:
         9b:3e:d5:2c:ab:f2:c5:b9:6d:5c:84:a4:e8:79:ee:78:98:ce:
         f0:5d:d2:89:a1:23:71:6c:15:b5:74:0f:11:11:f0:8a:81:4e:
         af:b6:4c:c8:96:b4:0f:d4:f5:2a:87:d2:6d:12:89:26:f3:df:
         9f:66:71:79:a0:39:a9:0c:8b:ef:57:33:e0:a9:98:a4:3f:2f:
         0b:3e:b6:e5:54:2a:96:cf:76:55:f7:38:d9:b6:47:10:a7:32:
         5d:7c:65:74:cc:fe:a8:89:17:d6:56:ed:43:ff:e0:28:ca:3c:
         67:67:9d:a2:cc:45:66:a8:98:4c:11:29:8a:c1:9b:a5:da:ae:
         ef:df:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:23:35 2025 by rpki-client