Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          bKRjfgdi7nFjPEy+Mlig8BE6OWx/xNNCStDE9cTPpkQ=
Subject key identifier:   20:54:06:4F:06:63:D3:70:29:30:73:3D:9D:2A:87:0A:44:C2:76:95
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       668D67131B37916FD062E12A772D933F8331DADA
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     262687
IP address blocks:        187.87.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 13:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8d:67:13:1b:37:91:6f:d0:62:e1:2a:77:2d:93:3f:83:31:da:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:38:eb:c4:93:d9:7d:8e:86:46:24:5f:6e:
                    27:8b:36:e3:12:57:53:6a:cf:a6:e2:3f:9b:80:64:
                    99:25:ad:a8:52:59:3e:90:14:d6:66:4f:d7:45:07:
                    b5:3b:b0:19:75:92:aa:a6:de:13:bb:2b:c5:e1:78:
                    ed:60:c2:d2:97:04:af:0d:95:e2:93:90:b4:64:7e:
                    4c:9f:06:38:6a:51:e3:4f:8e:9f:f3:61:b3:ff:09:
                    61:78:68:74:b8:29:ca:b9:e1:a0:5e:bf:77:c8:a4:
                    64:65:00:58:4d:77:18:98:5a:f9:71:53:6b:a3:21:
                    cd:ee:22:ca:27:bf:4e:02:c9:f0:a0:42:dc:0d:bd:
                    5f:bd:9c:55:17:1a:c9:81:7f:aa:09:ce:3d:ff:bd:
                    f2:a4:22:91:b4:3c:b6:c1:d2:9f:8a:ca:36:e6:24:
                    82:eb:2b:40:dc:d7:05:96:69:19:1c:3b:8b:8f:41:
                    e2:8e:f9:73:74:6d:9e:70:2e:e2:df:00:41:71:8c:
                    88:71:5a:2d:63:23:a7:1d:af:30:a1:e7:21:46:97:
                    2c:54:af:47:71:ed:50:b0:7e:84:3f:1f:ec:20:12:
                    0f:a3:cc:35:0a:3f:b8:8d:64:6f:4e:5b:09:56:11:
                    30:ab:4f:d2:0f:e4:ae:16:0c:44:2b:ee:2d:a8:e2:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:06:4F:06:63:D3:70:29:30:73:3D:9D:2A:87:0A:44:C2:76:95
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:4c:ce:0c:cf:83:2f:41:7e:dc:72:a5:7e:49:d4:fe:0c:37:
         62:e9:8c:3f:7c:8a:58:bf:ab:1c:7d:30:4a:a5:98:69:0f:5e:
         d6:df:75:0f:eb:7c:38:36:ab:7b:24:ee:a6:27:71:81:df:45:
         40:14:69:1c:6a:e5:c6:dd:4e:97:76:d3:d8:ba:24:01:07:59:
         5f:2f:88:96:ba:83:17:cd:ed:d5:b1:e4:cf:71:28:46:27:28:
         c7:b4:57:b9:a4:46:65:91:cd:99:07:05:35:aa:b1:46:68:8c:
         a5:9c:7c:21:73:ec:cd:47:99:46:8c:93:d0:d3:51:8a:20:66:
         a5:14:d3:46:b3:62:25:d1:6f:ca:37:f5:63:37:bf:a6:d7:59:
         58:2e:91:00:12:d3:7b:7d:b9:81:98:38:b3:fb:af:5c:eb:53:
         5f:3e:65:22:f8:b5:3e:bd:8d:b9:86:49:7c:15:62:c5:6c:fa:
         20:49:29:19:00:32:6a:1e:d0:29:ed:e1:82:c0:e0:9f:ff:47:
         f9:1c:5a:cd:cd:af:6f:5d:93:1b:d1:19:93:29:1d:ac:f4:ce:
         a8:2e:3e:55:54:77:37:e9:aa:4e:b4:e2:85:f9:08:d3:44:e3:
         bf:1b:22:41:f1:88:4e:f4:17:87:14:d5:49:6c:5a:e5:2a:ea:
         98:2a:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:45:01 2025 by rpki-client