Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32342d3234203d3e20323730353936.roa
File:                     3138372e31372e3133362e302f32342d3234203d3e20323730353936.roa (raw, json)
Hash identifier:          NL3ZM84T6pIN4OwVhL02v7+5tAL6rFzqYAuHJZC8uaA=
Subject key identifier:   35:13:64:FA:CA:FC:06:66:BB:C3:56:80:41:55:08:AB:D7:AF:A8:27
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       1E69F8F69E9462247B569E433180E1F2856A1B04
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32342d3234203d3e20323730353936.roa
Signing time:             Mon 14 Apr 2025 21:15:29 +0000
ROA not before:           Mon 14 Apr 2025 21:10:29 +0000
ROA not after:            Mon 13 Apr 2026 21:15:29 +0000
asID:                     270596
IP address blocks:        187.17.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 20:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:69:f8:f6:9e:94:62:24:7b:56:9e:43:31:80:e1:f2:85:6a:1b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Apr 14 21:10:29 2025 GMT
            Not After : Apr 13 21:15:29 2026 GMT
        Subject: CN=351364FACAFC0666BBC35680415508ABD7AFA827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:23:5f:40:8e:7c:7a:d4:d1:cd:d4:27:c3:
                    a3:e6:89:d7:2f:02:10:31:dd:b7:8f:96:d5:70:0e:
                    70:bd:af:f1:78:90:81:49:ed:c0:30:4c:34:1a:4a:
                    f5:93:f9:dc:b5:67:e6:a4:b2:ef:67:73:de:e9:75:
                    98:15:06:78:b9:37:6a:ab:80:1f:28:cf:7c:58:2e:
                    ea:24:65:81:a9:57:6c:ed:ce:f2:df:f1:b8:42:80:
                    3b:e0:c4:42:01:2c:c9:ae:89:ec:45:c9:16:61:3d:
                    19:19:0c:9c:cb:60:f3:ca:7a:c0:16:00:b5:e5:31:
                    6d:1d:a0:6f:10:0c:af:c4:0e:4f:d7:cb:c5:44:6a:
                    f0:c8:04:7d:cd:eb:e2:22:eb:8d:18:de:a2:ea:90:
                    18:a4:b9:f4:db:34:71:c3:42:5e:e0:20:ca:7d:7f:
                    ac:26:1b:1b:91:6e:00:01:2f:7d:d9:df:54:17:77:
                    9e:94:48:50:80:0f:02:c5:6a:19:b2:69:9d:30:09:
                    65:52:6b:3f:c3:d6:93:da:5c:b2:85:28:ce:ad:e9:
                    0d:98:eb:46:e2:53:69:50:d0:cb:ae:72:9d:b4:ca:
                    6f:82:f2:6d:98:b0:7c:59:a7:0a:02:69:ec:a5:b7:
                    f7:26:c6:38:71:d1:58:b9:3a:4d:88:d1:c4:ef:f8:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:64:FA:CA:FC:06:66:BB:C3:56:80:41:55:08:AB:D7:AF:A8:27
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32342d3234203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:b1:e6:f5:e1:ca:08:85:5c:0d:53:02:b3:78:65:4c:19:
         70:e9:5f:5f:a1:00:62:ee:6e:d5:97:16:63:30:8e:2a:e2:5e:
         eb:1a:32:5a:cd:bb:b0:74:5d:46:09:0a:8e:3f:8e:79:22:68:
         fa:55:59:5d:71:3c:d1:51:fd:d6:5a:95:97:14:f6:86:7a:32:
         55:35:dc:f5:b6:c9:b0:9e:08:17:d6:7e:55:a8:ef:0c:a4:4f:
         38:ed:a8:64:f7:d1:9e:f0:1f:06:50:48:90:eb:c1:0a:a9:22:
         44:17:74:3b:00:3a:a0:7e:87:b1:7f:13:b5:87:35:17:fd:10:
         09:66:59:d6:d1:09:f3:a3:a2:06:71:8a:98:96:d7:7f:5b:96:
         4a:e9:c9:25:f9:ea:60:96:b0:6c:78:0b:ba:69:da:8e:d9:a3:
         ce:9e:26:ba:56:bc:52:4f:17:61:2c:3d:9c:62:95:cb:16:ca:
         1a:17:ed:d8:be:07:3a:27:c0:0a:98:aa:21:e6:06:c4:e1:59:
         dc:81:ef:c7:94:23:f8:d5:51:b6:7a:5c:51:a2:9a:d4:82:ce:
         df:a0:e1:45:2c:39:83:36:58:20:d0:be:bf:b4:9a:43:67:bc:
         67:ab:66:bb:e3:84:4b:b3:9c:54:62:72:02:01:81:f9:c6:0b:
         38:35:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:35:14 2025 by rpki-client