Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3332203d3e203238313435.roa
File:                     3138372e34392e3132382e302f32302d3332203d3e203238313435.roa (raw, json)
Hash identifier:          B5P0Yd/yA7nCcul2kq2Tm+ugfqo9xG13dNqYFnAXqXQ=
Subject key identifier:   DC:11:32:62:DB:88:0D:41:6A:D7:B6:E9:E9:EB:47:8A:3F:8A:C8:52
Certificate issuer:       /CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
Certificate serial:       4CCED2219607A3B0756D809BCCAFF87DDEC285AD
Authority key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3332203d3e203238313435.roa
Signing time:             Thu 01 May 2025 23:52:20 +0000
ROA not before:           Thu 01 May 2025 23:47:20 +0000
ROA not after:            Thu 30 Apr 2026 23:52:20 +0000
asID:                     28145
IP address blocks:        187.49.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 03:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ce:d2:21:96:07:a3:b0:75:6d:80:9b:cc:af:f8:7d:de:c2:85:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
        Validity
            Not Before: May  1 23:47:20 2025 GMT
            Not After : Apr 30 23:52:20 2026 GMT
        Subject: CN=DC113262DB880D416AD7B6E9E9EB478A3F8AC852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:cd:aa:b1:06:2f:cd:73:56:ca:ad:1a:2c:
                    a4:8f:6f:bd:6c:7e:5f:3e:44:f7:3b:d6:dd:db:f1:
                    f1:25:43:6a:9b:65:1d:05:fc:9b:aa:b7:0e:25:31:
                    be:38:4c:46:48:3a:05:a2:08:6f:9f:76:1d:c9:28:
                    71:bb:5e:6c:c9:31:7e:54:9f:bb:f9:39:a0:86:5a:
                    da:88:41:70:01:9b:be:ee:9b:4a:9d:2a:3f:b5:5d:
                    a8:5a:9f:9b:81:77:8f:5b:38:28:5c:7c:01:7c:83:
                    5a:93:52:c1:6d:43:f3:c8:1d:32:c8:3d:5c:28:ce:
                    a3:af:99:62:e9:21:08:3b:3e:b3:65:a8:de:00:98:
                    1e:01:96:a0:e4:f3:88:f5:e4:dd:0a:0f:a4:81:96:
                    14:3f:c5:86:b5:9c:7c:87:5a:d7:53:93:92:62:03:
                    07:52:e9:8e:3f:27:6f:f9:86:9b:98:eb:ad:28:cf:
                    c6:aa:d7:63:79:f1:37:72:f7:27:e2:d8:a5:a6:b6:
                    24:8c:01:c0:46:f2:6f:1f:5b:c5:08:fb:f6:f6:5b:
                    a7:a6:54:36:40:c5:98:2f:cd:7e:49:05:f8:4f:a8:
                    86:43:13:6b:a4:52:aa:99:cd:f5:25:46:8e:d7:19:
                    22:36:e1:76:89:5e:dd:f4:69:95:67:25:35:86:b8:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:11:32:62:DB:88:0D:41:6A:D7:B6:E9:E9:EB:47:8A:3F:8A:C8:52
            X509v3 Authority Key Identifier:
                keyid:64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3332203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:62:6d:06:0c:e0:8e:ea:32:dd:21:e3:df:5e:0c:6c:bb:23:
         03:39:59:47:54:e6:bd:f3:b1:40:ee:c7:c6:ac:7e:ac:db:6d:
         63:ef:5a:61:ca:1d:64:b7:13:51:7a:f4:fc:38:7d:a7:e1:30:
         12:98:d3:43:11:8a:00:ee:83:4a:80:77:37:d6:aa:48:64:10:
         bc:73:ad:91:94:c2:c4:45:4e:9d:bd:fa:4d:5e:db:52:e1:06:
         f7:21:ae:1f:d8:22:fb:f5:a0:76:69:14:f9:5c:86:29:a3:b8:
         61:7f:8c:1b:0a:0e:d9:e2:c0:0c:e4:86:2e:d6:93:1e:10:79:
         f8:b0:4f:64:10:18:af:b7:58:78:cf:d2:85:6e:df:f1:48:6b:
         69:e8:62:70:0b:54:ea:cd:01:b7:74:6a:18:3d:28:39:2c:45:
         2f:bf:60:18:db:46:9c:5a:05:7f:ae:b9:61:a5:d1:36:17:c4:
         62:74:dc:4b:77:70:33:7e:b5:77:af:83:c4:9d:88:c7:f8:21:
         27:cc:71:d1:fd:e6:48:77:ce:8f:17:66:55:f2:ca:69:2e:64:
         be:c9:0d:3d:e9:8d:2a:62:b9:02:db:36:15:56:03:39:c6:a1:
         d3:b2:fb:8f:ea:bb:f4:e3:29:a3:82:78:0a:6b:22:fa:91:98:
         41:40:6e:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTM7SIZYHo7B1bYCbzK/4fd7Cha0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ1QUMwQzk0OEE1RkY2MTg5RDlEQ0ZFRkExMzg4Njg1
NDg1QkVCMTAeFw0yNTA1MDEyMzQ3MjBaFw0yNjA0MzAyMzUyMjBaMDMxMTAvBgNV
BAMTKERDMTEzMjYyREI4ODBENDE2QUQ3QjZFOUU5RUI0NzhBM0Y4QUM4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGc2qsQYvzXNWyq0aLKSPb71s
fl8+RPc71t3b8fElQ2qbZR0F/Juqtw4lMb44TEZIOgWiCG+fdh3JKHG7XmzJMX5U
n7v5OaCGWtqIQXABm77um0qdKj+1Xahan5uBd49bOChcfAF8g1qTUsFtQ/PIHTLI
PVwozqOvmWLpIQg7PrNlqN4AmB4BlqDk84j15N0KD6SBlhQ/xYa1nHyHWtdTk5Ji
AwdS6Y4/J2/5hpuY660oz8aq12N58Tdy9yfi2KWmtiSMAcBG8m8fW8UI+/b2W6em
VDZAxZgvzX5JBfhPqIZDE2ukUqqZzfUlRo7XGSI24XaJXt30aZVnJTWGuPS/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3BEyYtuIDUFq17bp6etHij+KyFIwHwYDVR0j
BBgwFoAUZFrAyUil/2GJ2dz++hOIaFSFvrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx
RVUvMC82NDVBQzBDOTQ4QTVGRjYxODlEOURDRkVGQTEzODg2ODU0ODVCRUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NUFDMEM5NDhBNUZGNjE4
OUQ5RENGRUZBMTM4ODY4NTQ4NUJFQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXRmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAv
MzEzODM3MmUzNDM5MmUzMTMyMzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzGAMA0GCSqGSIb3DQEBCwUAA4IBAQCBYm0GDOCO
6jLdIePfXgxsuyMDOVlHVOa987FA7sfGrH6s221j71phyh1ktxNRevT8OH2n4TAS
mNNDEYoA7oNKgHc31qpIZBC8c62RlMLERU6dvfpNXttS4Qb3Ia4f2CL79aB2aRT5
XIYpo7hhf4wbCg7Z4sAM5IYu1pMeEHn4sE9kEBivt1h4z9KFbt/xSGtp6GJwC1Tq
zQG3dGoYPSg5LEUvv2AY20acWgV/rrlhpdE2F8RidNxLd3AzfrV3r4PEnYjH+CEn
zHHR/eZId86PF2ZV8sppLmS+yQ096Y0qYrkC2zYVVgM5xqHTsvuP6rv04ymjgngK
ayL6kZhBQG6C
-----END CERTIFICATE-----
Generated at Fri May 2 08:01:03 2025 by rpki-client