Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e38302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          87PTo/9+gceRthN+Bnonm/jWtUBGgZDP/VtQgEMZ9iM=
Subject key identifier:   CE:0E:1C:CF:49:CF:00:89:83:29:FB:E1:CB:92:33:6F:6C:CC:AE:9E
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       53C8A4787B38C766AE8C54780050D29D380A9AFF
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:43 +0000
ROA not before:           Wed 09 Jul 2025 13:59:43 +0000
ROA not after:            Wed 08 Jul 2026 14:04:43 +0000
asID:                     262444
IP address blocks:        187.63.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 09:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c8:a4:78:7b:38:c7:66:ae:8c:54:78:00:50:d2:9d:38:0a:9a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:43 2025 GMT
            Not After : Jul  8 14:04:43 2026 GMT
        Subject: CN=CE0E1CCF49CF00898329FBE1CB92336F6CCCAE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:6b:cc:cb:9c:c8:8f:19:ae:0b:ea:ed:1a:
                    b7:ba:3b:9d:9b:3c:57:a9:2f:ea:f9:e4:4d:10:f5:
                    1f:27:8c:0b:e1:45:59:0b:ff:bf:ad:3e:34:93:d3:
                    3d:22:e0:bd:1d:7c:99:0c:e7:73:ef:32:d1:d8:71:
                    3b:ac:21:1e:07:75:a0:4e:53:75:6f:a6:fc:47:85:
                    85:1b:13:73:e7:a5:74:44:7c:e6:ca:9c:94:10:51:
                    07:eb:06:02:c8:fb:0b:c8:9d:27:25:86:8d:66:ce:
                    01:f8:47:cb:08:9f:0f:66:a0:5f:bb:f0:59:92:ca:
                    29:1e:e4:10:6a:48:5e:cb:b1:aa:d6:b5:24:bc:93:
                    d7:b2:83:47:00:68:1f:40:5b:cb:fb:db:4c:37:b4:
                    cc:a2:95:05:66:6b:16:00:57:12:c5:a7:ed:8a:f1:
                    13:ba:c2:34:0e:b0:81:1a:61:f5:b8:da:0e:6f:43:
                    00:e2:51:a6:31:af:b8:65:c8:5c:16:94:4a:a2:63:
                    74:36:81:74:90:10:c9:41:91:ef:8b:75:4f:39:13:
                    67:4b:6d:a7:f5:74:f3:fe:39:f7:7a:95:53:13:7e:
                    8f:96:41:56:15:45:d4:40:ef:2c:88:c9:2c:8d:f3:
                    4b:a4:a9:02:fd:16:c3:29:1c:65:a7:10:ee:c8:e0:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:1C:CF:49:CF:00:89:83:29:FB:E1:CB:92:33:6F:6C:CC:AE:9E
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:cf:14:8d:57:d5:a2:80:9b:c9:87:1a:39:46:c5:de:bb:
         b7:a1:52:1a:60:d0:16:0d:d4:4a:39:46:43:a2:b7:85:ed:04:
         40:7c:73:b2:53:6a:09:8d:f2:59:f3:f2:ca:82:f6:af:74:f2:
         d6:bd:79:5e:d8:61:b3:a5:7f:87:7d:91:da:99:2b:00:9d:be:
         ec:c1:cc:02:6a:c8:69:d7:c0:0b:af:22:a5:65:e9:0d:d8:47:
         7c:aa:37:2f:01:dd:6c:49:bd:e9:90:b9:79:36:da:c6:ad:dc:
         8d:25:10:30:37:24:be:f5:c2:c9:1a:2a:90:3b:01:7e:88:d4:
         87:3b:9d:73:3c:ed:1b:59:33:29:50:7a:28:3f:aa:fd:83:27:
         26:a5:1b:a5:5e:49:0e:64:95:bc:db:34:dc:59:38:be:79:9c:
         57:8b:f8:8e:a9:50:45:c6:a9:75:fc:68:a2:1d:b0:02:8d:ee:
         9c:ca:74:93:7c:8b:cc:aa:43:3d:87:75:27:e2:a8:ca:a7:ba:
         1a:82:09:0a:69:ed:25:7c:3b:3a:a0:b8:8e:a0:d9:a5:64:13:
         60:17:53:ea:77:a4:0d:07:61:e2:a4:d5:35:d7:ac:ba:73:d4:
         a4:ef:d9:a3:e3:d2:66:53:93:94:5b:b3:2c:0c:b2:07:3c:bf:
         e3:ed:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:58 2025 by rpki-client