Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa
File:                     3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa (raw, json)
Hash identifier:          jOaa9Y6B1wldYTqunC0ifArH1I/MagZETYt4EwF5yq0=
Subject key identifier:   5F:90:71:23:C5:BA:10:83:D8:B5:48:71:2E:5D:7A:EC:1F:66:A8:57
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       7294214795A06092B4263A8BF68BE76AB8D9D2A0
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa
Signing time:             Wed 09 Jul 2025 18:36:39 +0000
ROA not before:           Wed 09 Jul 2025 18:31:39 +0000
ROA not after:            Wed 08 Jul 2026 18:36:39 +0000
asID:                     271680
IP address blocks:        187.111.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 10:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:21:47:95:a0:60:92:b4:26:3a:8b:f6:8b:e7:6a:b8:d9:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Jul  9 18:31:39 2025 GMT
            Not After : Jul  8 18:36:39 2026 GMT
        Subject: CN=5F907123C5BA1083D8B548712E5D7AEC1F66A857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:da:93:f1:de:e4:22:e2:30:14:cc:3d:38:
                    d2:f2:9a:cc:af:c3:41:bf:05:69:3d:83:3c:85:02:
                    6c:67:72:78:ca:81:6e:b0:8c:35:d5:f0:69:cd:14:
                    0e:ca:de:07:f6:87:cf:50:cd:c8:6f:e9:3f:11:01:
                    e9:9e:91:2a:48:40:66:59:d3:dd:54:0c:d0:66:a4:
                    49:8a:74:28:ef:bc:41:e6:65:ec:f8:38:7a:00:9c:
                    34:58:b3:ff:87:4f:95:6f:8c:d3:5a:1c:aa:62:87:
                    5b:07:3c:de:66:8d:2c:d5:67:74:6b:2d:02:3c:44:
                    56:c3:5d:34:86:cc:e7:4c:bd:9f:e7:a7:97:ff:6a:
                    86:cd:aa:59:1b:fb:f3:4b:1f:01:b5:dc:d7:f6:2d:
                    31:06:cb:d4:70:61:e6:f9:07:a5:b8:54:6c:87:fe:
                    79:0a:be:39:46:04:7a:3b:98:60:80:3f:aa:ec:c4:
                    cd:41:87:d7:df:5a:5b:3c:f2:8c:23:1e:bb:f7:8e:
                    ae:8d:66:0c:0a:e8:0a:bd:bf:fc:e3:6e:dd:76:7d:
                    ad:a6:b7:3d:83:40:4c:13:5a:8b:9f:a3:78:24:d0:
                    84:1f:7e:bc:6e:d2:d4:8d:38:51:7c:b9:73:ad:de:
                    9f:ec:a3:be:4d:fc:ed:51:96:12:be:02:22:c3:62:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:90:71:23:C5:BA:10:83:D8:B5:48:71:2E:5D:7A:EC:1F:66:A8:57
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:d9:80:04:72:7b:b3:a2:54:0f:3a:94:30:0f:b5:ef:a0:
         8b:a0:20:94:44:66:a0:b1:2b:ba:e4:f1:2c:ae:44:99:50:40:
         1d:ad:ae:cc:f8:b1:9e:4e:3c:60:b3:4d:37:77:94:64:7b:81:
         95:7c:e2:b1:ba:3a:61:68:3e:9c:39:b2:50:53:78:43:7e:2a:
         de:23:af:30:3b:13:45:49:99:0a:cc:9f:b6:8f:0b:12:60:e8:
         80:7d:a5:90:a7:77:93:08:07:1e:7e:22:ec:bb:89:ab:13:a4:
         d8:81:58:2b:47:b7:7b:53:ec:d9:63:86:f7:ef:3e:52:66:16:
         1e:e9:20:02:b2:c5:3b:49:ff:a7:1e:25:50:54:c3:02:6d:45:
         74:d7:fb:6a:32:aa:05:ad:2c:73:76:1a:e1:ff:a0:3f:55:4f:
         c3:65:99:d5:89:c3:6e:6c:10:0b:16:93:aa:f7:2c:22:99:d6:
         e5:2b:38:fd:7e:62:af:b2:a5:6a:eb:6d:f2:b1:80:4b:b8:e6:
         09:47:00:02:ea:20:60:4b:d7:4a:f7:bd:04:50:9d:07:8e:77:
         07:a1:38:26:f7:b6:07:39:bb:19:72:19:7c:39:63:19:d2:89:
         20:cb:3c:5d:21:41:e9:56:7e:c0:fe:5d:8f:c7:90:f8:8f:d7:
         f6:76:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:48:31 2025 by rpki-client