Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          w+UQ2izANVaTQtBHpQKbD0YO7QLH9KoH2O2z1LPLjoo=
Subject key identifier:   58:6B:29:A1:B9:64:22:48:BC:2F:09:F8:5C:9B:A1:BE:41:73:F8:F1
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       413F46C4EFDB9E3EED388023D0B24BC4DC1877E2
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:43:02 +0000
ROA not before:           Wed 04 Dec 2024 15:38:02 +0000
ROA not after:            Wed 03 Dec 2025 15:43:02 +0000
asID:                     53153
IP address blocks:        187.61.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3f:46:c4:ef:db:9e:3e:ed:38:80:23:d0:b2:4b:c4:dc:18:77:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:38:02 2024 GMT
            Not After : Dec  3 15:43:02 2025 GMT
        Subject: CN=586B29A1B9642248BC2F09F85C9BA1BE4173F8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:0a:4a:7e:6a:90:fe:f7:c8:5e:ba:99:5d:
                    b7:ad:fd:4c:de:8c:a6:46:06:e7:72:08:99:ba:a4:
                    c6:17:57:33:68:94:f6:c6:c2:66:ee:49:96:53:bd:
                    38:96:04:0f:b4:a7:a6:e1:56:78:5b:dd:6f:1e:8c:
                    fe:24:5e:6f:ee:db:69:30:0a:2d:cc:b8:6b:90:f9:
                    29:1d:b2:c4:90:f6:60:10:e0:8b:05:0e:b9:22:e8:
                    e8:74:ea:2f:28:c7:b5:a6:2e:24:27:02:1f:32:8d:
                    57:e2:cc:bd:d7:71:3a:3b:2f:ba:8f:60:8a:49:d7:
                    d3:72:b5:f7:8a:3e:8c:09:42:32:27:fc:11:59:00:
                    0b:9c:22:51:7e:3b:dd:06:00:72:3d:27:ac:69:47:
                    e4:3b:2e:88:db:ae:99:58:24:0e:21:ff:18:21:6a:
                    e2:12:1d:46:45:a3:25:ce:ce:fc:ad:78:f8:df:4a:
                    96:76:ed:4e:a2:ee:34:77:1f:0e:de:b9:3d:54:53:
                    a3:f8:31:23:17:da:a3:98:47:6d:f2:20:75:5c:b8:
                    dd:0b:46:cd:2e:ad:55:e9:a1:7a:c3:5d:b8:80:e3:
                    f2:c1:5c:ae:8f:6e:21:63:93:ab:d9:2b:eb:94:0f:
                    98:9d:4f:5b:7a:bb:c6:c5:ac:51:53:19:08:82:c3:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6B:29:A1:B9:64:22:48:BC:2F:09:F8:5C:9B:A1:BE:41:73:F8:F1
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:99:b5:f9:96:d9:c6:78:22:14:92:0c:8d:f9:37:3a:8a:
         f5:7a:b7:48:21:56:9f:94:6e:b8:11:bb:5a:48:f9:80:c9:7d:
         ba:c5:89:ac:ba:7b:9c:37:93:59:7a:0c:a8:55:cc:a9:9c:c6:
         f9:8f:1f:7d:ac:3a:6d:a0:aa:81:e2:d0:ac:8f:62:6e:7c:63:
         2c:fa:29:aa:42:7a:3f:0b:04:63:0d:b0:c6:5e:fd:ad:92:f7:
         aa:79:db:6d:3d:04:6e:87:21:c7:21:ae:b8:8e:d7:6c:41:d3:
         c5:5e:e4:a0:a9:5c:4c:c7:0f:b8:e9:7d:0d:fe:25:6c:6d:5a:
         59:e9:78:98:95:f5:03:3e:f8:5f:d1:10:51:8e:88:f3:25:7f:
         f9:06:0c:2a:c8:b2:51:72:fa:0a:d5:b5:39:e0:c9:ae:b6:4c:
         19:0a:bf:75:22:91:06:bb:49:b4:d9:57:96:08:e8:73:54:0e:
         74:a4:33:e3:cb:93:d5:26:1d:a6:83:de:fe:fc:21:b8:62:f0:
         cd:8d:b9:8e:03:3c:4d:b1:34:41:75:0f:e4:ea:b6:0d:bc:4f:
         3a:0e:e0:bc:ca:24:f8:f6:8f:ef:be:ae:d2:c8:75:7f:ec:6a:
         1f:93:75:ff:c0:4a:f8:e3:f3:a7:93:93:d9:4b:5d:36:ad:1f:
         9d:df:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:07 2025 by rpki-client