Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          01Vxm84ueO0k999Nl8NKLY7JydQuJJtAf4kfDGIYnUo=
Subject key identifier:   C3:A7:30:F4:2E:E3:E8:27:23:AD:4B:4A:E8:81:08:D3:55:CF:33:51
Certificate issuer:       /CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Certificate serial:       3DDAF38ECF70C3ED4358978413ACA22842BC053B
Authority key identifier: F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
Signing time:             Fri 23 May 2025 23:25:28 +0000
ROA not before:           Fri 23 May 2025 23:20:28 +0000
ROA not after:            Fri 22 May 2026 23:25:28 +0000
asID:                     270579
IP address blocks:        189.126.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:da:f3:8e:cf:70:c3:ed:43:58:97:84:13:ac:a2:28:42:bc:05:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
        Validity
            Not Before: May 23 23:20:28 2025 GMT
            Not After : May 22 23:25:28 2026 GMT
        Subject: CN=C3A730F42EE3E82723AD4B4AE88108D355CF3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:37:7a:61:83:7f:aa:e9:a3:a8:01:ff:32:
                    0f:7e:63:56:17:21:cb:c3:52:53:e7:61:8d:e4:e9:
                    40:ce:0c:9f:f3:6e:ed:8a:77:2f:16:81:19:df:d3:
                    da:1f:9e:c9:56:ef:e6:7b:83:fd:cc:9e:34:8c:ef:
                    98:d3:e1:16:98:67:51:87:05:e4:af:66:63:6f:7b:
                    cc:b4:18:c0:18:6b:98:28:0d:70:c5:43:7b:9f:d2:
                    5a:f4:1b:7a:61:61:18:28:e1:7b:f8:fd:13:d8:18:
                    3a:22:1a:a1:b1:fe:03:f3:4e:19:cf:3c:c2:fd:b5:
                    ef:26:7e:da:4e:fa:a9:82:a2:bd:94:aa:c9:c6:9c:
                    9e:ed:d2:17:22:1e:bb:77:6e:6c:91:1d:85:05:59:
                    b3:08:45:48:a5:78:39:24:7c:d7:e8:1b:5b:21:5c:
                    52:e6:fb:fe:7a:85:6c:73:2e:b6:ba:d2:cd:bb:6b:
                    19:b4:0c:a9:f3:fa:e8:ca:bb:f4:3b:e9:69:3e:b6:
                    b1:c8:8c:ed:26:87:ed:a5:b0:c0:48:ca:20:e0:8c:
                    56:49:9c:75:a0:b7:5d:b4:2a:3b:2f:13:4c:81:39:
                    c0:65:04:a6:ca:f7:a2:58:74:db:ed:c3:b1:14:40:
                    31:4a:6d:be:19:ff:8b:5b:4b:ae:dc:fb:4a:c4:46:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A7:30:F4:2E:E3:E8:27:23:AD:4B:4A:E8:81:08:D3:55:CF:33:51
            X509v3 Authority Key Identifier:
                keyid:F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:be:12:93:ea:9e:12:be:93:0c:91:05:1b:62:d9:06:70:
         d4:31:11:bf:c9:bf:c4:a6:d9:90:ed:4b:ed:60:ca:ca:85:7b:
         7a:25:1e:97:f2:7f:99:bd:e2:8d:cc:55:9e:14:82:8c:ba:2e:
         4a:ad:a2:da:51:1e:df:2c:9e:eb:86:0b:c6:0c:df:43:76:fb:
         27:f4:3b:55:0f:9a:83:d0:eb:89:21:0f:6d:70:88:4f:75:28:
         8e:a2:d4:25:d8:50:12:a4:11:a4:66:da:e8:d2:de:1f:17:9d:
         82:44:46:9e:e6:ce:35:cb:a9:a3:3c:f9:ab:17:f8:50:46:b3:
         e0:0a:c0:7b:6d:bf:78:fa:4e:b0:27:53:1e:b6:7f:48:42:ed:
         b8:41:4b:18:92:af:69:01:ea:14:17:f7:17:82:db:bc:31:fe:
         04:58:35:fa:24:89:dc:78:5d:2d:e2:32:00:75:dc:07:3b:0b:
         39:e8:64:86:e4:9a:34:27:83:6c:a2:d1:ab:ef:4c:3b:1e:30:
         8c:b4:4a:f8:6b:43:30:85:41:ac:0d:68:71:cb:be:39:1a:9a:
         45:a3:cb:48:5f:c7:77:70:eb:41:fa:e2:c6:f7:6c:2f:f4:29:
         b7:7f:52:94:cb:7c:20:33:cb:8c:d1:7f:2a:e2:7d:9f:91:dc:
         cb:bf:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:10:06 2025 by rpki-client