Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa
File:                     3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa (raw, json)
Hash identifier:          C0qRBuaLQw6r0d5YR1YifSj4/kuBHAuL0ocuy4t7uZg=
Subject key identifier:   00:5D:12:1D:59:0C:E7:77:B7:A0:3E:CF:FF:66:1F:F7:B1:31:32:08
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       1DFECF6E0DEB2CF6CE2054A8F12910FA90F509F7
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa
Signing time:             Thu 06 Mar 2025 20:00:01 +0000
ROA not before:           Thu 06 Mar 2025 19:55:01 +0000
ROA not after:            Fri 06 Mar 2026 20:00:01 +0000
asID:                     28283
IP address blocks:        187.103.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:cf:6e:0d:eb:2c:f6:ce:20:54:a8:f1:29:10:fa:90:f5:09:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Mar  6 19:55:01 2025 GMT
            Not After : Mar  6 20:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:ff:ee:ca:0e:cf:f3:fe:43:4a:a3:58:80:
                    f5:8b:94:f2:21:e9:0d:01:f2:37:1c:ab:67:62:a0:
                    19:02:4f:79:81:f8:ce:de:ef:36:23:14:66:a9:6b:
                    cc:41:bc:fa:4f:df:b0:39:41:b2:70:17:9b:ba:55:
                    47:96:d0:89:60:dd:e4:a2:52:e7:e7:bf:b3:4b:37:
                    34:c3:fd:b8:e8:af:16:01:cc:d7:20:af:8c:39:f4:
                    8f:85:5f:41:91:fa:7a:37:e5:90:fc:9c:dc:a8:09:
                    c2:8c:ab:9b:bc:5e:be:d5:e0:59:55:af:e0:cd:8f:
                    98:78:0e:6f:ab:e9:f5:00:e3:05:a2:b1:b2:2f:85:
                    ca:a1:0a:0e:4c:88:a1:14:fe:52:9a:50:fd:cd:be:
                    ec:e5:06:42:40:33:2f:b6:62:0a:69:dd:41:20:85:
                    3c:c5:d3:63:1e:92:9f:0f:a7:50:c6:50:57:fa:35:
                    94:cb:c9:ac:02:9b:c4:d8:c7:73:be:5d:59:c1:d1:
                    de:e7:85:9b:1d:2b:bf:60:36:bf:19:fa:26:13:47:
                    dc:dd:e9:12:72:a5:6b:bf:9a:99:1d:96:77:9d:9a:
                    33:39:84:c3:c0:0a:39:4b:3c:f3:e5:76:73:3f:5d:
                    b7:95:69:2b:a1:13:4d:1b:d8:9f:55:eb:b3:ec:49:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5D:12:1D:59:0C:E7:77:B7:A0:3E:CF:FF:66:1F:F7:B1:31:32:08
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:e7:36:47:84:b1:e7:51:32:9a:32:6e:76:1d:4c:84:7b:
         90:3c:d6:34:45:58:11:bc:54:3b:00:8b:9e:88:aa:d5:a9:b5:
         6e:f9:70:c4:05:e7:53:ce:95:fd:f5:7d:ed:89:9c:6b:92:30:
         56:01:8c:13:2f:5e:2d:36:68:95:fe:ca:6a:dc:e6:04:b7:e2:
         3e:01:88:18:b4:df:23:7b:d9:bd:44:1c:d9:dd:ac:7b:52:52:
         67:85:4a:9a:a2:18:0a:bc:87:84:99:b8:fa:7a:3a:96:33:59:
         15:a0:fe:0a:33:9e:c2:48:28:e5:cd:9c:90:3f:e4:84:10:14:
         c6:e5:2d:a3:d0:01:9c:88:b4:22:17:ed:69:f7:83:f9:ee:74:
         bf:89:ed:aa:b1:0e:3c:93:c5:6b:61:b1:e7:0f:94:70:9c:77:
         8e:13:9b:91:df:82:02:6a:05:37:72:fc:1d:25:6f:5f:53:a2:
         8b:77:ae:c4:97:e6:87:c8:5e:6e:0a:4d:9e:1a:c5:42:6f:2f:
         99:00:61:98:95:65:cd:10:5a:e0:99:13:7e:05:51:ee:37:7b:
         94:f8:4c:2d:21:54:33:e6:e4:f2:20:9e:41:5d:4f:27:11:9a:
         9b:8f:26:81:ea:7c:8c:1e:81:19:15:76:5e:80:39:ff:2c:0b:
         a6:c0:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:56 2025 by rpki-client