Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
File:                     3138372e34342e302e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier:          sgPVXn3CJ4qDmo0ILpgu0Y0u1OnQN+QQNXAnHa/XZPM=
Subject key identifier:   90:E4:FD:87:09:CF:89:F5:8B:FD:3B:01:FD:AA:8D:9D:F8:FC:45:FE
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       0939D5953A5EC2D09BE1CD4B480CB0D4ADE59215
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:18 +0000
ROA not before:           Mon 13 Jan 2025 13:27:18 +0000
ROA not after:            Mon 12 Jan 2026 13:32:18 +0000
asID:                     28202
IP address blocks:        187.44.0.0/18 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:d5:95:3a:5e:c2:d0:9b:e1:cd:4b:48:0c:b0:d4:ad:e5:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:18 2025 GMT
            Not After : Jan 12 13:32:18 2026 GMT
        Subject: CN=90E4FD8709CF89F58BFD3B01FDAA8D9DF8FC45FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:52:34:ca:c9:57:de:bc:8a:07:b2:b1:03:
                    89:8f:2b:18:eb:c7:db:0f:22:88:ef:c6:31:10:7b:
                    50:c3:ca:c7:21:5b:85:36:57:7a:1a:2c:80:46:eb:
                    4a:ba:58:04:ca:9a:65:63:83:ac:0e:bb:a6:35:f5:
                    62:14:8c:ad:55:7c:51:3f:7a:98:d7:85:09:de:49:
                    69:2b:d8:e6:f1:09:4d:0f:ac:c7:77:02:d1:b2:a4:
                    c1:9d:10:64:33:f0:a5:59:3d:3f:d9:9f:5f:e0:e1:
                    66:93:52:87:2a:9a:d6:69:8d:5c:11:73:16:43:6d:
                    1b:71:70:fc:20:02:6c:80:4e:9a:32:45:8c:2b:d3:
                    b6:be:11:8e:fb:1a:f0:19:5e:a1:22:33:23:45:21:
                    fa:cb:2b:99:34:89:44:d8:25:63:98:72:95:a0:7b:
                    d9:8e:3f:a1:37:52:d2:c5:3d:92:8f:22:1b:ea:02:
                    c8:c9:e0:4c:1c:ad:a2:46:e1:7e:a7:7c:9d:aa:a6:
                    ca:20:fd:50:3d:63:0a:ac:f5:ec:b2:9f:ad:08:a5:
                    b9:03:2f:40:84:56:24:b6:52:ec:0d:4d:08:02:32:
                    cf:71:74:5e:ae:02:23:0c:00:aa:16:90:c7:0c:f0:
                    4c:a1:b6:84:77:c0:f1:f2:b1:6a:e7:dc:81:ff:de:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E4:FD:87:09:CF:89:F5:8B:FD:3B:01:FD:AA:8D:9D:F8:FC:45:FE
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138372e34342e302e302f31382d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:09:41:ad:aa:3f:2b:89:4e:14:55:09:e0:3a:b8:64:59:40:
         d6:42:ee:41:e3:c7:e3:bd:e1:9e:6c:28:85:f6:31:e4:52:f9:
         37:f4:14:49:d3:c5:6e:8c:eb:37:0a:72:d0:d8:75:f0:c3:4f:
         ba:93:63:03:0a:ab:4e:b4:b3:d4:fb:fe:4e:c2:b1:19:0f:b6:
         1b:97:5d:5b:7e:7c:ea:24:ca:7d:78:0e:21:c6:0e:d0:e8:c9:
         a4:be:84:d3:c8:97:da:46:8b:cd:d6:e3:f1:3c:7a:02:e2:ca:
         51:f8:48:d9:ce:de:29:9c:29:76:0e:31:4b:95:57:8a:f5:1f:
         2c:14:b8:ac:08:0f:85:6e:de:49:87:52:65:a7:13:50:0f:cb:
         4e:7d:23:71:b1:2e:ef:79:6b:14:2c:58:11:a8:f2:49:aa:b8:
         53:bc:4c:a9:f2:c3:28:c0:89:e1:8e:38:78:86:0b:f8:dd:1c:
         83:e7:12:2b:f5:9a:ca:3d:08:44:00:76:a7:1e:2c:43:b3:98:
         8f:aa:3b:88:31:4f:db:fa:93:b5:3c:bd:14:2a:3c:a7:99:18:
         f7:13:76:d9:b1:7c:be:17:35:3a:b1:41:5c:2f:ed:38:b7:b1:
         7e:01:d8:97:37:6b:08:73:79:cb:ea:57:0f:fd:41:27:cf:e0:
         7a:42:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:08:19 2025 by rpki-client