Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa
File:                     3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa (raw, json)
Hash identifier:          tHcr1bKutuxBDD819T5IWyBCEZRSM9nAumNDVCSqvQA=
Subject key identifier:   7C:A1:FE:B0:0D:90:40:40:D5:0D:0B:17:CE:2A:5F:13:3D:57:2D:D8
Certificate issuer:       /CN=0B87152C81608FF3E967A3FEF41277E924CC8816
Certificate serial:       0E033881E7F80635297BD9025D9DC02F8559A527
Authority key identifier: 0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa
Signing time:             Sat 11 Jan 2025 00:02:11 +0000
ROA not before:           Fri 10 Jan 2025 23:57:11 +0000
ROA not after:            Sat 10 Jan 2026 00:02:11 +0000
asID:                     270398
IP address blocks:        189.126.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl
                          rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:03:38:81:e7:f8:06:35:29:7b:d9:02:5d:9d:c0:2f:85:59:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B87152C81608FF3E967A3FEF41277E924CC8816
        Validity
            Not Before: Jan 10 23:57:11 2025 GMT
            Not After : Jan 10 00:02:11 2026 GMT
        Subject: CN=7CA1FEB00D904040D50D0B17CE2A5F133D572DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:28:03:8b:e5:08:fc:be:50:b1:41:a9:e6:
                    06:da:37:7d:0f:95:4b:78:1b:55:69:f9:71:d0:2f:
                    e1:11:87:79:67:e6:32:d5:15:f2:af:c8:0c:55:4e:
                    5e:96:d8:78:19:ec:e5:06:87:27:67:5b:6a:61:75:
                    bb:8f:8b:66:82:8a:46:10:44:12:63:19:ed:1c:9c:
                    1c:8f:ae:52:a9:fe:5d:7c:c4:84:07:60:45:bd:66:
                    c9:61:37:c1:7f:48:09:d3:59:98:41:43:39:31:a2:
                    1d:e4:93:18:ac:7e:a6:15:bc:ca:4e:2a:b7:16:be:
                    a2:1d:63:61:a5:96:ff:00:49:3a:3f:72:0d:74:2e:
                    82:ac:a5:a4:d0:a0:79:1e:fe:14:e1:93:d2:42:14:
                    3a:8e:99:61:e2:1d:a5:7f:c2:12:d9:e1:98:d6:28:
                    e0:76:59:e3:3f:0b:9c:fa:e6:cf:9f:be:3e:53:4f:
                    43:d8:cb:5b:60:62:01:35:82:81:f8:ad:4f:12:8a:
                    b0:5c:6c:02:b0:73:65:4e:ac:49:5a:fe:27:17:9c:
                    6b:2d:a5:d2:d5:fe:ab:d3:82:ac:d8:5f:f9:31:d5:
                    ff:4c:f4:d3:f3:b9:a3:8a:86:a0:28:42:e9:a4:9e:
                    66:5c:5b:89:6e:f4:c7:6f:eb:07:9a:1a:3d:37:7b:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:FE:B0:0D:90:40:40:D5:0D:0B:17:CE:2A:5F:13:3D:57:2D:D8
            X509v3 Authority Key Identifier:
                keyid:0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:6b:b5:78:79:ea:88:00:45:9a:27:e0:60:da:79:d4:b1:
         bc:91:69:f8:f0:0a:6e:ee:30:e2:92:2c:47:8e:1b:d7:6f:90:
         13:b9:b8:55:ee:8b:6d:1b:2f:83:db:2e:5a:98:16:64:62:33:
         e2:02:93:2c:60:67:f5:a0:4b:4b:a4:e1:09:0a:c3:e4:85:0e:
         85:3b:7d:0f:6b:fd:50:b0:54:8b:f8:5e:d9:64:be:8d:70:6b:
         7b:67:4e:30:13:3f:4a:58:83:71:c1:16:20:b0:98:91:42:68:
         20:fd:66:1b:07:64:71:90:c4:1c:c8:0c:2f:89:36:36:2c:ca:
         a9:1a:05:f0:2d:1a:f0:a5:42:21:94:a6:89:9a:4d:91:6a:41:
         29:5f:13:fc:ee:30:c1:b5:51:46:d6:7d:f0:15:b7:f6:e1:b8:
         87:e4:49:47:2e:8e:09:4f:03:4b:2b:af:10:9c:0a:89:69:2c:
         8d:63:21:3d:2d:54:a5:a7:3d:3d:5b:78:45:53:ee:ac:fb:1a:
         31:e8:6c:5f:6a:57:29:fc:63:a9:df:ec:62:a0:e1:bd:31:36:
         9c:84:e4:79:34:29:65:e4:e7:20:ac:b2:b2:d6:21:0b:64:ae:
         1c:b0:b1:26:6a:fe:d6:b7:68:2e:69:82:e9:23:ce:47:6f:9d:
         9c:f8:82:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDgM4gef4BjUpe9kCXZ3AL4VZpScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI4NzE1MkM4MTYwOEZGM0U5NjdBM0ZFRjQxMjc3RTky
NENDODgxNjAeFw0yNTAxMTAyMzU3MTFaFw0yNjAxMTAwMDAyMTFaMDMxMTAvBgNV
BAMTKDdDQTFGRUIwMEQ5MDQwNDBENTBEMEIxN0NFMkE1RjEzM0Q1NzJERDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9igDi+UI/L5QsUGp5gbaN30P
lUt4G1Vp+XHQL+ERh3ln5jLVFfKvyAxVTl6W2HgZ7OUGhydnW2phdbuPi2aCikYQ
RBJjGe0cnByPrlKp/l18xIQHYEW9ZslhN8F/SAnTWZhBQzkxoh3kkxisfqYVvMpO
KrcWvqIdY2Gllv8ASTo/cg10LoKspaTQoHke/hThk9JCFDqOmWHiHaV/whLZ4ZjW
KOB2WeM/C5z65s+fvj5TT0PYy1tgYgE1goH4rU8SirBcbAKwc2VOrEla/icXnGst
pdLV/qvTgqzYX/kx1f9M9NPzuaOKhqAoQumknmZcW4lu9Mdv6weaGj03ewFTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfKH+sA2QQEDVDQsXzipfEz1XLdgwHwYDVR0j
BBgwFoAUC4cVLIFgj/PpZ6P+9BJ36STMiBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTg3dHE0cXQ1djdtSmJyRW5jN0s4dlpvQkVuUTliamtEQmh0emZOcU1l
c3MvMS8wQjg3MTUyQzgxNjA4RkYzRTk2N0EzRkVGNDEyNzdFOTI0Q0M4ODE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCODcxNTJDODE2MDhGRjNF
OTY3QTNGRUY0MTI3N0U5MjRDQzg4MTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4N3RxNHF0NXY3bUpickVuYzdLOHZab0JFblE5YmprREJodHpmTnFNZXNzLzEv
MzEzODM5MmUzMTMyMzYyZTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG9fgowDQYJKoZIhvcNAQELBQADggEBAC4xa7V4
eeqIAEWaJ+Bg2nnUsbyRafjwCm7uMOKSLEeOG9dvkBO5uFXui20bL4PbLlqYFmRi
M+ICkyxgZ/WgS0uk4QkKw+SFDoU7fQ9r/VCwVIv4Xtlkvo1wa3tnTjATP0pYg3HB
FiCwmJFCaCD9ZhsHZHGQxBzIDC+JNjYsyqkaBfAtGvClQiGUpomaTZFqQSlfE/zu
MMG1UUbWffAVt/bhuIfkSUcujglPA0srrxCcColpLI1jIT0tVKWnPT1beEVT7qz7
GjHobF9qVyn8Y6nf7GKg4b0xNpyE5Hk0KWXk5yCssrLWIQtkrhywsSZq/ta3aC5p
gukjzkdvnZz4gpI=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:26:59 2025 by rpki-client