Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa
File:                     3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (raw, json)
Hash identifier:          viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=
Subject key identifier:   AB:E5:D6:36:00:33:9F:BD:CC:07:B4:50:39:3A:DE:81:F4:BC:64:21
Certificate issuer:       /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
Certificate serial:       452851792F25917FBD8C333CC2842E68B9B14AA8
Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa
Signing time:             Tue 18 Mar 2025 18:22:12 +0000
ROA not before:           Tue 18 Mar 2025 18:17:12 +0000
ROA not after:            Tue 17 Mar 2026 18:22:12 +0000
asID:                     262734
IP address blocks:        189.84.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl
                          rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:28:51:79:2f:25:91:7f:bd:8c:33:3c:c2:84:2e:68:b9:b1:4a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
        Validity
            Not Before: Mar 18 18:17:12 2025 GMT
            Not After : Mar 17 18:22:12 2026 GMT
        Subject: CN=ABE5D63600339FBDCC07B450393ADE81F4BC6421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:c1:65:42:e9:e7:26:f3:c6:5e:84:cb:9f:
                    ac:4e:54:cc:70:7d:fc:44:dd:f0:56:ee:23:ea:d6:
                    48:32:12:a2:70:66:5a:82:0d:a5:be:71:13:f0:e2:
                    5b:85:8e:26:ab:2d:84:87:48:ab:29:96:98:44:dd:
                    b7:d2:fd:94:9f:2c:6f:d0:99:f5:d7:2d:8e:43:f5:
                    73:f5:8b:6b:c9:95:88:d8:5d:82:81:97:01:34:41:
                    d6:a5:2d:44:dc:b2:6a:36:1c:67:f4:cd:29:f6:64:
                    7b:52:41:82:31:4e:26:a7:8e:e8:12:9d:83:78:a2:
                    6f:13:10:ec:4d:46:aa:f6:dc:60:a8:81:a8:62:b3:
                    69:6d:3e:fa:e5:1c:90:1a:06:00:80:25:49:18:6f:
                    09:92:39:4a:b8:4f:8d:6b:07:9a:51:e0:ac:8d:0c:
                    a2:93:a1:01:11:f9:d5:b7:73:d7:8b:a4:6f:6b:07:
                    51:1a:b7:72:0a:3d:14:e6:19:22:72:3b:39:76:b7:
                    e2:1b:91:61:3f:bb:8f:55:62:35:9f:81:a0:3a:05:
                    08:fb:4e:b5:5a:69:d0:aa:e5:3e:1e:45:b8:8e:b6:
                    c5:1f:8f:c3:3f:f2:39:e7:eb:1c:43:93:bf:c5:b1:
                    89:77:96:a6:64:f6:b1:b6:96:33:31:83:7d:54:bb:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:D6:36:00:33:9F:BD:CC:07:B4:50:39:3A:DE:81:F4:BC:64:21
            X509v3 Authority Key Identifier:
                keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:43:87:cf:e0:1b:91:07:80:f6:61:09:12:48:36:11:3b:
         80:67:d2:0e:eb:9a:db:02:93:a5:2c:fc:cf:8c:c6:9d:23:b0:
         f4:1d:f2:dc:08:1d:e0:a3:41:12:24:d7:a8:1b:b5:d6:af:13:
         98:7e:20:d8:38:92:d4:f8:92:38:10:5f:27:b8:3b:18:0e:12:
         6c:0e:c2:97:95:1e:2f:77:e3:51:66:d0:6e:46:f9:a0:57:b9:
         30:42:02:3f:1e:e2:5e:27:83:0c:be:0b:41:e2:e0:2c:b1:22:
         f8:b4:54:be:5a:95:c2:6f:2c:3d:6f:85:1e:e1:f3:35:03:61:
         04:0a:72:b8:83:a6:e7:67:fd:95:bd:ec:22:f0:5f:96:65:57:
         24:cd:04:92:7d:9d:3d:61:59:f6:8a:7e:39:47:42:c6:99:e3:
         68:9a:d3:e1:b7:f7:ae:ba:c8:cf:92:39:a6:93:99:4d:f3:f9:
         22:19:b8:08:0e:5b:c4:cf:c9:19:29:34:83:89:04:ad:63:d7:
         1f:2a:1f:de:ff:fd:8d:ab:a2:e9:77:e3:a4:ea:3f:d0:99:2b:
         e2:92:17:03:92:96:ef:05:e9:a1:5a:28:b1:74:10:f4:13:50:
         6a:de:c5:dd:2b:82:12:f7:d0:01:50:8a:ed:9e:de:26:0a:25:
         d2:f3:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:13:45 2025 by rpki-client