Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
File:                     3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa (raw, json)
Hash identifier:          apdYYevzEoUG3IqrwsIQEnZunLeuRxzqKQOORC+QZVA=
Subject key identifier:   D1:9E:56:DB:DD:07:27:CA:FF:C2:BD:69:55:F7:CC:4B:C6:26:47:32
Certificate issuer:       /CN=18F5B289B6D58680303617EDD2B4A305F800BC37
Certificate serial:       758735AD1B81053D4A1194514B504229C18FD0FE
Authority key identifier: 18:F5:B2:89:B6:D5:86:80:30:36:17:ED:D2:B4:A3:05:F8:00:BC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18F5B289B6D58680303617EDD2B4A305F800BC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
Signing time:             Fri 07 Feb 2025 16:21:57 +0000
ROA not before:           Fri 07 Feb 2025 16:16:57 +0000
ROA not after:            Fri 06 Feb 2026 16:21:57 +0000
asID:                     270962
IP address blocks:        187.84.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/18F5B289B6D58680303617EDD2B4A305F800BC37.crl
                          rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/18F5B289B6D58680303617EDD2B4A305F800BC37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18F5B289B6D58680303617EDD2B4A305F800BC37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:35:ad:1b:81:05:3d:4a:11:94:51:4b:50:42:29:c1:8f:d0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F5B289B6D58680303617EDD2B4A305F800BC37
        Validity
            Not Before: Feb  7 16:16:57 2025 GMT
            Not After : Feb  6 16:21:57 2026 GMT
        Subject: CN=D19E56DBDD0727CAFFC2BD6955F7CC4BC6264732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:09:fb:2d:ce:5c:c2:3e:77:e8:41:b3:c8:
                    ae:52:33:e6:30:a9:af:0d:94:af:a7:e9:43:1f:b6:
                    65:07:9f:8e:94:77:c3:d1:d4:21:1a:7e:62:83:e1:
                    21:98:b7:db:56:5a:a3:3a:8c:fb:5c:f1:7b:d4:78:
                    1f:33:f3:11:40:9b:23:18:b8:91:eb:22:10:c0:c8:
                    3f:d2:1a:cd:91:89:1e:af:93:90:09:a2:4d:92:ba:
                    11:37:75:b3:4b:82:b4:bd:30:79:92:44:ce:dc:b0:
                    ee:69:19:7a:1a:b9:3f:d6:ad:f1:3f:4b:c7:54:f5:
                    78:f7:a6:47:5d:af:c4:0a:61:f0:b0:77:ec:e7:5c:
                    00:17:52:8c:44:63:06:1b:07:5b:b7:12:d5:c6:a3:
                    b4:09:22:68:16:73:6e:1a:d7:55:23:68:e2:a1:2d:
                    8a:d8:41:1c:c2:c8:54:42:f4:ae:32:a1:48:9e:6f:
                    3e:89:3c:f9:0d:ac:d2:e6:43:4b:80:6c:13:61:67:
                    1a:b2:1f:01:09:f5:b0:03:e1:ff:11:a6:f0:a2:6b:
                    d9:2b:79:30:cc:50:07:00:aa:6b:7a:e3:67:79:be:
                    85:98:ea:f5:af:d2:f7:8d:e2:8c:8f:55:49:72:f4:
                    89:c5:d2:c6:06:ce:33:5d:7b:af:b8:6a:6d:96:fb:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:56:DB:DD:07:27:CA:FF:C2:BD:69:55:F7:CC:4B:C6:26:47:32
            X509v3 Authority Key Identifier:
                keyid:18:F5:B2:89:B6:D5:86:80:30:36:17:ED:D2:B4:A3:05:F8:00:BC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/18F5B289B6D58680303617EDD2B4A305F800BC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18F5B289B6D58680303617EDD2B4A305F800BC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:60:00:3d:69:2c:36:b8:40:f1:9e:46:c6:43:ad:74:79:
         5e:eb:37:e4:24:99:78:3f:81:ab:6c:bf:a4:ec:d8:58:98:ec:
         1c:f6:a0:76:69:b7:48:bb:74:12:04:11:63:18:cd:52:fb:13:
         a2:05:1a:9c:e9:1b:f6:43:90:a5:45:a9:82:47:48:98:00:7b:
         81:a4:77:cb:65:5d:85:b8:5d:23:62:66:e8:6d:ff:e6:99:f4:
         91:46:88:2c:d9:bd:95:74:e6:b3:50:6e:28:d4:10:fa:87:54:
         b3:f9:85:96:8d:86:f8:aa:34:19:20:08:71:6e:3d:e6:dc:f7:
         58:44:9b:31:bb:53:db:2b:70:66:61:18:d6:92:44:1b:7a:56:
         92:5f:de:1d:ff:91:f5:e3:0d:dd:53:99:bd:21:ae:a6:92:30:
         55:9a:70:38:61:7f:6a:4b:f6:76:61:48:90:e6:d2:87:c7:5c:
         37:38:98:e4:e9:bb:53:17:18:bc:e4:3d:62:d1:d0:94:41:02:
         2a:35:8f:8d:0a:2d:15:f6:6f:92:d8:48:77:be:af:83:3a:09:
         1f:22:0c:0b:04:29:9e:ce:4f:2c:14:c6:48:22:0b:14:0a:ab:
         fd:ee:17:8c:53:5f:8a:78:81:50:ba:f6:95:cb:0e:56:3c:0d:
         67:48:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:51:42 2025 by rpki-client