Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
File:                     3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          Iq9Imp3qaQEaGFQWqL4EpTLVcZyaAgjQqWljK8thbFo=
Subject key identifier:   5E:78:B4:DA:85:0B:E9:82:16:E6:E5:DE:20:0B:E7:39:A0:65:37:39
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       1F5527370E1298D18E288704A003C2CC1674BC5B
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     28292
IP address blocks:        189.124.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:55:27:37:0e:12:98:d1:8e:28:87:04:a0:03:c2:cc:16:74:bc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:25:d2:56:a2:98:dc:2e:6d:de:b8:36:97:
                    86:df:59:12:5f:3b:ba:2f:cf:72:2b:94:f8:57:09:
                    63:43:23:33:dc:a1:7d:72:09:73:26:4c:e5:78:da:
                    86:02:83:01:38:0a:d7:6f:10:dc:92:18:bf:2b:05:
                    15:30:3e:32:02:54:89:7f:55:b7:f9:5e:c2:db:4e:
                    45:d8:5b:6b:2d:86:9d:33:c1:ac:09:8c:e1:4e:74:
                    8c:c6:fa:30:a9:b7:aa:92:64:47:21:f6:91:f8:b4:
                    2f:46:b0:87:f6:95:24:6b:de:01:06:24:07:ca:2a:
                    5b:8e:00:77:d4:b6:54:74:bb:8f:ab:d8:e0:61:19:
                    b7:9a:40:e2:23:eb:61:9c:fe:8b:84:15:88:bc:4e:
                    da:f3:f1:25:f9:8c:4b:e3:62:47:26:7c:65:cc:39:
                    65:f9:71:e2:39:78:97:bc:1d:7f:ba:56:a2:e6:fc:
                    fc:c9:57:32:3b:10:ab:8f:a7:fc:1c:f3:da:f6:42:
                    18:8f:53:40:86:03:1b:35:e3:4d:26:19:0d:49:98:
                    05:ae:c9:bd:87:8a:7a:f4:69:e2:ed:83:73:09:13:
                    80:29:f5:3f:78:eb:b4:97:41:8e:b8:82:25:32:df:
                    8a:c3:92:63:74:95:19:a0:79:38:6f:8d:30:82:b6:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:B4:DA:85:0B:E9:82:16:E6:E5:DE:20:0B:E7:39:A0:65:37:39
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:99:ee:fc:4d:4a:17:b9:62:13:54:1b:7e:02:0c:e3:9c:61:
         83:0e:62:e4:91:ea:fc:d7:a8:42:0c:11:84:1a:d6:35:19:bc:
         9d:df:28:7b:b5:64:bf:90:0e:16:64:e1:5e:a0:bf:b6:da:45:
         f4:05:77:b9:c9:33:c4:f8:0c:81:bc:48:70:c4:61:bf:b6:66:
         b5:21:76:44:8e:3c:5a:ee:0e:d1:4f:ef:9b:3b:86:5f:45:f0:
         ba:36:c2:ae:0c:de:ee:cb:4c:db:45:cd:e8:f2:3e:31:a1:bc:
         bc:48:ae:1f:30:db:47:b6:c0:16:14:c4:3d:f3:db:96:f9:a1:
         cd:ab:4c:3a:dc:93:1a:19:51:19:07:fd:64:03:b4:e9:3e:17:
         21:18:ea:72:34:f6:a7:de:84:9c:35:06:dd:02:50:1f:02:bf:
         fb:48:f9:98:54:d1:ca:3a:84:08:69:d1:88:3c:8d:aa:de:c2:
         6a:84:23:5a:e9:c6:d9:47:f5:35:5e:b4:97:b0:46:5e:46:fc:
         fa:41:db:dd:50:1f:4e:28:54:b6:ec:74:e5:44:86:b2:4f:a8:
         61:a5:c6:fe:1b:a7:6b:a8:ed:70:78:99:11:3e:ae:d8:04:34:
         eb:d9:29:ec:c3:03:99:cc:ce:ca:67:cf:4b:6c:00:4d:e8:c9:
         fc:d0:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:59:00 2025 by rpki-client