Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
File:                     3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa (raw, json)
Hash identifier:          R1WjUp/i2SEyHbR3H/pC5wqVSIyixKVkfBPPmkVfNTk=
Subject key identifier:   F3:8B:C6:3B:E9:5F:A7:CB:81:43:25:A8:87:FC:AC:0D:43:E3:AF:F2
Certificate issuer:       /CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
Certificate serial:       3058F0A0E717086A328518808D2BDC0D3B9661D2
Authority key identifier: CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
Signing time:             Fri 28 Feb 2025 11:51:43 +0000
ROA not before:           Fri 28 Feb 2025 11:46:43 +0000
ROA not after:            Fri 27 Feb 2026 11:51:43 +0000
asID:                     262690
IP address blocks:        187.87.240.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl
                          rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:f0:a0:e7:17:08:6a:32:85:18:80:8d:2b:dc:0d:3b:96:61:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
        Validity
            Not Before: Feb 28 11:46:43 2025 GMT
            Not After : Feb 27 11:51:43 2026 GMT
        Subject: CN=F38BC63BE95FA7CB814325A887FCAC0D43E3AFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:a1:56:a0:5d:80:ee:0c:2e:d9:26:fd:83:
                    4c:4c:57:f7:c6:9c:7e:28:d3:bc:31:bd:7c:92:ec:
                    59:67:78:a8:d5:92:92:9c:14:22:19:77:c1:92:97:
                    d4:0c:c7:e9:23:df:d6:60:6a:9b:1f:96:83:94:78:
                    a0:72:e4:f4:c9:d1:d1:2b:ce:bc:79:8c:15:08:4a:
                    80:1c:4c:67:fa:f8:bf:99:21:8f:15:47:06:12:5b:
                    8d:60:68:e1:50:f8:92:4e:58:a5:0f:09:05:3d:ba:
                    1f:68:ef:99:1e:21:c9:dd:04:34:2d:f9:c2:df:38:
                    40:1b:a6:1a:1c:f0:f7:f0:41:3e:12:b6:57:cb:5f:
                    d6:c8:d6:bd:da:0b:1c:f2:f8:af:f1:d2:9a:bd:ac:
                    cd:67:07:5a:09:1f:3e:db:63:de:f0:18:72:4a:c9:
                    66:24:2a:34:3e:a2:92:fe:eb:06:2c:97:8e:8a:16:
                    6c:2b:a0:a8:ed:a6:2e:3c:74:a5:50:5b:48:f1:72:
                    ff:67:01:33:fb:dc:0b:4a:f7:3f:75:77:96:06:16:
                    f3:f8:0f:3c:8b:e3:77:34:82:3b:be:88:84:68:54:
                    5f:6e:1a:a0:dc:82:9b:57:27:9c:7d:cb:bb:1b:0d:
                    09:87:0d:c0:00:c1:f9:5d:7b:62:85:01:d9:11:f1:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8B:C6:3B:E9:5F:A7:CB:81:43:25:A8:87:FC:AC:0D:43:E3:AF:F2
            X509v3 Authority Key Identifier:
                keyid:CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:78:c8:af:6d:02:f7:32:19:34:01:8e:22:d0:79:27:57:
         3e:29:1a:f9:06:75:b8:e3:c6:fb:57:72:bb:ab:06:86:71:f1:
         ff:6c:16:48:b4:ce:55:4c:85:7e:80:e7:bf:d7:29:ac:ef:69:
         4d:73:89:5e:47:1f:ce:9d:ee:0d:40:20:1c:6b:ad:80:5c:94:
         b2:ae:11:af:e6:42:80:fa:1b:7d:f6:12:7c:a6:4d:2a:9e:7c:
         3d:32:d2:8b:e8:89:b2:63:54:6f:bd:ae:77:20:28:37:9f:6f:
         e9:a6:32:77:db:d7:96:b5:7a:eb:16:14:16:4f:a7:82:9c:6a:
         9f:4d:a4:78:90:fd:38:7f:32:9e:60:bd:bb:03:1e:3e:07:02:
         c2:1e:cf:f3:d5:a4:b5:21:93:42:67:6e:42:cf:5d:c4:82:ae:
         35:b1:07:1c:f8:28:0f:e2:ee:08:46:c1:98:0a:d9:3d:93:c1:
         db:4d:65:77:a6:58:99:1b:54:95:1b:4f:25:2d:82:03:55:37:
         62:d0:07:3f:72:ec:c7:0f:68:96:d7:40:5e:3f:61:8b:c2:39:
         d3:95:b8:11:4f:54:e3:18:4a:a6:b7:4e:61:46:51:8b:26:d9:
         3b:a5:fc:07:36:cc:8d:78:15:47:cd:2d:08:ca:e1:fb:ce:b3:
         fc:8b:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:36 2025 by rpki-client