Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa
File:                     3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          k5JMNfsKX9YTYWVclAlFhW1+ywwOwDMvb1z8CeiTLZA=
Subject key identifier:   18:C8:24:0C:DC:D8:BD:24:2D:0C:AE:20:5C:09:2A:C0:5F:AB:48:67
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       5DE396C28B50DE804D695517036CEB9D7B672E36
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:59:22 +0000
ROA not before:           Mon 12 May 2025 12:54:22 +0000
ROA not after:            Mon 11 May 2026 12:59:22 +0000
asID:                     28146
IP address blocks:        187.110.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:96:c2:8b:50:de:80:4d:69:55:17:03:6c:eb:9d:7b:67:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:54:22 2025 GMT
            Not After : May 11 12:59:22 2026 GMT
        Subject: CN=18C8240CDCD8BD242D0CAE205C092AC05FAB4867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:08:8b:3b:50:bd:65:65:2b:24:6b:7e:52:
                    8f:2c:00:e4:d0:a3:88:27:48:b8:ac:17:2e:89:8c:
                    1a:79:9f:7d:b5:c3:10:2c:8f:2b:c9:94:1c:19:4a:
                    07:66:cd:b7:d6:cf:6e:9d:e7:49:8c:7e:e3:d9:f1:
                    39:f4:b6:04:f3:49:e4:97:a8:7e:a4:e7:48:ba:66:
                    db:3c:54:10:bc:d3:0b:12:ca:6e:20:84:de:d1:64:
                    d6:c4:31:4b:91:2d:9c:10:63:12:00:bd:b7:a9:cf:
                    dd:8d:34:9c:cd:b9:0e:d9:ee:ae:a5:d2:a1:62:64:
                    2b:af:f0:69:4a:02:c0:c7:30:f7:0d:b9:45:3b:5e:
                    95:b3:5e:9e:6a:05:97:16:7b:18:df:45:99:48:eb:
                    85:d4:2d:2a:cd:13:bb:56:49:8f:4f:65:4d:9b:bd:
                    8f:dc:b9:4d:13:87:74:84:1f:c8:4d:21:b7:f3:e2:
                    51:dd:74:b4:54:31:88:ef:04:81:dc:c3:ba:ea:3a:
                    58:51:c5:12:5e:b2:a7:7a:ab:93:4e:23:c9:19:1a:
                    22:01:3a:39:86:08:74:48:00:7e:c8:82:d5:1f:24:
                    0e:bb:8e:d9:5c:69:89:5c:24:9c:23:e1:51:19:02:
                    f0:57:99:23:20:45:1d:ed:a0:b1:56:34:17:cf:1b:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:24:0C:DC:D8:BD:24:2D:0C:AE:20:5C:09:2A:C0:5F:AB:48:67
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:d4:a7:4e:b7:ce:ba:db:cf:3d:64:03:2c:1d:26:48:e0:
         4e:45:b5:93:fd:11:08:f5:2b:88:3a:8e:7b:e6:c9:72:95:e3:
         48:e1:fc:1a:46:4a:52:25:a5:59:8d:0e:88:a2:c5:af:13:71:
         b6:56:52:f0:ee:aa:a8:cf:6f:e8:98:07:50:5f:72:08:51:4e:
         a9:d7:4e:ef:d6:18:fe:40:12:58:41:c8:04:f5:92:bf:6a:77:
         a8:4c:f1:7e:b5:b1:60:a9:81:ad:00:37:f1:ce:24:77:34:5e:
         03:4b:65:af:1e:c5:7d:e7:a9:e8:d8:7c:f3:cf:7a:f2:b4:04:
         57:b6:cf:c5:79:a7:64:17:9e:93:be:21:93:09:b5:e6:1c:8e:
         37:51:3f:c1:bd:30:ae:42:e3:5c:de:9c:ad:06:64:ab:5b:a8:
         fb:48:77:ff:2d:58:c0:33:06:a3:3f:8b:d8:9d:6b:7a:03:f3:
         36:b3:e5:73:bd:d0:d0:38:74:b9:16:b4:d3:72:f1:42:b6:0b:
         6e:9c:da:58:cd:65:9f:28:8e:b8:1f:ec:e5:cf:cc:ea:e0:f1:
         86:a6:3d:0d:34:b4:21:65:ac:1d:b2:be:68:e5:0e:6b:0f:b2:
         9d:00:03:d9:12:87:ee:3e:b0:15:aa:d9:2c:33:cd:2e:9c:47:
         7f:d1:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:06:12 2025 by rpki-client