Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34392e3232342e302f32302d3234203d3e2037303438.roa
File:                     3138372e34392e3232342e302f32302d3234203d3e2037303438.roa (raw, json)
Hash identifier:          ewpFJjdrwRBazKxSfxB9pSN1wYjKMuBIT5YT/E7AIjA=
Subject key identifier:   22:C0:6C:E0:DD:71:27:2F:26:88:34:95:BD:AA:E9:EC:0B:3F:10:94
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       30AE81AB257D8E91B40282095647CA2D03D1C209
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34392e3232342e302f32302d3234203d3e2037303438.roa
Signing time:             Mon 12 May 2025 12:59:35 +0000
ROA not before:           Mon 12 May 2025 12:54:35 +0000
ROA not after:            Mon 11 May 2026 12:59:35 +0000
asID:                     7048
IP address blocks:        187.49.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ae:81:ab:25:7d:8e:91:b4:02:82:09:56:47:ca:2d:03:d1:c2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:54:35 2025 GMT
            Not After : May 11 12:59:35 2026 GMT
        Subject: CN=22C06CE0DD71272F26883495BDAAE9EC0B3F1094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:db:27:df:36:ac:f6:00:4f:aa:ff:13:90:
                    d3:3b:b0:89:d1:d3:ac:4b:e1:e1:7d:7e:9f:49:f7:
                    95:30:63:3f:2d:5a:08:54:0b:cd:f9:25:a8:b0:b4:
                    4f:77:ba:8a:fe:53:a1:6a:1e:48:da:3f:24:7f:d6:
                    95:02:2e:b3:1f:bc:40:08:91:fa:b5:e3:1d:6a:45:
                    69:65:91:e4:d3:a2:0f:6d:07:c2:70:bf:b8:1f:02:
                    10:73:24:12:2a:fd:0d:3c:b7:20:ef:00:ee:dc:90:
                    75:f7:09:26:a8:61:80:bb:30:ac:83:91:84:18:32:
                    ce:de:54:49:b7:ac:a2:a0:26:75:98:95:f2:6f:cb:
                    a3:9e:bd:84:5e:f3:98:c8:99:b0:1f:e3:22:90:80:
                    10:b4:73:a9:ba:83:0b:f9:a0:6e:a0:4c:8a:b1:ce:
                    23:c6:24:db:46:af:a2:2c:f4:5b:a8:f8:ab:f4:48:
                    f1:c2:5b:19:e6:80:8e:5e:3e:33:62:7e:0c:99:57:
                    65:5c:b4:f2:46:fe:bb:39:e8:ae:2c:5d:8c:c5:46:
                    51:10:81:24:7b:b4:eb:6b:2f:3a:c3:18:73:4f:67:
                    f0:f8:9e:17:d2:f8:0d:78:f7:7b:c8:77:a7:b6:41:
                    17:07:b3:b4:71:d6:75:c9:30:60:ad:79:c9:66:84:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:6C:E0:DD:71:27:2F:26:88:34:95:BD:AA:E9:EC:0B:3F:10:94
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e34392e3232342e302f32302d3234203d3e2037303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:7c:28:73:70:99:74:1e:f2:5e:ba:3f:d6:4d:0d:00:ea:
         7d:96:1f:78:08:b8:e9:d7:7e:6c:8b:a4:32:b6:4f:f8:44:95:
         34:68:7d:02:d1:44:72:59:46:77:4f:96:97:48:73:58:1a:ee:
         11:bd:ec:0f:c3:78:11:8f:bb:b4:4a:79:6d:ca:93:ea:07:76:
         66:be:80:5b:b8:e5:b4:fa:be:ec:6b:48:7d:a2:ed:d3:1a:56:
         65:ca:a5:de:a1:85:32:0a:59:b7:62:1c:c4:11:65:93:11:71:
         31:82:0e:d1:69:24:81:09:7f:e7:84:d8:98:95:17:8a:2f:1b:
         0f:52:05:44:6a:e0:55:13:57:12:cf:40:36:26:fc:33:ab:9b:
         53:08:ca:43:60:bf:85:47:d8:b6:d4:88:98:fd:13:ea:33:06:
         f6:0e:46:4a:a1:67:50:87:61:78:12:1a:61:74:de:54:f7:bd:
         15:49:c8:35:d4:3a:27:c1:78:ae:48:ac:c6:40:91:74:b0:74:
         2a:70:60:8f:9e:2c:d0:b9:7e:2e:97:17:fc:62:94:2b:81:45:
         62:58:90:67:28:a3:da:3d:dc:97:f6:90:af:e9:84:e4:e1:c9:
         28:d8:af:73:d9:cd:0b:6d:82:3a:9b:de:f6:87:41:b2:f9:21:
         dd:17:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:58 2025 by rpki-client