Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa
File:                     3138372e34342e3132382e302f31372d3234203d3e203238313836.roa (raw, json)
Hash identifier:          TX9wlFpMwL35brb9MQ6Czznr5x/SHX13u4cOActGc1M=
Subject key identifier:   E1:54:57:F6:46:F3:69:D3:B6:27:B3:5B:14:FE:AD:C4:EA:23:F5:BF
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       41081B2A6E0B7BA5F2E851A34BE5A1F6763D1563
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa
Signing time:             Wed 05 Mar 2025 23:13:26 +0000
ROA not before:           Wed 05 Mar 2025 23:08:26 +0000
ROA not after:            Wed 04 Mar 2026 23:13:26 +0000
asID:                     28186
IP address blocks:        187.44.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:08:1b:2a:6e:0b:7b:a5:f2:e8:51:a3:4b:e5:a1:f6:76:3d:15:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Mar  5 23:08:26 2025 GMT
            Not After : Mar  4 23:13:26 2026 GMT
        Subject: CN=E15457F646F369D3B627B35B14FEADC4EA23F5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:a3:a1:8d:92:b7:9d:df:39:c0:be:62:6f:
                    63:e3:a0:87:47:3d:68:85:3c:cf:21:a1:56:c1:19:
                    a9:03:e0:25:42:7a:09:54:cc:8a:57:08:9d:bf:6b:
                    2e:45:16:38:25:8f:ee:dd:4a:08:be:ee:d4:ac:3c:
                    da:65:7b:bb:65:aa:78:2f:33:00:67:51:d1:08:51:
                    02:f5:2f:f4:ab:45:c0:f9:b3:f4:bd:ef:52:20:0c:
                    95:6f:ec:c0:f6:75:30:54:85:9c:e2:1e:cb:e9:91:
                    7f:f8:4e:5b:df:57:73:42:3f:22:f3:db:e6:69:3c:
                    f3:2c:66:a0:37:58:0b:51:61:69:3a:58:5a:04:c6:
                    91:93:69:d1:e3:1c:51:5e:78:bc:0b:7d:95:9a:32:
                    70:fc:f1:d2:fc:41:6e:e5:43:c4:d5:98:2a:3a:5f:
                    89:dc:d3:8e:44:64:bd:c6:e6:3c:ea:64:6a:ac:69:
                    f4:06:7b:b4:0f:9e:c2:94:e1:a1:cb:4e:b3:ab:df:
                    26:93:b2:80:61:64:3e:8e:1e:b0:74:3a:6f:27:22:
                    a9:aa:36:81:4f:48:45:63:af:c2:e8:1e:f0:05:22:
                    ce:fa:be:31:21:0b:75:53:b3:85:1a:19:71:c8:0a:
                    fa:40:bc:b3:31:d4:93:8d:3e:58:24:06:1e:35:1a:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:57:F6:46:F3:69:D3:B6:27:B3:5B:14:FE:AD:C4:EA:23:F5:BF
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         55:61:28:0a:fc:4e:4e:7e:28:d5:75:77:49:9c:9d:ae:20:15:
         fb:67:e4:18:0b:03:22:d2:24:b8:59:52:e5:ba:75:c8:a9:bc:
         65:f2:0f:f0:80:98:70:2a:52:a1:1b:63:03:1b:8f:90:ce:80:
         9d:2b:05:4d:76:d7:f1:2d:6d:af:81:6b:2d:51:65:08:a6:96:
         51:0d:d5:26:5b:3f:10:94:8e:95:d1:08:b9:f2:94:62:6f:82:
         19:ac:68:6e:04:5a:33:6d:05:6b:41:0c:07:cd:e9:9e:26:7f:
         dc:3d:6d:db:f1:60:aa:19:b5:5a:9a:e2:75:53:80:d2:d8:5f:
         4b:45:1e:da:65:1c:df:b4:35:b8:15:23:6f:db:8a:ad:78:40:
         3e:b2:08:6e:3b:ff:e6:7a:67:f3:19:92:55:68:57:00:64:d4:
         ab:f5:87:45:97:95:66:7b:e3:41:b3:cf:cb:9b:9e:b4:7f:90:
         bd:28:96:55:66:96:3c:46:52:f5:3f:7b:2a:9f:e3:2c:f1:b0:
         38:7e:7b:ee:85:94:8c:38:2f:77:67:63:02:da:8a:65:29:9b:
         64:a8:30:b1:03:e3:d2:e7:84:c7:65:54:bf:d8:83:00:f7:93:
         13:b4:fe:04:00:78:4e:62:ca:a7:af:e7:5a:67:bc:6e:04:16:
         e2:3d:2c:f5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQQgbKm4Le6Xy6FGjS+Wh9nY9FWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4MUYyOTU2RTVDMTk1OEMxRjUzOEExQUFBOTk5NERD
QjgzREEyMTAeFw0yNTAzMDUyMzA4MjZaFw0yNjAzMDQyMzEzMjZaMDMxMTAvBgNV
BAMTKEUxNTQ1N0Y2NDZGMzY5RDNCNjI3QjM1QjE0RkVBREM0RUEyM0Y1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuaOhjZK3nd85wL5ib2PjoIdH
PWiFPM8hoVbBGakD4CVCeglUzIpXCJ2/ay5FFjglj+7dSgi+7tSsPNple7tlqngv
MwBnUdEIUQL1L/SrRcD5s/S971IgDJVv7MD2dTBUhZziHsvpkX/4TlvfV3NCPyLz
2+ZpPPMsZqA3WAtRYWk6WFoExpGTadHjHFFeeLwLfZWaMnD88dL8QW7lQ8TVmCo6
X4nc045EZL3G5jzqZGqsafQGe7QPnsKU4aHLTrOr3yaTsoBhZD6OHrB0Om8nIqmq
NoFPSEVjr8LoHvAFIs76vjEhC3VTs4UaGXHICvpAvLMx1JONPlgkBh41Gre5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4VRX9kbzadO2J7NbFP6txOoj9b8wHwYDVR0j
BBgwFoAULoHylW5cGVjB9TihqqmZTcuD2iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE5UZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlF
dnkvMS8yRTgxRjI5NTZFNUMxOTU4QzFGNTM4QTFBQUE5OTk0RENCODNEQTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFODFGMjk1NkU1QzE5NThD
MUY1MzhBMUFBQTk5OTREQ0I4M0RBMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhOVGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzEv
MzEzODM3MmUzNDM0MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM4
MzEzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQHuyyAMA0GCSqGSIb3DQEBCwUAA4IBAQBVYSgK/E5O
fijVdXdJnJ2uIBX7Z+QYCwMi0iS4WVLlunXIqbxl8g/wgJhwKlKhG2MDG4+QzoCd
KwVNdtfxLW2vgWstUWUIppZRDdUmWz8QlI6V0Qi58pRib4IZrGhuBFozbQVrQQwH
zemeJn/cPW3b8WCqGbVamuJ1U4DS2F9LRR7aZRzftDW4FSNv24qteEA+sghuO//m
emfzGZJVaFcAZNSr9YdFl5Vme+NBs8/Lm560f5C9KJZVZpY8RlL1P3sqn+Ms8bA4
fnvuhZSMOC93Z2MC2oplKZtkqDCxA+PS54THZVS/2IMA95MTtP4EAHhOYsqnr+da
Z7xuBBbiPSz1
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:57 2025 by rpki-client