Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa
File:                     3138372e34392e3230382e302f32302d3234203d3e203238313534.roa (raw, json)
Hash identifier:          PEyNjR7Wf6ELDeRzXAf4QAoyK6kyXdY3VV/VnYsawJQ=
Subject key identifier:   38:AD:1B:BD:5C:7E:FD:30:44:6C:5E:AF:67:A0:6E:70:46:A7:60:12
Certificate issuer:       /CN=812191D8B89140CC7C6B2A5D3CF140116F023979
Certificate serial:       0941AD7CB05A0622C286A0D814100DD18CF33E60
Authority key identifier: 81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa
Signing time:             Thu 06 Mar 2025 07:57:53 +0000
ROA not before:           Thu 06 Mar 2025 07:52:53 +0000
ROA not after:            Thu 05 Mar 2026 07:57:53 +0000
asID:                     28154
IP address blocks:        187.49.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl
                          rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 14:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:41:ad:7c:b0:5a:06:22:c2:86:a0:d8:14:10:0d:d1:8c:f3:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812191D8B89140CC7C6B2A5D3CF140116F023979
        Validity
            Not Before: Mar  6 07:52:53 2025 GMT
            Not After : Mar  5 07:57:53 2026 GMT
        Subject: CN=38AD1BBD5C7EFD30446C5EAF67A06E7046A76012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:5f:61:68:e7:81:85:f1:21:56:9e:a4:a8:
                    8b:97:e8:87:48:a5:e7:11:5b:83:76:0f:f1:e7:ae:
                    5d:46:1a:5b:da:24:e2:02:bc:a7:f8:ba:d7:33:d9:
                    68:35:d9:c1:37:ca:9e:d2:08:a8:1f:72:e1:bb:01:
                    f2:d9:b1:f0:91:d4:77:22:21:90:40:ff:de:5f:5a:
                    49:79:55:e5:07:83:ae:3f:7b:19:c0:15:57:13:5b:
                    43:d3:80:e7:b7:2c:b0:6c:db:89:62:ba:32:dd:51:
                    41:3a:68:22:74:d4:9c:19:40:a9:2a:56:ea:79:3c:
                    f8:7a:ef:47:d9:38:a5:d3:88:6e:b9:c6:ed:b5:0e:
                    40:e2:fd:b7:35:be:4e:8d:1b:cc:6f:16:b3:86:ee:
                    1f:79:ce:74:a8:3f:11:98:a0:51:d1:43:5b:5f:14:
                    52:1c:2a:ac:19:09:f3:3a:bd:2e:a8:76:9b:d8:6e:
                    55:11:32:fd:50:67:7c:c1:14:8e:e6:d0:5d:52:8f:
                    89:ec:ca:1b:d3:de:b8:ea:0c:ff:a8:17:5a:12:70:
                    7d:b7:22:ad:59:6d:9e:c6:dd:e4:b7:d9:5b:44:fd:
                    f2:6c:ff:8e:17:bc:aa:53:6c:1f:a7:2e:cd:09:00:
                    80:d1:26:d6:a9:b6:b6:70:da:0e:4d:41:e5:a0:18:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:1B:BD:5C:7E:FD:30:44:6C:5E:AF:67:A0:6E:70:46:A7:60:12
            X509v3 Authority Key Identifier:
                keyid:81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:99:58:1c:e5:6d:97:6b:e9:e3:53:a2:7c:d7:99:44:d8:
         14:fd:74:b6:a6:58:7e:f0:61:50:ec:0e:71:c7:93:2f:1b:16:
         3b:b0:5a:5b:30:86:2a:b3:f6:d7:ea:38:2f:5f:84:e5:62:59:
         8e:0e:b5:13:d3:d2:dd:08:7a:6b:53:23:9e:86:d4:16:14:e9:
         8c:b9:55:e2:17:ae:89:d8:ca:ab:91:af:d7:70:96:ba:6f:44:
         af:b1:0f:d4:6f:57:c7:86:09:1a:3a:3d:5d:fa:e8:08:bd:6f:
         d9:0b:1e:a7:62:d4:91:30:89:6a:f1:24:6c:39:8e:92:a8:fe:
         cc:57:13:58:36:ea:ed:07:4e:35:e1:f5:1e:97:0f:8f:fb:cf:
         29:f8:17:3d:b6:36:4b:e8:2b:14:8c:c3:f4:8a:fa:b1:7f:04:
         ce:06:19:8c:45:c2:8e:f7:b3:a4:d5:e0:18:9a:9a:f9:eb:c8:
         a2:2b:c1:eb:0d:07:c6:1e:c8:72:a1:32:6c:86:8c:e6:99:84:
         09:a3:1e:0f:fb:0d:32:8c:a6:c9:88:44:c0:81:50:d3:88:a5:
         20:15:ef:3b:c9:10:0b:be:60:ca:79:9a:2f:f8:ac:4e:10:8a:
         c4:26:d7:19:eb:b9:c5:92:1e:ce:3c:dd:9b:02:ae:c3:7d:af:
         de:d4:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:58 2025 by rpki-client