Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
File:                     3138372e302e34382e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier:          JzI5jxmk6zHzpxycuY2v3eg/fSBQngrtAFgTg9xMdOg=
Subject key identifier:   A0:3F:DA:3A:98:4F:92:68:B9:5F:B7:26:F1:68:83:35:EF:E6:44:70
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       41D971AF9971DB290B46A5CAECA9A86F7DC82C1E
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:27 +0000
ROA not before:           Tue 04 Feb 2025 12:01:27 +0000
ROA not after:            Tue 03 Feb 2026 12:06:27 +0000
asID:                     28352
IP address blocks:        187.0.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:71:af:99:71:db:29:0b:46:a5:ca:ec:a9:a8:6f:7d:c8:2c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:27 2025 GMT
            Not After : Feb  3 12:06:27 2026 GMT
        Subject: CN=A03FDA3A984F9268B95FB726F1688335EFE64470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:d5:ff:cb:13:53:79:8f:cb:c9:89:7f:25:
                    06:1d:68:6b:e9:35:76:69:ef:4f:a9:53:d2:d4:52:
                    62:a1:25:e5:20:2b:16:3e:38:66:69:12:9b:55:ba:
                    b7:bf:66:12:ff:a0:2e:c4:67:ef:94:04:5e:e0:98:
                    3a:7e:45:e6:3c:0c:b3:99:3d:ae:bc:00:07:cc:b4:
                    79:7f:25:ac:03:8d:56:eb:f7:2f:be:e3:f3:73:65:
                    ba:ca:5b:da:b4:e0:f9:9b:f2:01:84:1e:e4:a9:47:
                    a1:ab:66:f6:8b:7b:57:e2:94:a3:d7:ce:14:9c:5e:
                    1f:a5:d5:67:b2:01:96:9d:e1:0c:f0:1a:0d:75:05:
                    7b:bf:54:4d:9b:31:e1:1e:83:16:48:29:51:05:f3:
                    42:e3:66:0b:66:6e:d9:90:88:0a:a6:00:10:c5:a6:
                    87:8f:1d:ca:84:c1:8b:af:93:84:d2:08:6e:f6:c1:
                    60:31:c2:ed:bf:e2:d3:00:5e:6c:54:ac:38:f1:f6:
                    50:95:20:6b:89:6a:e1:c8:b9:2d:fb:09:25:a7:d7:
                    d2:04:8d:b1:95:2c:11:b8:d3:72:83:7e:58:6d:5b:
                    a8:10:a1:df:59:2c:82:6a:bc:f1:38:86:36:f3:0b:
                    a3:de:1e:c9:d9:56:79:1d:74:4f:8c:db:d9:98:5d:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:DA:3A:98:4F:92:68:B9:5F:B7:26:F1:68:83:35:EF:E6:44:70
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:ae:ef:e9:d4:c1:24:f1:b0:bd:74:a0:71:2d:98:d3:59:25:
         fb:17:7a:49:3e:3a:bb:76:06:e8:a1:3a:7e:7e:d7:2f:29:c0:
         43:2d:d0:ec:1b:a9:eb:aa:d2:fe:35:5f:a2:5d:84:c7:ea:21:
         97:2d:d1:a6:a3:71:9f:a9:23:a8:7a:86:c5:37:8a:be:5b:04:
         2e:b9:12:ee:3c:93:a8:ad:c0:fb:eb:f2:92:f5:f7:0d:51:10:
         a1:76:c7:7d:e1:bb:02:33:a5:d5:a0:2f:67:0e:11:a4:73:a5:
         99:c4:68:72:99:a4:cd:8f:4a:d7:94:32:91:8a:c8:96:6f:86:
         e4:9d:bf:c3:06:98:f3:3c:8d:22:ee:ef:9e:57:b9:f5:00:9f:
         0d:6a:04:ff:2e:d3:91:f1:e4:3d:c3:fb:5d:ec:a8:40:bf:9b:
         38:a8:0e:1a:0f:a2:79:6b:20:10:16:8a:00:f2:ad:e5:51:98:
         64:83:11:f1:62:2a:b2:55:20:41:72:f3:85:c9:52:69:88:3b:
         9f:33:06:21:b4:f3:b0:52:db:19:d7:a1:f7:e4:ae:31:19:54:
         2a:ac:8d:01:6f:04:c0:35:7d:91:f6:cd:18:22:7a:03:85:a3:
         2f:0c:1b:d1:ea:f3:9f:fa:bd:be:ee:b4:dc:f3:f8:f2:b7:46:
         73:57:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:21 2025 by rpki-client