Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa
File:                     3138372e302e34382e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          UH1vjw9GdAUN3dpcw/TE+UEufPp9MPny7U3Zp0W0X8M=
Subject key identifier:   A1:BF:90:96:0F:ED:19:D7:34:26:8D:78:28:55:40:1B:84:D0:AF:77
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       4C6E86A28B62E6342A15BD5EBE8FC75057C5443F
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:25 +0000
ROA not before:           Tue 04 Feb 2025 12:01:25 +0000
ROA not after:            Tue 03 Feb 2026 12:06:25 +0000
asID:                     28352
IP address blocks:        187.0.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6e:86:a2:8b:62:e6:34:2a:15:bd:5e:be:8f:c7:50:57:c5:44:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:25 2025 GMT
            Not After : Feb  3 12:06:25 2026 GMT
        Subject: CN=A1BF90960FED19D734268D782855401B84D0AF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:a8:0e:90:bc:9c:00:5b:2a:eb:38:f7:d3:
                    8f:2d:ac:cc:2c:86:86:5d:e9:a0:a0:2e:32:b4:06:
                    a8:5c:a3:cb:9e:9f:d3:27:4c:73:12:fd:6a:79:bb:
                    48:55:cc:8c:22:98:ec:f4:b7:61:fa:4e:73:6b:17:
                    c0:f6:65:41:e3:a8:40:01:ed:9d:73:7b:c9:3a:a9:
                    e6:9b:23:ec:d3:1c:2e:ee:6c:d3:58:70:61:b8:56:
                    4d:c5:10:e9:3f:52:47:75:75:c8:f5:f9:f8:fc:a3:
                    58:76:e4:e0:8d:6a:1e:30:08:ca:f0:7d:d5:37:36:
                    05:0d:bd:be:f6:50:95:78:4e:c6:8b:11:1a:b2:f3:
                    c6:e1:e7:b9:0d:82:43:2b:1a:0a:7c:a3:b0:e4:49:
                    c9:be:51:10:6f:a6:73:b6:8e:ae:60:3b:02:07:e8:
                    2e:ac:ed:ad:9d:97:1d:01:8b:c1:fc:c9:19:a8:10:
                    13:93:1e:88:89:47:01:0a:9a:e2:f9:fc:dd:96:93:
                    ca:ac:7f:6d:64:ec:59:7b:b5:cf:7a:c4:79:42:b7:
                    c7:71:3e:08:1c:b0:b1:6f:9c:33:e3:9c:65:a1:4b:
                    81:c7:4b:64:d6:fd:67:d0:e9:59:2e:ec:95:fd:a4:
                    13:4b:8b:2f:bf:e7:3a:db:a9:1b:25:62:cd:b8:96:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:90:96:0F:ED:19:D7:34:26:8D:78:28:55:40:1B:84:D0:AF:77
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:ae:05:8b:43:88:b0:e4:61:fc:6f:5e:30:b2:1f:4d:19:
         bc:7a:f9:9c:e1:2a:b1:39:48:72:ec:06:8f:13:0b:ee:c2:f4:
         1a:5c:5c:db:53:02:2d:3b:bc:28:4d:05:78:76:88:b7:ca:c2:
         f4:9a:c0:48:66:e1:5e:9a:4c:f4:c5:29:5c:e3:3a:9d:b0:f8:
         03:72:47:70:50:00:b9:11:ec:b5:58:90:c1:13:04:bb:e4:de:
         ce:89:74:f1:b4:4a:da:d3:13:4d:9a:e2:83:60:57:ce:5c:1a:
         e9:e4:e5:a5:7d:87:ee:e5:fd:f3:3e:59:4d:61:b4:a0:29:f8:
         fc:02:e1:9f:eb:35:f5:60:35:d5:c6:be:b1:38:2b:52:15:99:
         ba:38:99:53:a2:98:cb:fd:a6:f0:14:ba:c2:7d:e7:58:47:b4:
         0c:f7:ab:ae:2b:fd:28:92:c4:b5:42:4f:e0:c6:fe:80:88:7e:
         11:12:92:84:b2:a2:be:59:bb:05:c1:97:71:08:ed:6d:39:e6:
         a0:e7:92:45:8c:e6:dd:e5:d2:28:fc:02:19:1c:71:ec:0c:d8:
         af:ca:83:e7:14:67:de:1f:03:b8:fa:be:3f:0f:97:c6:9d:b8:
         94:25:ae:6b:33:44:e3:13:1c:7a:3e:da:34:7d:a6:5a:0e:47:
         43:df:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:02 2025 by rpki-client