Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35322e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          8nIepPRccFgyDbhHQwQzFMDUHWFcqct70RpW/3mty/8=
Subject key identifier:   CD:75:5F:6C:6B:1A:BD:3B:89:F6:7B:61:E9:49:9D:F2:19:AE:F5:C9
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       0D7BE907D2BAFBC22BAE7D5CAC32F7BBAEC34D3A
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:22 +0000
ROA not before:           Tue 04 Feb 2025 12:01:22 +0000
ROA not after:            Tue 03 Feb 2026 12:06:22 +0000
asID:                     28352
IP address blocks:        187.0.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7b:e9:07:d2:ba:fb:c2:2b:ae:7d:5c:ac:32:f7:bb:ae:c3:4d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:22 2025 GMT
            Not After : Feb  3 12:06:22 2026 GMT
        Subject: CN=CD755F6C6B1ABD3B89F67B61E9499DF219AEF5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:4d:3c:a8:bc:3a:17:24:d9:4c:31:c4:cc:
                    50:45:27:b4:6e:a8:a9:aa:6b:80:25:6b:4d:d9:8d:
                    b7:ec:68:04:9c:29:60:41:6f:37:35:28:9a:56:08:
                    d2:d6:21:2f:b8:52:30:54:9d:96:3a:75:14:1f:b7:
                    a2:ec:d2:81:b6:46:ad:a5:4d:2d:ef:a9:b6:8c:42:
                    7c:9a:0e:7f:82:9e:fe:51:51:5e:4e:a2:5c:f9:ab:
                    3e:cf:e7:46:9f:b1:41:b2:0f:68:69:a6:ea:3f:8b:
                    c9:14:84:6c:de:db:3e:be:21:0b:91:6d:0b:15:17:
                    c3:e2:33:65:29:4d:a1:32:3c:f5:ed:4d:26:de:46:
                    ac:4e:3f:6c:a8:ea:84:e0:5a:f2:cf:18:e7:b7:9d:
                    12:13:75:83:87:af:23:36:14:ec:3b:4c:e3:a8:8c:
                    ef:ff:62:fa:f5:88:4d:76:da:1e:6d:1a:97:94:b0:
                    7e:88:db:bf:c4:22:e1:45:cb:b1:2c:0d:86:f1:18:
                    d9:57:1e:8b:26:a5:0c:74:ae:0c:65:ef:61:b7:d3:
                    64:98:35:03:12:32:35:10:52:61:d8:c0:dc:33:b8:
                    8b:51:5f:a2:fd:66:68:3a:e8:94:83:52:88:e2:44:
                    d3:85:8d:2b:56:68:63:ca:11:e7:dc:76:9c:45:b5:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:5F:6C:6B:1A:BD:3B:89:F6:7B:61:E9:49:9D:F2:19:AE:F5:C9
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:14:aa:6e:e6:d4:43:6e:4b:e2:3f:64:36:e7:eb:a1:ff:33:
         e5:19:22:6d:5f:cc:4c:81:a0:66:fe:30:cb:25:e0:dd:8e:49:
         47:fe:94:ed:41:b5:a2:75:02:e5:9b:a1:3e:1f:ef:07:b6:0b:
         a0:ef:8b:d8:fe:2d:0f:33:9c:45:b4:e9:70:ba:10:4a:63:90:
         bf:0f:14:d2:a7:94:70:10:44:72:29:68:d6:72:5b:6d:2b:8c:
         85:66:c4:b2:4d:82:4b:4e:af:92:b8:2a:03:0d:35:5c:16:0e:
         15:6e:e7:97:9a:85:01:da:1a:b3:cc:4e:38:6e:02:d2:f1:92:
         49:31:6b:27:12:33:df:b0:26:47:19:f7:b4:88:af:e5:b5:a5:
         d8:53:f8:7a:e6:3e:1a:98:ea:59:9e:a5:97:1c:f1:8c:d7:7b:
         2e:0d:30:a7:c9:8d:25:7b:28:17:86:20:8c:6f:ec:fc:10:8e:
         17:95:26:bb:d7:47:ef:d0:7f:cf:02:40:e4:8e:40:d9:bb:e6:
         af:f7:5f:d7:7d:0e:db:19:f6:5e:34:ac:2e:92:40:48:2c:8b:
         71:10:7c:be:b4:b3:6c:52:c8:89:ef:05:c7:58:4f:4a:02:43:
         13:c9:34:c8:16:1c:60:34:1b:9e:b9:5b:a8:d5:0c:7a:ca:8b:
         c1:54:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:59 2025 by rpki-client