Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35382e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35382e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          C9FPebAkcdIkbL+sMX+bgJzJvyuE4/eRyn4OogSO/Kw=
Subject key identifier:   0F:8F:19:DF:6F:69:71:13:AF:C7:BE:0A:71:0E:6F:92:51:25:B2:A1
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       5D0FBF156DCDA1EB615BFD8218E8BD9E6C0699DF
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35382e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:26 +0000
ROA not before:           Tue 04 Feb 2025 12:01:26 +0000
ROA not after:            Tue 03 Feb 2026 12:06:26 +0000
asID:                     28352
IP address blocks:        187.0.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0f:bf:15:6d:cd:a1:eb:61:5b:fd:82:18:e8:bd:9e:6c:06:99:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:26 2025 GMT
            Not After : Feb  3 12:06:26 2026 GMT
        Subject: CN=0F8F19DF6F697113AFC7BE0A710E6F925125B2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:14:c5:67:f5:57:01:17:f0:0d:81:a0:45:bd:
                    e5:52:78:6a:f9:e1:01:aa:d8:45:8e:9d:c6:2e:b6:
                    74:da:d8:03:db:fd:c4:d2:84:9f:81:72:a2:1d:83:
                    9e:db:ce:08:4f:8e:0f:91:e7:42:03:8c:f8:23:8a:
                    5b:db:1a:6d:ff:58:bb:47:cf:26:bd:65:b3:cc:69:
                    a4:74:16:ba:90:49:f4:3e:0d:11:73:a4:0e:b6:56:
                    b6:0a:43:9e:71:5a:5a:54:eb:83:38:d9:18:b8:ca:
                    30:51:bd:42:ed:4a:33:26:dd:63:25:e6:7a:79:32:
                    a7:c3:7a:40:7c:0c:af:b2:bc:bb:06:50:17:f2:62:
                    fa:a9:ab:df:83:6d:20:d4:83:ac:d3:83:82:73:fd:
                    48:81:d1:5e:b6:1d:a5:ff:69:54:c4:cd:de:fa:f2:
                    90:76:6e:ce:50:f1:bb:cd:31:00:e2:6f:4b:96:cc:
                    68:12:86:14:18:59:ff:7d:89:c9:77:c7:19:62:7b:
                    11:ae:31:a2:5d:95:c2:d5:31:c8:aa:d7:1b:43:c7:
                    bb:1b:d0:57:06:5e:16:be:29:56:a5:9e:43:93:e3:
                    4f:bc:01:af:c8:47:70:c3:04:11:94:c5:1d:86:39:
                    07:4f:23:a1:a8:68:7c:94:4b:16:e4:db:05:e4:9f:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:19:DF:6F:69:71:13:AF:C7:BE:0A:71:0E:6F:92:51:25:B2:A1
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35382e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:a6:68:05:ad:59:89:a7:07:01:6e:19:5b:f8:91:ec:07:
         66:5b:94:ab:bd:b7:49:93:81:1f:9b:b0:87:c7:6c:89:2f:a8:
         8b:e0:a1:6a:2b:a8:b8:e6:82:d5:17:94:17:78:f5:b7:5b:4c:
         8e:5b:0d:c2:d2:f8:f6:59:9c:9e:60:2d:59:9d:c2:f8:cc:5a:
         fc:92:82:25:eb:ae:f6:0e:a1:01:6e:0a:32:7c:ed:66:ee:a7:
         9e:af:14:cd:e8:f2:64:a8:27:51:5f:64:31:24:67:df:5d:a7:
         f0:0d:6f:10:1e:fb:c0:2f:a2:0a:21:77:c2:ab:c2:49:57:9b:
         ba:0e:bb:e1:71:68:f1:23:63:fd:75:e0:3b:e7:47:45:c9:06:
         fd:dc:24:1b:23:25:e8:2c:c3:76:2b:53:bd:de:44:98:ad:bf:
         2e:1f:a6:94:ff:02:4c:ad:1b:98:d3:30:cb:bd:8f:0b:50:a8:
         42:77:d6:da:41:b7:9c:3d:ba:66:4f:b2:a7:04:a7:ea:f3:d9:
         af:d6:fa:a3:31:84:2d:24:43:bd:9f:ec:22:08:53:81:32:a5:
         75:6a:e7:f3:85:d9:89:77:ae:62:25:a0:ce:08:00:8e:1f:70:
         6a:54:02:87:4a:85:91:37:c4:6b:33:32:99:9f:79:8c:db:86:
         92:51:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:34 2025 by rpki-client