Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e36302e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          R5OG+Ln77WcNWvXpenAsYFXiuUH0dgYpBnvaftcUTx0=
Subject key identifier:   AA:6D:D6:84:A8:99:4E:42:D3:F8:6F:1A:29:AB:6A:88:06:87:3C:3F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       2F7482661C395A11E24D7F4421422E8351ABB81A
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:26 +0000
ROA not before:           Tue 04 Feb 2025 12:01:26 +0000
ROA not after:            Tue 03 Feb 2026 12:06:26 +0000
asID:                     28352
IP address blocks:        187.0.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 18:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:74:82:66:1c:39:5a:11:e2:4d:7f:44:21:42:2e:83:51:ab:b8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:26 2025 GMT
            Not After : Feb  3 12:06:26 2026 GMT
        Subject: CN=AA6DD684A8994E42D3F86F1A29AB6A8806873C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:41:5c:64:16:7f:f5:fc:e9:f3:35:4a:c9:
                    fa:1c:ac:2e:7f:9f:55:1a:86:61:4b:a1:75:ed:43:
                    e1:4f:e2:5a:9b:dc:06:fe:7d:d2:5b:44:f8:29:5d:
                    44:9d:e6:e7:13:61:07:61:74:15:8d:f2:e1:77:ea:
                    5e:93:f0:42:fc:ca:20:c3:1f:8e:3d:1f:30:78:a1:
                    76:09:9c:02:19:6e:c7:1b:09:f2:7d:f8:0a:2d:66:
                    65:d8:d2:5a:4c:0f:8d:41:33:7f:b3:ec:1d:b5:75:
                    42:c3:ae:32:05:23:51:12:ef:ad:8a:d8:f3:7d:8a:
                    a3:30:17:9c:a7:ee:93:4c:1e:15:12:8b:8b:4d:9f:
                    32:1f:32:bb:4d:a4:d0:04:00:48:61:b5:c5:eb:84:
                    97:be:a4:af:ca:00:32:c5:6f:67:7b:b3:c0:da:84:
                    43:79:8a:17:cd:2c:06:50:18:21:5f:dc:d6:a1:44:
                    59:15:4c:22:f6:ab:5e:47:e4:a2:03:f5:65:f7:37:
                    9f:50:d3:49:cb:27:a7:94:52:c3:d4:53:e1:b3:ce:
                    8a:09:33:c2:d7:d1:dd:28:32:62:a1:5b:bf:fd:c5:
                    fa:e4:8d:fc:6b:e4:6e:e8:b7:44:a1:78:1d:7f:02:
                    e6:50:7c:47:10:b9:48:60:ef:80:97:df:31:ea:57:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6D:D6:84:A8:99:4E:42:D3:F8:6F:1A:29:AB:6A:88:06:87:3C:3F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:37:53:d8:41:49:c6:a2:85:ec:7e:c4:e7:aa:53:b1:f2:0c:
         67:5d:cc:58:08:71:c4:bc:23:27:22:0f:ba:5d:53:30:c8:79:
         19:86:ab:32:47:2f:dd:69:fc:0c:3f:f7:98:b0:92:af:d0:ff:
         0f:0b:1b:62:cf:59:7c:38:72:06:bb:1e:b1:89:34:4e:1d:56:
         72:01:ef:fb:f6:93:dc:4a:6b:d3:15:61:e6:f9:24:64:29:92:
         58:78:4b:44:c9:7b:41:58:d9:5c:57:d6:e2:01:4a:08:12:20:
         53:67:18:52:84:40:f7:a4:ca:45:36:c9:79:1b:32:a1:61:72:
         96:0b:ae:08:cb:ad:01:b2:8a:b4:1c:58:45:ad:3b:d3:96:df:
         93:15:d3:79:99:78:af:43:b6:de:07:a6:79:11:be:9d:f9:a0:
         ff:a2:f4:6e:3a:ef:63:76:a0:dd:cb:4f:25:1d:fd:e7:c9:32:
         03:59:fb:96:a3:5b:c2:ac:73:24:48:6c:e5:8b:19:68:a8:fe:
         d1:23:24:a4:5d:60:4c:5b:15:0a:de:4a:0e:ce:2a:6a:a6:44:
         4f:dc:4e:61:64:8d:69:33:5d:8a:cb:63:9c:c8:ee:5f:e4:28:
         8b:dd:1d:9e:64:c4:12:7d:1a:47:e3:ec:e5:e5:ec:79:67:e7:
         82:a0:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:19:30 2025 by rpki-client