Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36322e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e36322e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          l7eJoLXj+To81/wJoYM3xoTJhgjJhxsEKzff2TDh/LA=
Subject key identifier:   FF:A7:DC:D9:1A:C4:4B:DF:8F:A6:55:32:B0:7F:39:98:92:30:0D:72
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       441BB10B72865C2F3206987262E8C1459FACB188
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36322e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:24 +0000
ROA not before:           Tue 04 Feb 2025 12:01:24 +0000
ROA not after:            Tue 03 Feb 2026 12:06:24 +0000
asID:                     28352
IP address blocks:        187.0.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1b:b1:0b:72:86:5c:2f:32:06:98:72:62:e8:c1:45:9f:ac:b1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:24 2025 GMT
            Not After : Feb  3 12:06:24 2026 GMT
        Subject: CN=FFA7DCD91AC44BDF8FA65532B07F399892300D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:2a:54:41:ed:fe:b4:fc:50:d7:0d:08:23:
                    d7:b2:7f:48:ba:b5:b6:cd:4d:4f:78:fb:c6:5a:65:
                    48:8e:2a:00:ce:0b:4a:4a:7b:0e:c5:a8:cc:31:20:
                    95:91:e2:81:6b:d0:c0:86:ce:6e:9b:61:d3:e3:bd:
                    59:40:f0:27:f0:fe:60:03:b3:e9:3e:ce:c3:dc:46:
                    e7:9c:ba:c8:d6:6b:1e:9e:48:b8:0d:89:ec:23:ca:
                    00:2d:f2:3e:9e:be:e2:ad:88:9e:16:e8:55:66:26:
                    b1:70:45:9f:12:8d:2e:cd:4e:03:14:0c:bd:2b:fa:
                    8b:ed:9e:6f:82:73:73:e2:52:01:ff:fd:67:fa:9f:
                    00:2c:40:23:c3:a3:6a:a4:c8:3b:63:00:13:35:eb:
                    bc:f9:95:9c:f8:e6:62:8d:ca:a5:57:81:6d:40:53:
                    89:74:37:66:90:8c:db:5d:70:3c:c1:76:75:ca:22:
                    18:9f:20:ef:1f:0f:06:12:cf:6c:48:e5:88:64:f8:
                    0c:6c:75:39:03:da:4c:44:14:32:ec:bc:b5:d3:c3:
                    ce:1a:10:2b:91:e5:22:07:72:c7:fb:35:d3:45:a8:
                    1a:34:cf:07:4c:11:32:41:26:17:4f:53:9b:c2:7c:
                    2f:ad:fd:c7:34:96:a1:cf:91:84:0f:b7:93:9f:fe:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:DC:D9:1A:C4:4B:DF:8F:A6:55:32:B0:7F:39:98:92:30:0D:72
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36322e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:82:ad:af:66:dd:51:13:95:09:13:d6:62:b5:13:9d:76:
         dd:e1:08:5f:d2:27:de:dd:20:8a:57:41:c7:d9:a1:32:7e:63:
         8d:aa:14:23:76:ab:9e:a6:7c:d8:af:a3:eb:b5:b9:65:5c:59:
         38:cd:54:8c:b0:1f:db:52:92:74:2d:df:b9:ca:ba:e6:05:93:
         c2:2c:95:29:e3:c4:e5:92:f4:26:46:3a:b2:4b:33:02:fb:92:
         55:85:73:6d:0f:95:d5:74:f4:26:c2:a3:86:2a:f6:3a:a3:02:
         af:25:24:c3:a5:a1:fb:90:b9:ab:11:08:66:6c:77:3f:9a:4c:
         43:41:0f:ef:64:2f:5e:fe:14:e0:81:ae:b0:97:71:41:64:71:
         b6:f8:69:00:5b:e3:68:bf:b5:03:6e:dc:ae:a2:91:d5:f5:f7:
         e2:74:27:38:58:5e:5f:6d:f2:63:92:21:4a:b8:04:75:cf:44:
         ac:f1:cf:77:9f:39:39:c0:12:f0:a9:bf:4a:73:1b:6d:22:20:
         f6:c4:b0:f2:02:17:2c:a2:38:86:47:c8:c9:c2:fe:d9:8a:fe:
         b5:f3:50:dd:95:90:fa:44:a9:31:a5:37:4c:3b:74:1d:e4:5c:
         69:d3:c3:f7:28:cc:fe:74:d7:31:7c:57:d2:a4:22:52:00:67:
         c4:1a:8f:ec
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIURBuxC3KGXC8yBphyYujBRZ+ssYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0
OUEzM0Y5NTAeFw0yNTAyMDQxMjAxMjRaFw0yNjAyMDMxMjA2MjRaMDMxMTAvBgNV
BAMTKEZGQTdEQ0Q5MUFDNDRCREY4RkE2NTUzMkIwN0YzOTk4OTIzMDBENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYeCpUQe3+tPxQ1w0II9eyf0i6
tbbNTU94+8ZaZUiOKgDOC0pKew7FqMwxIJWR4oFr0MCGzm6bYdPjvVlA8Cfw/mAD
s+k+zsPcRuecusjWax6eSLgNiewjygAt8j6evuKtiJ4W6FVmJrFwRZ8SjS7NTgMU
DL0r+ovtnm+Cc3PiUgH//Wf6nwAsQCPDo2qkyDtjABM167z5lZz45mKNyqVXgW1A
U4l0N2aQjNtdcDzBdnXKIhifIO8fDwYSz2xI5Yhk+AxsdTkD2kxEFDLsvLXTw84a
ECuR5SIHcsf7NdNFqBo0zwdMETJBJhdPU5vCfC+t/cc0lqHPkYQPt5Of/sPrAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU/6fc2RrES9+PplUysH85mJIwDXIwHwYDVR0j
BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1
RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM3MmUzMDJlMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG7AD4wDQYJKoZIhvcNAQELBQADggEBAKP/gq2vZt1RE5UJ
E9ZitROddt3hCF/SJ97dIIpXQcfZoTJ+Y42qFCN2q56mfNivo+u1uWVcWTjNVIyw
H9tSknQt37nKuuYFk8IslSnjxOWS9CZGOrJLMwL7klWFc20PldV09CbCo4Yq9jqj
Aq8lJMOlofuQuasRCGZsdz+aTENBD+9kL17+FOCBrrCXcUFkcbb4aQBb42i/tQNu
3K6ikdX19+J0JzhYXl9t8mOSIUq4BHXPRKzxz3efOTnAEvCpv0pzG20iIPbEsPIC
FyyiOIZHyMnC/tmK/rXzUN2VkPpEqTGlN0w7dB3kXGnTw/cozP501zF8V9KkIlIA
Z8Qaj+w=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:21 2025 by rpki-client