Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier:          ELVqdsX1VFnhEucBiq1cYdXHIr2p48JJGwa1E3s3wsc=
Subject key identifier:   1B:54:4F:8D:D7:69:7D:7B:EA:07:1B:F3:B6:BB:83:53:7C:DD:FF:E1
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       1C7EC46F8AABD670ECEEA5CEE8EA3C14C068E57B
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:24 +0000
ROA not before:           Tue 04 Feb 2025 12:01:24 +0000
ROA not after:            Tue 03 Feb 2026 12:06:24 +0000
asID:                     28352
IP address blocks:        189.51.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 18:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7e:c4:6f:8a:ab:d6:70:ec:ee:a5:ce:e8:ea:3c:14:c0:68:e5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:24 2025 GMT
            Not After : Feb  3 12:06:24 2026 GMT
        Subject: CN=1B544F8DD7697D7BEA071BF3B6BB83537CDDFFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:c2:2f:89:23:c8:21:86:9f:bb:04:48:30:
                    4e:58:51:b0:a2:d6:3d:38:fd:fb:03:a7:63:ba:3c:
                    71:0d:7d:4a:bb:2c:58:45:aa:fe:63:35:ac:44:bc:
                    9d:15:12:18:e0:a5:66:74:99:42:46:13:58:22:1e:
                    59:fb:64:32:10:e1:ea:9b:d9:8e:3b:5a:e7:57:95:
                    8a:c1:ab:58:33:2b:36:ec:29:42:f3:8a:15:8a:01:
                    1e:94:a9:61:de:53:c1:60:fd:9e:5a:55:90:d3:9a:
                    86:6c:5b:b2:ad:9c:8f:32:24:69:c1:e0:54:f7:ec:
                    1d:11:be:8b:c1:bd:b1:ae:4a:10:24:bb:51:18:2d:
                    e8:d7:3e:d5:29:12:fa:80:d7:ec:2c:ef:19:d8:c1:
                    ff:01:e4:47:d4:1d:53:a8:f1:b5:f3:04:56:a0:00:
                    ba:ab:5a:72:a6:bf:7f:a9:45:01:65:2f:71:71:e2:
                    92:13:50:ad:b3:a8:35:58:bb:26:36:78:ce:e5:5c:
                    b4:2b:c3:ef:9f:7e:2a:8c:ae:29:cb:64:0c:63:fb:
                    00:8e:39:39:b6:19:f3:d8:5a:c5:59:fd:5a:8b:d6:
                    77:67:f4:17:13:89:5e:f2:ca:f3:d1:88:b6:b4:7e:
                    b0:d6:1d:9b:fa:11:3e:b8:3a:71:ba:d1:56:a4:a0:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:4F:8D:D7:69:7D:7B:EA:07:1B:F3:B6:BB:83:53:7C:DD:FF:E1
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:5a:eb:2b:ba:03:17:94:3e:96:be:cd:86:1d:53:0f:18:7f:
         fc:63:02:84:a6:98:42:5e:48:c1:69:54:03:ec:64:1f:67:59:
         c6:63:45:b7:e5:5f:0f:b0:6d:87:af:63:78:1a:a6:27:34:42:
         30:6a:a3:49:07:73:cc:d0:45:fe:30:b4:7b:a9:15:eb:c0:0b:
         af:59:6d:02:cc:e3:0e:3d:86:23:10:85:c3:9e:58:f4:d5:93:
         92:c8:ff:4f:25:bf:ce:cb:9a:f4:d7:a4:91:a2:76:be:da:d1:
         92:9c:ac:00:99:15:ee:f4:b8:69:e9:d5:be:73:b2:c2:72:61:
         47:1f:cd:f0:d3:82:e4:cb:6a:2e:41:e3:23:46:51:2e:39:7d:
         03:2e:28:5c:63:d5:b9:3a:13:08:e3:79:b9:50:03:af:f8:e6:
         69:b5:2b:3c:7c:cd:fd:e1:5e:e2:9e:e0:43:70:9b:e2:80:5d:
         27:e2:33:4f:be:51:86:84:5b:4f:fb:d8:f7:60:02:77:5a:fb:
         a0:7d:60:5d:2f:db:f0:61:bc:7d:a5:01:4c:e9:78:7d:b1:a8:
         20:34:8d:09:9d:61:ed:eb:34:f9:e8:15:76:01:c0:53:c2:0e:
         bd:ef:7e:8d:92:8b:12:69:37:f8:16:49:68:6a:4f:04:34:b1:
         be:0b:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:30:20 2025 by rpki-client