Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e302e302f32312d3332203d3e203232333831.roa
File:                     3138372e3132302e302e302f32312d3332203d3e203232333831.roa (raw, json)
Hash identifier:          CJUfFnWFHFtzIxCw/BllzyC2vdaUUfYbecNiviJKBic=
Subject key identifier:   DA:6F:C1:D5:A3:27:41:8B:40:D9:FE:88:9F:4F:E4:72:19:45:6B:8A
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       5BDAA54A272C8E7A1BA6854E6C8E0A21B7FAC036
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e302e302f32312d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:08:27 +0000
ROA not before:           Fri 07 Mar 2025 19:03:27 +0000
ROA not after:            Fri 06 Mar 2026 19:08:27 +0000
asID:                     22381
IP address blocks:        187.120.0.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:da:a5:4a:27:2c:8e:7a:1b:a6:85:4e:6c:8e:0a:21:b7:fa:c0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:03:27 2025 GMT
            Not After : Mar  6 19:08:27 2026 GMT
        Subject: CN=DA6FC1D5A327418B40D9FE889F4FE47219456B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:66:4e:0c:84:b5:68:f9:10:d0:99:8f:27:
                    49:5b:d4:9f:4a:7a:0e:ce:43:70:67:fb:39:b8:2a:
                    8d:5f:8c:c4:c3:9d:bf:79:83:56:f8:95:02:b4:54:
                    9d:19:4e:39:ea:df:51:cc:70:b6:ae:44:5c:91:95:
                    bb:e6:d1:6b:ec:a4:25:0e:94:10:b1:12:2b:23:82:
                    25:b8:e5:30:c9:e4:54:61:d5:c7:b4:db:a5:13:2f:
                    f4:b2:fb:9b:c8:7f:62:98:ae:59:50:30:8e:b0:b5:
                    54:35:26:d7:50:54:ea:48:a5:fb:59:88:13:c5:07:
                    4d:c9:ed:ce:5d:6c:18:00:00:d3:54:21:bd:4f:23:
                    69:70:ae:04:45:63:32:71:3e:2c:3a:9d:3f:84:5b:
                    38:cf:03:49:59:f7:db:a8:3c:dc:97:d3:7c:62:fe:
                    53:a5:b2:eb:81:cb:97:9e:43:17:58:4b:19:ca:82:
                    8c:75:b9:42:0e:74:33:2c:70:ee:d2:de:14:30:16:
                    6c:60:e4:c5:70:78:4c:c5:22:b0:47:29:e1:98:db:
                    b6:5c:27:a6:ac:72:a6:55:4e:d3:2d:f0:01:45:70:
                    32:de:8e:28:ad:1b:c6:ba:7b:67:23:38:94:cf:f3:
                    d7:05:fa:54:98:f4:54:9e:b4:79:f8:1a:4b:c7:70:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:C1:D5:A3:27:41:8B:40:D9:FE:88:9F:4F:E4:72:19:45:6B:8A
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e302e302f32312d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:97:a6:36:57:78:75:38:ba:b5:f0:c8:e9:e1:0b:b3:b2:e1:
         bd:7c:b2:72:1c:8b:5d:99:ae:b8:5c:95:8c:6c:36:05:53:95:
         9a:ea:75:26:2b:0e:c4:b9:97:4d:cc:04:a4:14:a4:fb:f6:c2:
         83:15:45:a3:10:2f:cf:fe:33:37:37:61:e8:76:2d:f0:e3:80:
         0f:66:ad:a3:6e:2c:df:35:bd:c6:54:e7:3d:86:20:ca:db:e5:
         4a:a0:02:1c:cc:77:2b:ba:7f:3a:29:19:74:0e:aa:01:24:04:
         13:92:4a:65:dc:ef:8a:69:57:5a:9e:2c:60:64:2d:3c:f4:ff:
         92:cd:5e:6a:15:a5:74:c8:cf:fc:31:b9:16:b5:df:75:1e:af:
         47:59:b3:ab:66:2c:06:3b:dc:03:79:c6:b2:68:67:77:42:59:
         1c:ae:6f:c2:2c:23:60:3c:18:53:ba:d6:f6:a6:25:a6:73:cf:
         2c:c9:77:02:be:13:f8:16:55:90:3b:b7:66:17:99:4d:31:18:
         d3:c7:f1:ca:4c:6a:46:ec:5c:08:c2:7a:1c:9a:72:06:b1:ef:
         71:e9:bc:f9:b0:a4:1a:e4:14:bd:dc:d5:50:ff:73:76:3d:38:
         8a:8e:75:99:c9:30:a3:46:9a:e3:75:a7:c5:d2:45:7a:6e:e2:
         73:de:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:34:51 2025 by rpki-client