Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3134352e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3134352e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          JWTfXp7RG0CRAd5X7h57qPXE7gztKiVsnWT954enESE=
Subject key identifier:   D5:7C:47:B0:0B:98:30:0C:5A:BD:45:87:32:04:EE:2E:93:4A:BD:7B
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       1E6C538AAF4CEE1E98AA9CD847F51BF876C3B7BE
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3134352e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:07:41 +0000
ROA not before:           Fri 07 Mar 2025 19:02:41 +0000
ROA not after:            Fri 06 Mar 2026 19:07:41 +0000
asID:                     22381
IP address blocks:        201.87.145.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6c:53:8a:af:4c:ee:1e:98:aa:9c:d8:47:f5:1b:f8:76:c3:b7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:02:41 2025 GMT
            Not After : Mar  6 19:07:41 2026 GMT
        Subject: CN=D57C47B00B98300C5ABD45873204EE2E934ABD7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:27:3e:69:3c:61:96:b7:f9:f6:f6:d8:3d:
                    34:40:00:da:c0:0e:98:9c:e2:69:ca:4b:74:43:3f:
                    3b:73:40:90:81:b8:b7:6d:8f:aa:19:33:e7:e5:66:
                    61:98:03:df:15:62:c9:04:83:77:eb:1b:21:e8:e0:
                    06:af:85:07:c5:fd:88:c1:6d:28:95:03:39:71:8a:
                    b6:ad:a2:ba:93:49:ce:02:1c:72:ab:f6:f3:b5:2b:
                    2b:76:c7:1c:25:1c:20:db:0b:7c:44:02:17:5c:79:
                    5a:fc:5c:89:6b:f4:a7:70:b6:f9:98:0a:93:57:b7:
                    50:12:ab:6d:82:0c:43:cc:61:33:26:a9:4b:da:29:
                    23:96:e4:9a:13:3c:6e:3a:92:64:9b:3b:3f:bf:e8:
                    01:48:f6:3c:5a:a4:9e:fb:d8:1f:39:09:de:7c:03:
                    eb:aa:55:54:f4:06:32:95:01:b1:17:19:46:cb:f8:
                    60:66:28:9b:e2:d6:90:96:4f:ba:68:4e:aa:e6:fd:
                    f2:b8:52:4b:9f:d0:74:4d:5a:0a:3b:9b:b8:36:a7:
                    6f:f7:47:8a:60:d3:da:8f:31:6a:82:9a:4b:98:57:
                    a3:1e:c1:33:35:f2:0b:b6:ae:50:d4:ae:14:7e:44:
                    9b:e7:c1:73:be:89:e2:a3:60:5a:c0:d1:8d:3f:df:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7C:47:B0:0B:98:30:0C:5A:BD:45:87:32:04:EE:2E:93:4A:BD:7B
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3134352e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f8:ea:fc:04:f0:74:5f:4a:de:92:8a:aa:5e:ad:be:d5:20:
         33:d3:0f:a3:c8:11:83:a1:82:9d:71:c8:48:fa:b2:61:0b:98:
         91:f0:97:67:9d:4a:b8:9e:79:be:15:45:3c:28:1c:8f:5f:c6:
         84:25:0f:ef:49:63:85:57:6d:ba:f0:3f:cc:99:31:d4:06:2e:
         b4:f3:f5:49:f2:df:01:75:20:49:3d:97:96:59:b0:ae:15:59:
         f6:4a:16:0b:b5:10:13:25:9e:d6:80:ed:ef:ed:29:47:55:d7:
         35:93:32:29:14:72:c3:12:dd:6d:44:24:15:e9:4a:0f:62:49:
         a8:f0:04:d6:3a:9b:e2:fa:e9:b1:ac:5f:c0:fa:53:e8:b8:fd:
         d0:b2:e7:c2:91:82:b7:12:16:d7:28:95:54:12:7a:cb:48:16:
         e8:dd:5f:3a:27:79:7e:95:af:23:e3:78:af:ca:d6:e0:29:59:
         19:57:0b:04:d1:7e:04:ac:56:1b:53:15:f6:e0:6b:1e:1b:15:
         b1:1a:5e:56:96:d7:c9:8f:ae:42:4d:2c:5e:96:9b:73:9f:15:
         ed:1b:90:a0:f3:1a:c2:bc:84:83:d5:3e:a9:8e:ee:94:bc:18:
         bc:89:08:c8:38:9f:65:1c:b3:b2:9d:55:b9:c6:8d:39:9e:b9:
         8d:75:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:42:21 2025 by rpki-client