Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138392e37362e39362e302f31392d3234203d3e203131373532.roa
File:                     3138392e37362e39362e302f31392d3234203d3e203131373532.roa (raw, json)
Hash identifier:          kP4hwLi6kl28VBQ8dyNVv8wsJllfGdYBfoUZ2Mcy5PI=
Subject key identifier:   A2:F2:4E:53:5E:4B:31:45:38:77:2E:9E:F4:DF:16:AE:90:FD:1B:7A
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       61B6CC083494E61D4960628F76C8A7E5BDD17C76
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138392e37362e39362e302f31392d3234203d3e203131373532.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     11752
IP address blocks:        189.76.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b6:cc:08:34:94:e6:1d:49:60:62:8f:76:c8:a7:e5:bd:d1:7c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:aa:c3:d2:db:0e:8e:5d:ac:18:35:40:1a:
                    dc:56:92:46:b2:88:31:aa:2a:48:2c:04:e8:75:3c:
                    0b:0a:1f:7c:56:40:0e:6b:97:fe:84:26:47:83:0e:
                    58:17:07:84:68:68:44:5e:07:84:b4:10:61:5e:7f:
                    fc:ec:39:4f:a7:b5:87:a7:0e:c0:6d:c8:02:d2:30:
                    f1:26:fb:11:7e:76:17:9f:78:b9:23:78:ea:1b:f0:
                    c1:43:a3:22:34:0e:7d:34:a5:27:6f:c8:b8:5d:8d:
                    3f:50:1b:d8:cf:bf:89:3b:07:a8:46:38:91:de:4c:
                    bc:2e:f6:e4:3d:54:20:b4:cd:3e:e0:6e:4e:5c:b3:
                    c4:67:04:fe:94:33:47:ea:36:b3:3c:3b:e6:11:45:
                    79:ca:de:e7:37:7d:4a:14:12:8d:1f:6e:c6:73:93:
                    50:b7:c8:1d:43:29:44:4c:62:7e:f0:39:a2:ad:39:
                    dd:36:2d:ce:af:cd:2d:72:67:ef:5c:ac:12:e6:49:
                    bd:e7:98:94:4c:11:ca:87:a1:23:3b:e8:06:64:e0:
                    cf:34:42:88:cf:cd:b4:35:e1:90:48:1f:8d:47:14:
                    f5:3d:34:15:a7:8f:1f:43:6a:2f:09:ba:8a:cb:0a:
                    30:39:ca:ff:2f:d9:54:a3:0f:a2:13:e0:4c:d5:eb:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:4E:53:5E:4B:31:45:38:77:2E:9E:F4:DF:16:AE:90:FD:1B:7A
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138392e37362e39362e302f31392d3234203d3e203131373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:af:8c:81:74:46:74:51:35:4a:fc:e1:e3:bb:bc:31:5b:23:
         34:41:d1:2e:cb:45:6d:b9:2a:12:70:ce:90:b5:cf:25:66:2e:
         13:4f:51:c2:85:c8:08:36:f1:79:48:43:96:d6:55:02:35:53:
         99:b1:68:a2:6e:78:d4:95:c1:26:98:45:18:05:11:d6:ee:30:
         b1:15:87:03:51:7d:5a:d2:c2:c8:a2:2f:3b:91:89:73:84:93:
         4a:66:61:ce:47:b3:8d:4f:da:cb:f6:29:98:f3:74:31:05:24:
         49:7e:59:12:ff:f4:2c:bb:6d:93:f7:1b:5d:97:08:e1:3a:74:
         dd:46:f7:07:a2:05:05:67:9e:21:6f:bf:0d:f6:ad:9a:09:89:
         c2:3f:38:8c:1a:9c:d9:f9:00:70:6b:e5:d6:11:ea:46:77:99:
         6e:fa:be:2b:0a:cb:cb:8b:af:2d:18:e4:8e:84:11:11:86:21:
         ff:54:5d:42:e9:b7:e0:e8:a0:0b:45:8e:cc:4f:6d:b3:ef:e0:
         08:69:5f:b1:fd:72:1e:25:b2:de:11:99:81:64:5e:92:46:11:
         2b:f3:74:a3:19:49:8e:db:17:60:e1:2d:15:50:82:2f:73:78:
         65:a9:d6:44:2c:c6:bf:d6:77:a1:f1:49:2c:9a:27:1f:b5:f2:
         77:a8:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:47:15 2025 by rpki-client