Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3138372e36322e37322e302f32322d3234203d3e203532353634.roa
File:                     3138372e36322e37322e302f32322d3234203d3e203532353634.roa (raw, json)
Hash identifier:          jikdQ29cn0nPG35AKmYx84HCkVwCjzRQyWSQ0gjrPH0=
Subject key identifier:   28:31:28:5C:7B:DB:07:74:57:02:42:64:67:37:22:CA:43:B8:96:5F
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       746EA32B2AA0E3497A0BE100ED1BAC03650CBC57
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3138372e36322e37322e302f32322d3234203d3e203532353634.roa
Signing time:             Sat 17 May 2025 00:37:55 +0000
ROA not before:           Sat 17 May 2025 00:32:55 +0000
ROA not after:            Sat 16 May 2026 00:37:55 +0000
asID:                     52564
IP address blocks:        187.62.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 11:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6e:a3:2b:2a:a0:e3:49:7a:0b:e1:00:ed:1b:ac:03:65:0c:bc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: May 17 00:32:55 2025 GMT
            Not After : May 16 00:37:55 2026 GMT
        Subject: CN=2831285C7BDB077457024264673722CA43B8965F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:99:6b:4b:f8:33:d9:d2:2e:5b:d5:d9:64:
                    f7:c4:2e:fc:14:68:d1:df:0c:7d:f8:4d:7d:02:bd:
                    0b:06:a1:7c:75:e6:11:42:91:99:50:34:a6:cc:b3:
                    9d:d1:b7:e0:dd:c0:a9:5a:b7:2f:e3:86:17:09:96:
                    a3:58:f7:4f:9b:52:64:d3:21:22:22:1c:b6:84:fa:
                    cd:b0:01:c0:0e:58:2b:ef:c2:2f:3c:92:08:93:1d:
                    10:41:28:12:e1:17:58:11:5f:9c:b4:4a:9b:f3:fc:
                    17:53:d0:a7:02:aa:d6:8f:e3:ba:46:34:8f:02:b1:
                    08:83:b7:1e:99:3f:59:59:bd:5a:a0:91:3a:05:f7:
                    a3:bc:cd:73:09:9a:aa:f3:b3:39:33:c2:ea:6a:8d:
                    7e:65:e5:b1:b8:32:0b:5c:19:a8:d1:8d:74:74:6d:
                    db:4e:8a:b2:2d:3a:94:67:6e:6b:9f:15:42:e0:a4:
                    76:3a:ac:14:11:7e:85:84:ea:68:97:78:3d:28:22:
                    e0:83:c5:e0:8d:51:48:cc:41:c3:46:b7:1b:24:d1:
                    15:78:05:4b:0b:de:a6:a1:74:12:f7:f2:4a:b3:36:
                    fa:6f:6c:7c:bd:14:87:d3:96:99:bd:37:22:49:32:
                    6a:dd:ec:a7:cb:6a:d9:83:67:bb:59:aa:d0:81:b8:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:28:5C:7B:DB:07:74:57:02:42:64:67:37:22:CA:43:B8:96:5F
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3138372e36322e37322e302f32322d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:48:41:d0:84:dd:0e:a7:e7:1e:5a:91:48:c4:b9:fb:3c:6d:
         58:52:a7:9a:e5:3a:c9:ef:95:0a:d0:4f:fa:30:63:d2:24:45:
         61:6b:1e:48:9d:57:c7:55:64:25:d2:96:d5:cc:27:10:96:5d:
         ea:82:f3:24:1b:e5:38:07:b0:ba:87:7d:13:bd:5c:c5:33:44:
         28:78:7b:63:79:7b:86:48:d2:e1:ea:be:61:77:ac:3f:aa:d9:
         12:09:1f:e2:af:fb:19:d6:c0:f7:e1:f0:90:67:83:2d:b0:6a:
         99:b1:2e:57:76:a6:39:93:36:cf:f2:ba:03:a0:29:be:b6:ee:
         33:86:b3:10:39:1a:69:f0:6c:ad:e9:7a:58:58:5f:bd:c5:72:
         af:a7:bb:4b:d9:17:d5:a5:bc:e4:09:9c:be:8c:66:ed:80:8a:
         bf:a5:c5:ad:20:e9:dd:29:e0:de:8d:b2:4c:dc:e4:99:c8:3d:
         b4:2c:2e:fe:66:20:39:66:73:97:82:12:c9:7c:b5:1f:75:2d:
         dd:1c:a6:1a:4c:04:15:c9:75:e9:45:6b:9b:9c:13:33:a0:89:
         1a:35:af:39:75:f6:8f:83:ae:64:e8:f3:4a:7a:14:c4:c8:7b:
         00:6e:3a:07:52:f7:1d:b6:c4:76:61:7e:42:dd:1c:9d:54:c9:
         a9:0c:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:17:13 2025 by rpki-client