Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3138372e36302e3134342e302f32302d3234203d3e203238313533.roa
File:                     3138372e36302e3134342e302f32302d3234203d3e203238313533.roa (raw, json)
Hash identifier:          2/hRqsuQ/FHgaSrA97sa0U5IEyEyB8zh1AVYNTassEk=
Subject key identifier:   87:52:9F:93:23:C9:E4:38:85:80:90:C6:10:0D:61:9C:BC:16:CE:DB
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       6BA52636133EA3FA1168B031CFC203E46C42637C
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3138372e36302e3134342e302f32302d3234203d3e203238313533.roa
Signing time:             Mon 31 Mar 2025 14:21:22 +0000
ROA not before:           Mon 31 Mar 2025 14:16:22 +0000
ROA not after:            Mon 30 Mar 2026 14:21:22 +0000
asID:                     28153
IP address blocks:        187.60.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a5:26:36:13:3e:a3:fa:11:68:b0:31:cf:c2:03:e4:6c:42:63:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Mar 31 14:16:22 2025 GMT
            Not After : Mar 30 14:21:22 2026 GMT
        Subject: CN=87529F9323C9E438858090C6100D619CBC16CEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:61:be:f7:60:1c:b3:b6:bb:6c:99:87:65:
                    ab:c7:57:16:ed:ba:0f:c6:35:ac:6c:f4:9a:40:de:
                    85:51:bb:17:0c:d5:0c:02:7f:44:02:42:d7:b3:52:
                    28:3d:58:e5:dd:fa:b6:e1:21:60:3c:b4:10:e9:03:
                    77:bf:f9:c4:74:7e:91:5c:9b:71:eb:e9:8a:5f:0f:
                    52:bc:26:f1:91:46:1f:fe:98:dc:0c:04:99:3e:5d:
                    41:c3:30:3d:05:56:8d:39:a8:11:07:59:63:25:e7:
                    fd:23:50:ba:7c:8d:a9:cc:d1:49:e8:67:2b:35:03:
                    7b:18:0f:93:78:53:ff:3e:3f:cd:23:25:f0:d2:61:
                    d4:54:aa:ed:68:bf:a0:c6:f4:6e:f9:02:3b:e8:d7:
                    89:d1:93:c7:16:96:59:f4:d8:c1:ff:25:cc:b6:cf:
                    86:f1:68:0c:7f:cb:49:88:28:f1:d1:41:56:7e:5c:
                    83:37:f8:64:be:62:f4:b5:67:21:da:1e:8d:7f:18:
                    76:8a:8a:10:c8:7a:e5:23:d3:39:14:74:d3:a3:34:
                    e8:f2:34:8a:bb:0d:67:6b:ca:0a:19:cd:0c:74:95:
                    d1:54:33:d2:a9:68:25:7c:69:85:be:87:b6:80:de:
                    47:68:b7:55:da:f1:ab:42:ae:5b:c4:61:7c:b6:45:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:9F:93:23:C9:E4:38:85:80:90:C6:10:0D:61:9C:BC:16:CE:DB
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3138372e36302e3134342e302f32302d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:32:8e:c9:f0:5a:ea:8b:43:24:e5:4b:d0:9e:ca:50:9c:d7:
         81:4d:85:4b:24:d7:48:67:20:ef:41:0d:c2:e4:89:bc:f9:01:
         5d:cb:14:34:b3:6e:2e:73:5b:c3:4c:58:81:67:61:f5:ed:17:
         5f:ad:a3:99:e2:a6:12:fb:cb:7a:cd:a4:5e:80:04:7a:3d:48:
         05:d8:ca:b4:6b:56:5c:62:9e:43:9f:22:c3:22:b1:f3:57:43:
         31:12:7a:f7:5c:56:bc:e7:6a:ea:d7:bb:03:96:04:22:0b:f1:
         24:3b:dd:bf:a6:d8:73:7f:ca:ca:6b:50:43:3d:9c:b9:01:17:
         8a:24:1d:24:07:b2:99:d1:e1:88:e0:d7:93:5d:07:04:0f:89:
         a7:f7:f6:75:d8:58:18:15:ed:06:55:0a:83:63:3f:94:e6:40:
         af:f1:8c:1f:05:6b:9d:34:65:8d:b2:a3:17:40:fa:a3:34:d2:
         db:08:20:38:bb:7b:b7:0b:8a:98:48:8c:b0:9c:ba:fa:ef:9b:
         27:24:96:68:1d:ee:f7:04:4c:fa:17:42:47:5a:a0:30:39:f3:
         1d:cc:b9:1d:81:00:d9:4f:ad:ca:e1:76:4d:de:4b:6d:79:04:
         e5:e2:73:50:9c:a0:dd:34:a2:28:6f:99:45:cf:40:12:ac:6e:
         e4:3e:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:38:45 2025 by rpki-client