Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          sMnhJJUsbVO2KoBJ+ArWcapiCyElMHdlrAzMy6zzAW8=
Subject key identifier:   9C:01:D6:62:FB:32:3F:82:7B:4F:DD:B5:DE:D4:69:1E:18:1D:6C:30
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       54525BE62EDFD7190CFC14BD23F4C022ABE77EE3
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     270836
IP address blocks:        189.14.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:52:5b:e6:2e:df:d7:19:0c:fc:14:bd:23:f4:c0:22:ab:e7:7e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject: CN=9C01D662FB323F827B4FDDB5DED4691E181D6C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:e1:51:3e:2b:f7:74:35:6b:a1:25:2f:8b:
                    12:0e:90:92:53:de:01:91:36:f6:5d:bf:61:75:34:
                    d8:d0:0f:74:52:a1:71:1f:1d:e8:53:36:60:25:93:
                    14:43:6e:0d:9b:83:65:fd:d0:1d:64:43:0b:56:ea:
                    e1:d5:ad:d9:f4:f5:d8:f9:37:56:35:12:49:f0:ba:
                    24:77:64:1f:5a:b7:fb:1a:ec:7f:3d:93:6e:32:fd:
                    51:6b:d8:71:ea:e2:5b:35:5a:7c:77:4f:bd:dc:0f:
                    c2:36:08:6e:fe:89:d2:80:2d:c6:c9:00:aa:20:19:
                    1f:ee:ca:c6:6e:e1:fc:71:5b:50:39:85:d3:fb:ed:
                    5d:e5:7a:b2:da:33:a0:ff:4c:24:20:b9:6e:87:b3:
                    d9:6d:ce:9f:e2:b1:7c:c3:ba:86:94:67:ec:7b:b2:
                    9e:ff:18:9c:a4:4e:ba:6a:7c:36:47:3d:ba:ee:45:
                    66:f7:05:3a:7e:db:33:57:9c:2d:7f:18:3b:4d:92:
                    56:1d:0f:af:4f:df:4e:a7:bb:db:6a:ed:12:66:b0:
                    ad:75:db:da:d0:5f:f7:90:2e:cc:d4:4e:b3:54:af:
                    0d:ba:3e:fe:1c:a2:7f:4f:4c:66:d0:66:00:61:ca:
                    8e:3b:af:48:8f:bd:21:8a:77:94:0e:39:05:3a:e6:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:D6:62:FB:32:3F:82:7B:4F:DD:B5:DE:D4:69:1E:18:1D:6C:30
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131322e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:33:f8:2c:ac:1c:6d:39:ac:44:95:2d:79:5a:80:1a:b7:
         c2:d0:59:15:c5:97:cf:bb:f5:a5:a5:de:2a:b8:6e:20:31:86:
         f8:59:51:5c:2b:ed:d3:bc:41:21:a7:d6:1f:6d:f9:ee:02:8f:
         e6:b3:ea:a5:17:17:64:66:f7:ab:31:5e:6b:b4:f9:54:bc:45:
         28:1b:33:22:62:8b:a9:b7:8c:0d:14:76:f9:1b:d9:d3:90:fa:
         5a:45:57:5e:e2:13:f8:fe:bf:0d:29:34:40:14:da:c6:5b:a3:
         70:28:32:a6:30:b4:af:13:4c:36:fa:e9:b8:39:40:79:81:db:
         ce:11:a7:58:3e:d0:97:60:38:e7:c9:62:b6:61:44:ac:3e:2e:
         3f:b4:8a:f4:58:86:17:6c:4f:86:5e:64:2e:86:67:7d:2d:a2:
         a5:02:96:64:f1:da:a4:02:c3:87:98:6f:f9:78:51:34:a2:d9:
         98:4c:6f:af:d3:7e:83:24:ac:4a:31:2f:64:b3:57:bf:85:5a:
         98:07:54:16:ee:91:8f:ae:10:e3:7a:5a:46:f6:6e:0e:fa:74:
         d5:a4:34:12:b3:42:5d:05:db:39:e7:8f:22:93:7c:86:b6:c1:
         30:89:3d:44:c8:20:9e:2d:58:ea:0c:94:b9:a8:93:19:4a:22:
         52:12:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:33 2025 by rpki-client