Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa
File:                     3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (raw, json)
Hash identifier:          fZrHJen/XMgbewLibsCX4tJTjqigcW4omTCt0YEDf5I=
Subject key identifier:   01:FF:9A:44:3A:F3:05:EB:41:BD:0A:CB:24:4B:C3:20:70:53:B4:DE
Certificate issuer:       /CN=640539F45452C2299C340AFF511D40CB7EEAA212
Certificate serial:       7F783728D0009A025EB69727CF64F2032A794231
Authority key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa
Signing time:             Fri 16 Aug 2024 19:16:28 +0000
ROA not before:           Fri 16 Aug 2024 19:11:28 +0000
ROA not after:            Fri 15 Aug 2025 19:16:28 +0000
asID:                     28187
IP address blocks:        187.60.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl
                          rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:78:37:28:d0:00:9a:02:5e:b6:97:27:cf:64:f2:03:2a:79:42:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640539F45452C2299C340AFF511D40CB7EEAA212
        Validity
            Not Before: Aug 16 19:11:28 2024 GMT
            Not After : Aug 15 19:16:28 2025 GMT
        Subject: CN=01FF9A443AF305EB41BD0ACB244BC3207053B4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:28:09:65:e8:89:c7:85:9d:ab:40:22:d0:
                    7d:74:17:4f:f9:84:f5:b4:21:2b:7e:a6:64:c6:6c:
                    1d:82:49:cd:71:9a:63:b6:1a:2f:1b:ed:92:d9:f1:
                    dc:fc:8d:88:15:ea:fe:e9:51:83:82:a1:a4:77:37:
                    f8:38:d4:64:cf:52:76:0c:c5:ce:45:65:9c:03:b3:
                    54:74:d5:03:bb:0f:36:51:d1:99:2a:e3:9f:80:6a:
                    25:fd:aa:1c:1d:e6:e4:f5:13:ad:bc:ad:f5:8a:db:
                    d8:83:9c:7b:b6:5e:e5:d3:85:eb:50:7c:64:c8:ff:
                    8a:bf:91:5a:b1:3a:e2:1d:cc:87:b5:0d:73:fe:01:
                    21:10:f6:fd:f3:1c:40:d4:75:da:17:71:7e:e2:f1:
                    ce:d0:70:13:8a:94:d5:c1:6e:69:12:52:97:14:d7:
                    e1:32:94:4c:b1:21:97:f2:eb:cd:96:6a:4d:5d:e9:
                    79:99:d6:34:d6:b6:d5:17:58:77:53:03:77:9e:b5:
                    2f:ff:6a:f6:13:be:99:e6:54:5f:4b:bd:ac:26:43:
                    45:cc:a3:77:ed:5e:cb:80:54:99:7d:bd:7e:68:58:
                    60:ef:c8:cf:cf:4b:4e:11:bc:c0:04:fc:96:a3:bc:
                    64:51:0c:13:ce:9f:15:b8:d6:d2:23:b7:d8:f5:b6:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:9A:44:3A:F3:05:EB:41:BD:0A:CB:24:4B:C3:20:70:53:B4:DE
            X509v3 Authority Key Identifier:
                keyid:64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3138372e36302e3132382e302f32302d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:96:e0:f7:7a:a1:0b:ce:a5:3b:14:4c:19:48:67:e1:27:
         cd:f0:b8:a1:e6:18:f5:6e:23:43:04:65:aa:2a:ec:7b:fd:cf:
         bb:92:2b:03:b2:c7:62:88:df:c5:5e:6f:ce:24:ec:87:f9:0a:
         f1:fc:fa:fe:c3:97:2f:5d:60:c9:94:92:c1:ec:cb:24:85:17:
         07:49:80:71:c6:d7:2f:c1:56:47:ed:2d:74:c7:43:4c:e4:72:
         7a:3c:46:96:38:3e:99:73:96:e7:3b:2b:4c:91:e5:f4:31:90:
         d1:14:8c:e7:ca:0d:eb:80:d4:1d:f3:65:7d:59:a4:57:49:e0:
         4f:e3:61:ea:23:e4:d4:03:af:57:81:1b:6a:c4:59:e2:c7:bf:
         99:2b:a8:f9:e7:25:a3:69:4e:fb:e9:50:6f:de:0f:18:fc:7c:
         41:f5:6b:98:e3:58:10:8e:5a:9f:83:8d:9c:2c:06:c0:dd:94:
         58:7d:c8:75:76:83:c8:fc:0d:58:e0:67:96:01:7f:ec:c4:b3:
         a7:d5:a6:dd:25:58:eb:1e:e5:bf:84:ea:ea:1d:60:0c:f0:48:
         9c:9a:35:f3:d3:8c:59:bf:bc:6e:e5:26:96:3b:b5:b0:9a:e3:
         86:33:99:dd:39:90:74:51:a7:3d:e3:5d:f9:55:c7:db:5c:99:
         d2:9e:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:55 2025 by rpki-client