Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          b9oXD4hcE42R6/YMwLvMoYaXYemQVR2uCQRjOrH/sSU=
Subject key identifier:   8C:6D:F0:54:A5:56:08:C8:2E:DB:74:B0:FD:B7:C2:6A:97:17:D6:1D
Certificate issuer:       /CN=D55010182054388E254F328BAFF30FFD368EBB1A
Certificate serial:       34C031A17B817FD76EDD45E022A538DB102399E3
Authority key identifier: D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa
Signing time:             Sat 17 May 2025 15:17:47 +0000
ROA not before:           Sat 17 May 2025 15:12:47 +0000
ROA not after:            Sat 16 May 2026 15:17:47 +0000
asID:                     270778
IP address blocks:        187.63.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c0:31:a1:7b:81:7f:d7:6e:dd:45:e0:22:a5:38:db:10:23:99:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55010182054388E254F328BAFF30FFD368EBB1A
        Validity
            Not Before: May 17 15:12:47 2025 GMT
            Not After : May 16 15:17:47 2026 GMT
        Subject: CN=8C6DF054A55608C82EDB74B0FDB7C26A9717D61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:f7:c8:16:98:24:a3:bd:02:5b:27:ec:de:
                    cf:5f:7b:06:b0:57:39:ab:cb:1b:17:b3:04:a1:19:
                    ed:f2:40:db:d1:24:bb:4c:b8:aa:8d:13:51:a6:6b:
                    a0:c2:53:78:fc:59:c2:9d:36:ba:88:86:00:c9:88:
                    88:f0:50:d0:de:a7:23:7d:fa:4a:ec:f3:33:c0:aa:
                    fb:d1:35:18:59:79:3c:5c:5e:2e:bb:49:92:1e:62:
                    cd:47:b9:41:5e:9d:1e:0e:20:69:ce:2f:ba:18:62:
                    cc:2f:cc:2f:40:ba:d4:cf:72:79:47:9a:0e:ba:32:
                    17:24:1c:92:f0:10:12:d7:11:af:dc:d8:59:6e:0d:
                    39:4f:6d:e7:31:0d:9c:ad:d4:c8:a5:b2:34:02:5b:
                    d6:45:af:67:9d:29:3f:26:1f:f9:04:12:16:2a:a6:
                    85:ce:2c:b6:61:64:0d:0a:c5:a4:b0:e8:6c:03:78:
                    7b:56:c4:53:fc:4f:af:a0:de:c9:4d:7f:bc:32:9f:
                    56:cd:d0:20:8c:d9:90:0b:17:47:73:42:77:da:50:
                    62:cd:b5:74:50:5c:c5:40:ce:37:ca:66:ae:54:40:
                    ee:2f:51:35:d3:ec:6c:e8:47:bd:92:c5:7e:58:be:
                    07:4d:fa:db:8f:90:5e:b1:16:36:6e:b5:f7:39:14:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6D:F0:54:A5:56:08:C8:2E:DB:74:B0:FD:B7:C2:6A:97:17:D6:1D
            X509v3 Authority Key Identifier:
                keyid:D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:13:27:01:5e:55:12:cc:c9:d8:fc:3c:81:1c:1e:1e:bc:
         26:c2:38:61:ff:24:52:ba:86:af:3d:93:d0:9f:3c:22:b4:b7:
         e4:f1:41:04:59:54:85:cc:f0:ac:ae:69:0f:7c:a4:1c:a8:c1:
         e4:0c:6f:7c:e7:c7:ad:ee:d6:a3:63:2a:e8:4a:f1:a0:b6:8a:
         60:38:24:f0:23:8a:98:df:bd:b9:43:be:18:72:da:31:90:ce:
         47:f1:b2:e1:c3:49:42:3d:31:54:aa:3c:7f:1e:8a:26:4b:00:
         90:2e:83:a8:3b:a4:8a:e9:1d:b7:e1:da:62:d1:82:a6:61:16:
         0a:36:2d:b9:07:da:27:ee:e8:71:14:e0:40:c6:c5:a0:e6:6a:
         88:ce:3f:28:e2:77:ba:69:7f:10:07:b3:04:fd:c5:5d:00:db:
         6c:92:e9:3c:9d:e1:7a:45:28:7c:0b:27:b3:77:50:81:9d:28:
         20:22:11:38:31:53:c3:96:45:69:a7:36:8e:52:58:83:cf:a9:
         92:5a:6a:9a:43:d9:d0:90:eb:0a:a8:52:ae:78:05:81:37:b2:
         ec:29:73:53:46:7b:6b:e5:2a:3e:b1:af:c1:fb:cb:3f:bb:0d:
         11:0c:5a:49:79:21:33:a7:b4:0a:d2:f0:9b:7d:d3:7b:df:f4:
         b3:21:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:44 2025 by rpki-client