Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          wLlRE/bBDRjOTpIbcKh7/kdsEFb30glXdL0nhGrH1m4=
Subject key identifier:   78:BE:E2:B4:93:C1:07:EF:87:14:8F:E4:6E:09:03:45:F4:0C:B4:46
Certificate issuer:       /CN=D55010182054388E254F328BAFF30FFD368EBB1A
Certificate serial:       3E0A5B26FA89FD9D11E7082041CE850320DD806F
Authority key identifier: D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa
Signing time:             Sat 17 May 2025 15:17:46 +0000
ROA not before:           Sat 17 May 2025 15:12:46 +0000
ROA not after:            Sat 16 May 2026 15:17:46 +0000
asID:                     270778
IP address blocks:        187.63.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0a:5b:26:fa:89:fd:9d:11:e7:08:20:41:ce:85:03:20:dd:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55010182054388E254F328BAFF30FFD368EBB1A
        Validity
            Not Before: May 17 15:12:46 2025 GMT
            Not After : May 16 15:17:46 2026 GMT
        Subject: CN=78BEE2B493C107EF87148FE46E090345F40CB446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f7:1e:99:6b:9d:37:b3:8b:75:88:ef:bf:a0:
                    b9:3f:52:48:d1:7b:ca:32:f6:50:47:a8:72:b0:74:
                    f5:bc:3f:4f:31:8f:10:1d:bb:2a:a0:a5:87:63:0c:
                    66:43:d4:7b:c3:c3:dd:f0:00:48:3e:92:f6:7b:2b:
                    9d:fe:6e:4c:88:31:09:3b:f8:d3:fb:d8:23:a5:39:
                    6b:1a:22:69:11:05:17:e6:27:f1:22:8b:ad:90:e1:
                    ea:ef:03:8e:d0:bb:d2:44:4c:79:c1:01:5b:7c:38:
                    07:75:7b:55:07:99:fe:9c:c9:15:98:1f:5e:05:02:
                    d9:85:97:0d:41:d1:5b:67:3e:b5:94:e3:d8:c2:bd:
                    4c:72:f4:8d:02:88:7a:48:7c:bf:00:2f:ea:3b:07:
                    31:ff:e0:cb:99:05:9a:40:d3:fd:37:58:f2:2f:b4:
                    77:46:b8:21:85:51:5a:5c:a7:6b:12:72:78:ab:31:
                    fe:e0:24:f0:2c:a8:59:e2:59:36:db:84:ee:e2:ad:
                    c4:f7:ae:63:03:bb:09:87:63:c5:f5:13:ee:3c:d1:
                    ed:c0:89:1c:ef:0a:50:bf:3e:9f:dd:0e:93:52:07:
                    f9:38:0b:86:cc:b2:7b:d7:ca:0f:bd:23:b9:ec:5d:
                    90:13:56:9b:64:94:6d:19:f9:50:5e:68:7c:18:ef:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BE:E2:B4:93:C1:07:EF:87:14:8F:E4:6E:09:03:45:F4:0C:B4:46
            X509v3 Authority Key Identifier:
                keyid:D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:ef:6f:af:48:b3:ac:09:b5:fb:0e:57:fe:08:83:34:6e:
         04:ba:74:24:ff:92:c4:40:37:b7:c0:38:36:15:b9:bb:5b:8b:
         86:4f:3a:50:15:4d:5f:3a:26:d8:48:4f:17:6e:30:3c:71:d8:
         75:d3:a0:68:ba:84:56:b1:c4:ab:86:32:17:b6:cd:f7:be:d6:
         81:fd:7d:f8:28:cd:55:d5:2a:83:cf:e7:af:c7:c4:57:01:b0:
         25:ed:3e:f8:4e:f6:e5:b4:41:d7:40:f1:40:8e:90:06:eb:af:
         3b:22:bf:b4:07:8f:b0:d9:65:44:68:d1:f3:23:63:0e:f8:df:
         8b:a0:8b:1c:71:fa:f4:de:62:b6:ea:26:97:ec:62:6f:c7:75:
         23:ba:f0:af:e8:8f:ca:c0:02:3c:a4:e4:29:70:cc:c1:66:aa:
         6c:72:cc:b5:2c:ce:89:c9:e0:e8:67:1d:c9:25:66:79:15:7c:
         44:47:a2:8e:f4:37:bc:0e:93:34:70:ab:2f:d7:3e:df:79:bd:
         36:8c:3e:8e:f9:7a:c3:a0:a0:46:73:78:52:d9:5f:c0:0e:35:
         16:83:a0:9e:3c:42:4e:2b:f0:64:ed:88:a8:4f:f2:81:36:24:
         49:ca:76:0e:6f:e7:72:de:4b:e3:87:19:bb:81:ac:f9:15:f2:
         c7:33:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:58 2025 by rpki-client