Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa
File:                     3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (raw, json)
Hash identifier:          IhDSHYohc0+Dr9apFyNFCQVRejVX/yjwQA2nWachXec=
Subject key identifier:   09:1E:6E:75:78:A3:66:7D:C9:71:5B:8D:7B:38:80:EA:25:E5:7B:4E
Certificate issuer:       /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Certificate serial:       556C33C79C593A8DBAB7636A556B41FC7C04F401
Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa
Signing time:             Wed 05 Mar 2025 22:45:30 +0000
ROA not before:           Wed 05 Mar 2025 22:40:30 +0000
ROA not after:            Wed 04 Mar 2026 22:45:30 +0000
asID:                     271455
IP address blocks:        187.63.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl
                          rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6c:33:c7:9c:59:3a:8d:ba:b7:63:6a:55:6b:41:fc:7c:04:f4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
        Validity
            Not Before: Mar  5 22:40:30 2025 GMT
            Not After : Mar  4 22:45:30 2026 GMT
        Subject: CN=091E6E7578A3667DC9715B8D7B3880EA25E57B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:7b:b6:e7:ae:aa:41:37:f6:df:58:03:b8:
                    9b:0b:57:8a:2f:52:74:6a:07:4e:9e:83:54:73:46:
                    d2:1d:37:14:00:06:fb:26:c6:d6:29:ab:26:23:33:
                    78:e7:a9:f3:27:9b:be:bc:76:6e:2c:f0:74:53:a6:
                    4c:91:df:b1:57:36:b3:6a:ec:45:9a:b7:35:8f:44:
                    e3:66:71:dc:66:ab:49:14:f2:db:7c:48:ac:40:5c:
                    84:f9:34:d8:56:b3:cc:20:c0:29:bf:18:47:ea:77:
                    41:19:88:70:d2:77:5e:8c:0b:22:1f:85:4c:07:29:
                    04:bb:70:6d:3f:df:e1:11:8d:a3:4a:8a:a2:6c:38:
                    18:94:5a:3c:88:7b:72:6b:e3:44:c5:09:89:59:4c:
                    c0:41:29:9c:76:8c:73:2a:75:8e:99:ee:0d:51:b7:
                    3a:95:7c:2d:e3:2f:03:b1:d0:a9:fc:55:02:7a:d7:
                    3e:61:dc:f1:5c:12:55:c8:86:9e:f4:70:6b:f3:1e:
                    1a:2b:33:03:fa:d0:aa:a4:dd:cf:e5:c9:56:be:6d:
                    5b:a2:83:28:fa:fc:dc:c4:12:e9:c3:60:3b:22:a6:
                    1f:8a:d4:41:5e:d0:27:ab:51:b3:67:9b:25:e2:e4:
                    ce:24:62:71:0f:db:12:85:de:3c:a7:5f:13:1b:36:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1E:6E:75:78:A3:66:7D:C9:71:5B:8D:7B:38:80:EA:25:E5:7B:4E
            X509v3 Authority Key Identifier:
                keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:1a:c9:4b:6a:90:99:0e:fc:70:e5:24:07:59:bc:c2:50:5e:
         4f:e5:f2:c4:82:8b:82:bc:8c:02:e4:e4:3c:a4:7d:8a:4e:77:
         c1:83:8a:da:bb:03:22:7a:7c:35:18:71:41:8a:ff:3b:83:95:
         86:85:eb:e3:c7:bd:76:4f:bc:17:08:5a:1e:e7:63:10:77:3d:
         01:ef:4f:32:c9:c8:c6:2b:e1:72:7e:fb:08:f9:83:4e:b3:58:
         73:24:4b:8a:de:ba:50:f2:06:c5:ad:e9:ce:fd:8c:88:59:82:
         6c:8b:c1:cd:e5:3f:3d:15:69:6f:4a:90:d5:4b:a6:90:a4:58:
         de:3d:40:2b:32:1e:d5:a9:b3:66:1e:7e:e2:94:5e:fa:8c:ea:
         39:f6:d9:fa:bc:41:db:80:77:8c:a0:5e:5b:65:98:79:9b:12:
         95:0f:a7:67:05:8f:d6:0e:59:55:94:a8:82:e3:bb:06:65:78:
         a5:e1:16:29:a8:69:df:51:9d:bb:2b:c1:62:3b:a4:ff:08:18:
         05:a8:4d:49:c3:a5:8f:bc:00:9a:0a:04:d3:e8:72:e4:87:88:
         0b:b0:4a:29:2b:d3:28:9f:27:dd:48:e0:33:b8:04:6d:55:0a:
         cc:24:05:db:b0:83:52:d5:4b:2d:ba:93:1c:da:27:cc:dd:93:
         ff:61:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:02:54 2025 by rpki-client