Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa
File:                     3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          bYSn1ad3P3ETBqO4scKshEl/5zJh5cBrKQ3kvttXRJ4=
Subject key identifier:   FA:BA:CD:69:E4:56:46:37:21:C0:66:3C:8E:00:F6:E6:5E:B2:75:A1
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       5958EF9A254B194BF86A916C4C139A86BA1141FE
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 20:10:53 +0000
ROA not before:           Fri 07 Mar 2025 20:05:53 +0000
ROA not after:            Fri 06 Mar 2026 20:10:53 +0000
asID:                     262589
IP address blocks:        187.108.128.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:58:ef:9a:25:4b:19:4b:f8:6a:91:6c:4c:13:9a:86:ba:11:41:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 20:05:53 2025 GMT
            Not After : Mar  6 20:10:53 2026 GMT
        Subject: CN=FABACD69E456463721C0663C8E00F6E65EB275A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:92:fe:5b:18:77:5e:8e:56:97:e9:1e:ef:
                    ed:f9:14:d9:95:7f:53:79:7f:74:24:ee:9c:50:c1:
                    7f:78:b6:a0:02:77:36:0e:3e:31:a2:2a:48:e8:0a:
                    b8:30:d0:26:d3:c9:90:e4:8d:e5:03:59:9e:7a:8c:
                    40:73:af:9b:39:bb:f9:80:33:03:da:4c:1e:a4:7c:
                    6b:6f:eb:65:8e:42:53:10:a8:f9:3c:35:93:aa:40:
                    ce:cd:dc:7d:b1:54:2a:b0:04:77:43:17:2a:51:e1:
                    db:a1:4b:35:0a:83:ce:09:b5:e5:f7:0a:b0:b7:9a:
                    f2:9a:d9:9f:06:b8:14:a9:be:71:a3:ea:9d:5a:ad:
                    a7:0e:ec:f7:cb:bb:27:06:9b:87:c6:de:e5:32:bc:
                    90:d4:d8:85:ae:0b:81:07:dd:18:e7:f5:0b:8f:df:
                    2d:bd:07:b6:02:94:bc:5b:b8:4c:38:1d:95:d2:25:
                    8d:70:a6:a6:1a:fe:49:bd:b7:50:e6:c8:26:f0:31:
                    a4:d8:3a:42:bd:fd:d9:55:c8:09:56:4c:28:fc:f7:
                    b9:c7:2a:94:f7:1e:3b:ad:da:85:b6:17:09:17:7b:
                    1e:e1:4d:15:70:0c:c8:3c:95:29:dd:0b:f5:7d:7c:
                    c3:e8:63:14:0c:ff:da:78:e5:79:bf:2e:93:01:a4:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:CD:69:E4:56:46:37:21:C0:66:3C:8E:00:F6:E6:5E:B2:75:A1
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:79:34:f7:b7:bf:f8:63:80:48:05:9a:71:ec:ea:80:a9:17:
         c6:a0:44:22:9b:05:63:bf:0a:a0:9b:c8:61:d6:0c:3b:80:9a:
         24:9d:e7:53:d4:44:8d:35:71:da:0e:d4:42:5f:2c:0c:bf:1b:
         71:a9:e4:1e:0c:13:15:83:73:7c:6f:a9:61:fa:51:9c:06:28:
         cf:e5:33:12:3e:92:f3:ff:79:d5:0f:4f:78:70:3d:06:94:c8:
         7b:a3:82:78:e4:b9:41:84:4b:7e:cf:6c:bc:4d:46:74:16:9d:
         ad:62:d8:f2:60:3f:74:bd:37:19:75:73:f8:88:d0:a4:03:98:
         94:f9:3e:a4:f9:ca:00:a6:17:c0:76:7d:96:c8:16:19:b9:ad:
         a3:61:8a:0e:21:a8:be:27:9a:f3:4f:0c:1d:e5:0a:e5:ec:f2:
         71:06:20:84:c3:95:89:4f:dd:99:b1:b0:c4:1d:ff:0e:de:8d:
         36:65:74:9e:36:0f:83:95:85:b3:12:8a:6a:2e:3e:7f:9b:bd:
         01:68:27:92:7e:ba:9f:c8:e8:d4:0b:dd:2c:c8:0c:b2:d9:2e:
         d3:d1:88:c0:b3:95:15:c2:72:fe:18:fc:50:bb:07:fd:91:0d:
         37:01:d4:5d:24:99:b6:8f:59:af:29:06:28:60:89:12:70:91:
         41:1c:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:08 2025 by rpki-client