Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133372e302f32342d3234203d3e20323730353936.roa
File:                     3138372e31372e3133372e302f32342d3234203d3e20323730353936.roa (raw, json)
Hash identifier:          y1SerMi/FSu26sjDiCBRrcvfyAIekWnnpjKMJKkG3co=
Subject key identifier:   AE:F8:3F:DC:65:92:94:D4:E6:A5:58:02:77:C0:CB:88:9F:43:5E:94
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       182A111CF3A3B5EF5F9D923D6CC33B84F9F8355C
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133372e302f32342d3234203d3e20323730353936.roa
Signing time:             Mon 14 Apr 2025 21:15:29 +0000
ROA not before:           Mon 14 Apr 2025 21:10:29 +0000
ROA not after:            Mon 13 Apr 2026 21:15:29 +0000
asID:                     270596
IP address blocks:        187.17.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:11:1c:f3:a3:b5:ef:5f:9d:92:3d:6c:c3:3b:84:f9:f8:35:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Apr 14 21:10:29 2025 GMT
            Not After : Apr 13 21:15:29 2026 GMT
        Subject: CN=AEF83FDC659294D4E6A5580277C0CB889F435E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:39:f3:f7:1f:33:30:fb:b6:f6:c6:a5:78:
                    c3:6a:5e:6b:36:67:e7:91:95:45:2f:e8:d1:55:e2:
                    da:7b:2c:b0:b0:48:76:8f:56:fe:32:74:cb:8a:ce:
                    cc:39:f7:0c:90:d6:8c:70:d3:03:c6:7d:50:fa:3e:
                    d7:04:8c:f8:38:0b:68:55:90:14:df:79:25:09:7b:
                    a5:91:1b:89:71:df:c9:cd:fb:ce:e3:2b:a3:6e:67:
                    35:e6:c0:73:d6:eb:6d:a7:1d:9c:b6:08:46:a3:c2:
                    58:98:ce:5a:e6:39:6f:1e:2e:53:5e:a2:c4:c6:bb:
                    87:8c:81:f9:61:d1:99:a9:a7:6a:5a:7b:91:5a:3d:
                    f7:ab:f3:47:b1:98:f7:d4:40:d8:26:b8:f6:01:9a:
                    b4:12:43:d6:dd:58:92:2c:7b:c5:88:eb:a3:76:d8:
                    c5:bf:ac:19:ee:e8:6a:ae:07:c1:d9:e0:31:b8:ca:
                    48:d1:fa:ba:9c:58:6a:8a:ee:3c:5e:ea:04:bb:c2:
                    da:b5:c9:fc:50:3d:b9:09:68:0b:03:3d:8a:a9:05:
                    33:28:3e:29:09:b6:c5:ad:3f:42:54:11:f9:3c:02:
                    b9:49:fe:4d:43:db:71:57:94:4a:40:aa:31:e2:0d:
                    b2:52:f8:dd:17:94:3d:f4:12:e5:54:e5:14:ba:e3:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:3F:DC:65:92:94:D4:E6:A5:58:02:77:C0:CB:88:9F:43:5E:94
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133372e302f32342d3234203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:13:dd:54:75:5b:82:c0:0a:81:32:1e:fc:a1:b7:02:2c:
         dd:d5:4a:ec:5a:46:5d:b5:57:24:6d:61:60:0d:b9:d6:97:0e:
         46:fc:3b:be:b8:99:e9:e8:46:cc:a5:1e:90:ea:ee:60:24:ce:
         e0:0e:4e:9d:32:c1:b0:d9:c6:89:1a:f6:1b:81:82:9b:70:e2:
         ca:6a:65:95:43:ba:ab:3b:d9:89:6e:f1:06:2b:b0:ed:13:96:
         ba:41:60:31:6d:88:ab:8a:48:cb:00:96:82:fd:f8:17:b5:cf:
         5b:18:1f:22:27:70:26:08:e1:cc:da:5f:fe:ec:74:a8:b5:ae:
         9d:18:32:90:b5:6a:88:4f:dd:44:6c:4b:de:06:0e:a5:a2:5c:
         c9:49:ed:cc:dc:4c:c0:cc:b9:ca:d2:54:74:5b:ce:fe:5e:8e:
         26:31:8c:03:d7:8b:64:17:3b:35:6c:a2:6c:12:d8:7b:09:60:
         44:11:f4:2f:33:a4:d4:fd:06:7e:2f:eb:83:69:b7:a2:67:8d:
         ce:87:dc:4e:51:67:a5:26:e6:33:ff:ea:2c:b1:a3:92:a3:bd:
         76:13:6e:4d:d0:2e:e7:19:fa:52:fe:c0:35:4f:c9:06:70:ee:
         80:35:7a:28:8b:ff:de:c6:fc:23:99:87:bb:eb:cd:d5:b0:9b:
         cb:05:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:03 2025 by rpki-client