Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33322e302f32302d3234203d3e203238323436.roa
File:                     3138372e312e33322e302f32302d3234203d3e203238323436.roa (raw, json)
Hash identifier:          bAlMI1LvZ+QNtgOyxhkfH1XJxiLWSwYyxVof2c1hUW4=
Subject key identifier:   64:7A:8B:07:DB:03:F7:0B:3C:76:B2:68:D2:E1:70:22:03:47:FB:61
Certificate issuer:       /CN=778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561
Certificate serial:       19FA2BEEC36FBC6E02E84D6D0843E45DEFF5143F
Authority key identifier: 77:8C:A6:8D:B3:D9:CB:5F:6C:B9:0E:4A:CE:65:F9:98:73:BF:F5:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33322e302f32302d3234203d3e203238323436.roa
Signing time:             Mon 16 Dec 2024 14:59:01 +0000
ROA not before:           Mon 16 Dec 2024 14:54:01 +0000
ROA not after:            Mon 15 Dec 2025 14:59:01 +0000
asID:                     28246
IP address blocks:        187.1.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.crl
                          rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fa:2b:ee:c3:6f:bc:6e:02:e8:4d:6d:08:43:e4:5d:ef:f5:14:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561
        Validity
            Not Before: Dec 16 14:54:01 2024 GMT
            Not After : Dec 15 14:59:01 2025 GMT
        Subject: CN=647A8B07DB03F70B3C76B268D2E170220347FB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:96:1b:ae:14:72:9f:87:a0:d6:95:02:cc:
                    96:68:05:d7:7e:3c:4d:9b:d6:76:49:e4:93:81:c4:
                    6a:0d:f5:1e:97:31:e4:e5:a6:94:51:bb:4b:a8:e0:
                    dd:5a:4a:d0:86:61:61:7c:3f:61:e2:da:f5:61:d5:
                    6d:dd:62:01:12:a2:b8:75:ae:4e:4b:6f:4a:9f:55:
                    cb:1f:35:13:23:27:19:14:77:06:f5:4d:11:eb:73:
                    e3:95:66:0d:dc:3f:a8:bb:65:a0:d0:7a:ad:86:68:
                    8a:d7:e0:b7:bf:5e:78:80:0d:96:34:b9:bd:f8:f8:
                    f1:46:c8:49:f6:60:a8:34:b1:aa:77:76:ec:8f:28:
                    18:82:66:be:0f:7f:be:c2:1f:1a:3d:fa:53:fe:ad:
                    13:dd:42:c8:be:4f:bc:75:a2:3a:1e:44:6e:ab:9b:
                    9c:ee:92:3c:e3:4b:7d:a4:ac:e8:11:c9:65:12:8a:
                    14:98:83:6a:3c:2a:f6:54:f4:ba:23:82:00:1d:7c:
                    a1:0c:a5:d8:6a:55:ef:46:81:45:f1:44:0d:f3:ac:
                    a2:b2:86:08:76:c8:e3:ef:4b:af:fb:ed:4d:ba:11:
                    91:fb:74:29:dd:f2:57:dd:e7:74:a3:6d:4e:48:7a:
                    b9:4a:a0:b0:cf:9b:d2:32:32:3f:cf:05:c7:46:06:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:8B:07:DB:03:F7:0B:3C:76:B2:68:D2:E1:70:22:03:47:FB:61
            X509v3 Authority Key Identifier:
                keyid:77:8C:A6:8D:B3:D9:CB:5F:6C:B9:0E:4A:CE:65:F9:98:73:BF:F5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33322e302f32302d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:d4:ee:41:29:3d:f7:7a:6d:62:da:1c:fc:b2:d1:db:6e:
         84:1e:21:39:d9:c5:cc:12:d1:ab:63:cb:95:3c:56:1e:86:f0:
         6d:8a:6a:b3:01:c4:18:c3:c1:71:52:3c:94:ae:83:ce:05:1e:
         c1:d1:1f:17:d6:6b:69:e3:d3:cf:18:d8:bf:51:46:74:36:c1:
         f0:9f:8d:06:1f:68:84:c8:5c:60:c2:88:55:f9:89:29:4c:87:
         8c:09:72:96:8c:11:32:00:ac:97:0c:11:b9:d3:55:f4:14:32:
         39:6b:21:86:15:67:47:73:58:3f:ed:11:c8:6d:9b:7b:58:91:
         0b:ee:9f:59:02:2f:31:cc:ed:dc:14:03:7d:d6:f1:25:71:41:
         50:a9:71:71:09:f0:2b:48:59:e1:9b:54:11:7a:4b:31:81:ab:
         00:dd:92:6a:3c:90:80:89:df:97:fe:ee:51:f9:6a:d8:c8:a3:
         d1:e9:bc:87:77:20:20:85:a5:10:d5:36:58:ad:47:66:25:09:
         2e:14:62:3e:e1:ec:cb:27:5f:70:91:f4:6c:df:a6:5d:09:04:
         70:6a:59:f7:1e:bb:ae:a4:b9:8f:eb:f5:21:06:cf:33:bf:5f:
         d6:99:45:d8:21:99:19:05:14:4d:8c:d8:cc:16:82:0c:d8:22:
         32:88:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:19:09 2025 by rpki-client