Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa
File:                     3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa (raw, json)
Hash identifier:          70BJQu4PLqi9KdVVab9jANTw7cydloTHwzKtBuGLFtM=
Subject key identifier:   B4:A3:67:F4:CB:C3:ED:F9:1A:E9:35:75:D8:2B:A7:E6:61:ED:1F:BA
Certificate issuer:       /CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
Certificate serial:       4264242B88854D5808C145800DE3AAD7DB70B9EB
Authority key identifier: BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa
Signing time:             Wed 19 Mar 2025 16:16:27 +0000
ROA not before:           Wed 19 Mar 2025 16:11:27 +0000
ROA not after:            Wed 18 Mar 2026 16:16:27 +0000
asID:                     270244
IP address blocks:        187.62.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl
                          rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:64:24:2b:88:85:4d:58:08:c1:45:80:0d:e3:aa:d7:db:70:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
        Validity
            Not Before: Mar 19 16:11:27 2025 GMT
            Not After : Mar 18 16:16:27 2026 GMT
        Subject: CN=B4A367F4CBC3EDF91AE93575D82BA7E661ED1FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:97:3e:ae:96:25:34:e9:89:7c:7e:bf:9a:
                    25:49:ed:ba:32:87:1b:5c:45:4d:b6:f3:57:47:25:
                    74:f7:09:3b:13:8f:49:03:ba:c0:f1:89:f0:ec:43:
                    fa:89:ac:20:e7:89:3a:39:46:49:12:12:01:a5:84:
                    f4:39:ea:91:5b:c5:4a:bb:91:c7:ce:fb:6e:96:28:
                    c2:fd:17:88:00:9a:b7:89:f7:5d:05:2a:5d:0f:ea:
                    af:88:cc:44:41:2f:0d:0a:21:3f:1c:ba:b7:63:4a:
                    6b:d6:cb:b9:65:5f:2b:f8:a0:79:f0:b7:18:1c:8b:
                    b7:c4:ce:3d:8f:d7:3f:ed:bc:18:ed:92:7e:b0:61:
                    69:d2:41:75:4d:4d:57:61:c8:72:65:c3:72:a4:9f:
                    5b:26:94:d3:a4:7e:e8:2a:07:9f:20:5e:fb:38:ea:
                    d7:bf:d0:fc:db:68:cd:78:e5:37:7b:d3:69:74:a4:
                    dc:27:14:9c:54:3c:7d:0f:45:09:4a:5c:79:54:79:
                    f7:63:64:5b:ad:13:5c:71:ca:23:c6:a8:eb:70:41:
                    02:5f:ff:5f:f8:e3:d8:3d:61:37:8d:30:7d:19:47:
                    2d:2c:28:a2:37:65:c2:06:37:aa:70:47:80:6d:7b:
                    f2:ca:28:79:e4:ae:2f:ed:ff:c0:fe:7d:42:c5:34:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A3:67:F4:CB:C3:ED:F9:1A:E9:35:75:D8:2B:A7:E6:61:ED:1F:BA
            X509v3 Authority Key Identifier:
                keyid:BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:83:26:b6:0a:1c:6a:c8:41:7e:e3:15:c2:8f:ac:de:bf:3f:
         d0:03:b5:e3:fb:2b:a0:89:50:04:ef:42:52:c9:7d:ef:df:73:
         f1:a0:1b:76:31:9c:b0:96:1b:04:9a:36:34:16:b4:12:a8:81:
         bd:6c:d7:72:3e:45:1f:a6:16:e8:15:a2:a0:3b:d4:c5:16:2d:
         46:5e:72:31:a4:02:6c:a4:3f:ee:e9:46:d9:10:c6:01:f5:ed:
         27:9e:d9:9e:c3:3c:66:eb:de:db:7d:be:1b:c5:2f:65:b0:29:
         8b:ef:18:6c:ef:ff:4c:5c:50:34:e4:b6:91:a9:fb:2a:74:9a:
         33:38:fb:46:f8:61:60:82:90:ec:1b:e8:9c:2d:fa:be:f7:24:
         ba:7b:5d:da:38:f4:85:a2:0f:1c:43:d5:31:14:8e:1a:6f:77:
         74:47:e2:f5:d8:e2:a0:99:3f:42:24:1e:e0:12:b4:87:a8:29:
         40:e4:06:d7:02:88:17:68:00:fe:f4:96:51:89:6f:d6:6e:1e:
         b7:b9:fb:08:dd:c6:a1:d2:7e:15:e1:f4:e4:df:60:20:8f:61:
         04:a2:5e:9d:ed:a4:e0:c5:81:f6:9f:0d:c5:41:d4:4d:e2:d3:
         4b:2f:28:da:22:92:dd:d5:01:be:fb:16:e0:01:db:b3:b7:fd:
         7f:e5:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:50:47 2025 by rpki-client