Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32332d3234203d3e203631363039.roa
File:                     3138372e302e3233362e302f32332d3234203d3e203631363039.roa (raw, json)
Hash identifier:          uCue83EBdsCTleRISOJJywuzlKgO9xMEdjjWNjQXQ8o=
Subject key identifier:   88:35:8D:85:C7:03:AA:21:2C:AF:78:BA:2B:B6:05:28:3B:F6:20:5E
Certificate issuer:       /CN=FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626
Certificate serial:       2907C9453DE4C9F1940B809D0F78A9AD7A640259
Authority key identifier: FC:B7:01:6E:B8:D9:F4:B1:CF:78:80:63:AA:A5:F7:04:BD:3C:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32332d3234203d3e203631363039.roa
Signing time:             Tue 27 May 2025 20:46:41 +0000
ROA not before:           Tue 27 May 2025 20:41:41 +0000
ROA not after:            Tue 26 May 2026 20:46:41 +0000
asID:                     61609
IP address blocks:        187.0.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 16:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:07:c9:45:3d:e4:c9:f1:94:0b:80:9d:0f:78:a9:ad:7a:64:02:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626
        Validity
            Not Before: May 27 20:41:41 2025 GMT
            Not After : May 26 20:46:41 2026 GMT
        Subject: CN=88358D85C703AA212CAF78BA2BB605283BF6205E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c3:b2:12:ce:ca:c2:35:5f:dc:f9:ca:ac:9e:
                    53:11:56:41:45:a8:0e:2d:77:73:f8:6a:ec:2f:fa:
                    ad:32:26:a6:08:9d:ab:5e:cb:ad:36:1b:43:da:1b:
                    cd:d0:7b:f6:3c:d1:82:a3:b0:ec:8a:e5:0a:60:7c:
                    ad:fd:8a:62:ba:97:2c:74:f5:ac:ee:64:07:22:80:
                    a4:68:40:43:6d:c5:e2:00:a8:44:67:aa:92:b6:ef:
                    2c:62:cd:23:df:08:97:5a:2e:42:bd:00:3a:19:3c:
                    f6:51:e1:36:8c:27:81:5c:03:90:74:da:e9:b7:db:
                    43:58:c5:2d:bb:0c:da:7a:2e:45:39:06:68:7f:42:
                    78:f1:62:ee:46:2c:ee:b4:82:39:d2:67:24:cd:6c:
                    30:32:22:d7:78:4a:09:65:f5:07:43:c0:76:e9:37:
                    00:73:d9:16:b5:71:9c:f6:e4:df:bc:cf:11:b1:b6:
                    ed:ca:66:de:27:b3:1c:2e:7a:bf:a2:a6:29:19:ca:
                    b8:5e:c1:e8:93:30:0c:41:70:62:49:37:27:d8:30:
                    9d:fa:7b:33:85:a5:09:70:46:36:d0:e4:bc:ca:0a:
                    5b:d3:d8:3a:42:1b:2d:dc:c1:b7:1d:11:f6:7c:6a:
                    a9:e7:97:f9:15:ef:94:a5:84:d5:52:1d:36:57:f3:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:35:8D:85:C7:03:AA:21:2C:AF:78:BA:2B:B6:05:28:3B:F6:20:5E
            X509v3 Authority Key Identifier:
                keyid:FC:B7:01:6E:B8:D9:F4:B1:CF:78:80:63:AA:A5:F7:04:BD:3C:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32332d3234203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:c2:a3:6c:cb:3e:d2:d9:1a:14:4c:3e:25:67:3f:a3:67:
         ef:92:8b:43:0a:60:45:42:5f:66:5a:f4:37:27:22:15:c7:25:
         4d:b9:81:22:7e:74:e5:7a:fc:ac:6f:f4:b6:35:13:ea:81:c5:
         c7:da:ac:10:a1:37:76:ab:85:bb:f0:e3:53:01:75:c8:d3:44:
         8e:8f:20:12:f3:f4:c1:a0:0d:0b:a6:95:73:b7:7a:1c:06:cd:
         5c:46:67:d3:0c:24:72:14:95:4e:b1:3e:3f:ae:db:ff:c5:42:
         47:be:c6:f5:82:c2:9a:5f:71:de:ec:a5:57:9d:a4:48:db:d0:
         a0:db:74:9f:42:eb:07:fc:77:8b:9c:49:ac:e0:f3:ce:ac:e8:
         06:36:a8:98:79:70:58:4a:76:ac:0e:68:f3:75:06:8d:e7:78:
         86:9c:27:03:cf:a8:56:d8:5b:02:7b:34:89:37:e8:48:4d:cf:
         0d:b5:91:ea:96:1f:e4:cc:57:67:71:b8:c0:78:01:d6:98:ef:
         99:1a:2d:2c:79:bf:cc:e5:99:a6:b1:5f:9b:87:ac:70:c7:04:
         59:74:74:57:07:27:30:c3:51:6c:57:13:db:5e:cc:87:93:e4:
         c2:72:7c:41:58:c1:cb:e4:12:2b:8e:58:cb:c5:ea:41:bf:81:
         74:78:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:45:51 2025 by rpki-client