Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3232203d3e20323730353737.roa
File:                     3138372e39342e31322e302f32322d3232203d3e20323730353737.roa (raw, json)
Hash identifier:          wT0y1yS8laqjVV4nLMG8LUXAwnpgNgxxU4jIm0Rtzd0=
Subject key identifier:   25:F5:D3:91:B5:A1:60:43:31:94:43:A3:CE:D1:83:CC:26:3D:45:3C
Certificate issuer:       /CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
Certificate serial:       748C6DB3C3F8B7FD1CE9ACD2BF79D9525804436C
Authority key identifier: FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3232203d3e20323730353737.roa
Signing time:             Tue 22 Oct 2024 21:08:46 +0000
ROA not before:           Tue 22 Oct 2024 21:03:46 +0000
ROA not after:            Tue 21 Oct 2025 21:08:46 +0000
asID:                     270577
IP address blocks:        187.94.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 17:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8c:6d:b3:c3:f8:b7:fd:1c:e9:ac:d2:bf:79:d9:52:58:04:43:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
        Validity
            Not Before: Oct 22 21:03:46 2024 GMT
            Not After : Oct 21 21:08:46 2025 GMT
        Subject: CN=25F5D391B5A16043319443A3CED183CC263D453C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:c8:36:e3:47:b5:ef:1e:31:0a:b2:47:b9:
                    1e:67:f5:dd:67:2c:18:00:75:9e:e7:15:55:b5:d7:
                    cc:59:e2:5c:00:74:66:dd:87:4f:b5:3f:2d:14:0a:
                    c8:38:86:53:08:5c:0c:35:51:22:bf:7b:5c:52:f1:
                    58:67:ab:47:65:74:73:9a:e1:43:d7:96:f0:9e:df:
                    e5:dd:33:fb:39:7b:6c:d3:4d:97:b1:67:49:68:cd:
                    05:04:0b:b9:3f:84:14:58:f5:73:b3:8d:66:e2:9f:
                    49:8c:dd:05:ee:51:65:f1:ae:3f:74:ee:a0:e4:19:
                    4a:65:85:dd:c5:2a:2a:ef:eb:97:8e:6a:f8:3c:14:
                    70:34:09:fb:1f:23:e1:72:e5:8e:c5:40:90:5c:59:
                    e5:88:4d:f4:43:90:bb:8a:b7:bf:e3:f3:83:3f:e7:
                    5f:95:ca:95:5e:ec:bf:4f:6a:da:bb:ef:07:1d:ad:
                    ce:2c:fb:ed:bc:b1:a1:79:6e:36:5b:7a:4e:99:39:
                    8c:3b:84:01:e9:3f:36:52:73:92:ec:d3:39:fd:21:
                    d0:a2:6e:e5:28:3c:ed:08:d2:89:c3:8c:dc:8d:ce:
                    2f:27:d7:f1:6a:ba:d0:7f:42:f9:31:4d:0c:c4:bb:
                    8d:6a:62:92:4d:e2:53:c6:b7:2d:50:71:d7:88:cd:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F5:D3:91:B5:A1:60:43:31:94:43:A3:CE:D1:83:CC:26:3D:45:3C
            X509v3 Authority Key Identifier:
                keyid:FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3232203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:05:d4:83:6f:33:83:73:13:6a:dc:02:30:6b:9f:14:90:51:
         98:80:91:aa:40:b1:1e:4c:53:da:6a:18:ac:b2:67:d8:b4:a2:
         06:59:7a:40:21:5d:1a:a1:dd:e5:20:df:7b:c8:f6:9b:27:fc:
         69:7e:f7:7d:fc:83:f0:09:34:0b:06:d9:6b:4d:13:74:6e:58:
         1b:9e:50:e4:3b:bd:cd:8a:ab:26:cd:b1:3f:f2:74:1a:9b:d9:
         e6:43:f1:8c:0c:1b:f4:02:f7:ab:52:e2:bd:eb:57:d5:b9:30:
         90:35:11:bf:29:2d:83:95:33:bc:8e:49:5d:41:82:02:33:71:
         47:27:ae:b0:ee:be:a0:18:cd:2f:63:6a:e7:74:03:1f:73:3c:
         41:2e:c6:bf:a4:37:4f:65:0a:c4:0d:18:1c:dc:b4:48:b0:a8:
         75:15:67:83:63:02:88:fc:3a:d1:68:65:02:a6:ab:cb:34:be:
         46:9b:83:28:fc:7a:c4:77:dc:ce:26:84:d5:c0:00:53:cf:86:
         cc:a3:da:97:e5:a5:00:28:1e:83:4c:ba:77:7d:4a:ff:68:1e:
         42:18:b1:e7:57:9c:44:e6:67:3a:19:94:a2:a5:3d:a2:94:23:
         0a:36:d9:28:0b:11:ff:2e:2e:d2:cf:0b:92:39:4a:74:c0:76:
         3c:13:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:00 2024 by rpki-client on console-ams.rpki-client.org