Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          IbbwJfvVHD7NWuSEOlKiZedgV+CkNrEUse8OowGtH+M=
Subject key identifier:   06:42:7E:DA:C3:C8:C1:61:C0:BC:68:22:CC:1D:E7:1E:0B:FB:92:57
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       4ED09CBFC813815A64A2238036023FD855C60A51
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa
Signing time:             Fri 31 Jan 2025 18:37:29 +0000
ROA not before:           Fri 31 Jan 2025 18:32:29 +0000
ROA not after:            Fri 30 Jan 2026 18:37:29 +0000
asID:                     270577
IP address blocks:        187.94.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d0:9c:bf:c8:13:81:5a:64:a2:23:80:36:02:3f:d8:55:c6:0a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jan 31 18:32:29 2025 GMT
            Not After : Jan 30 18:37:29 2026 GMT
        Subject: CN=06427EDAC3C8C161C0BC6822CC1DE71E0BFB9257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:d4:fb:8f:70:76:5b:4c:de:c2:78:f6:dc:
                    e9:bd:18:32:e0:9f:4b:8f:bd:3a:5b:a9:26:b3:41:
                    20:49:0b:2d:7c:2c:71:f7:95:b2:ea:5f:7e:76:c8:
                    48:b1:71:e0:9a:7a:d4:58:33:f8:36:75:c8:38:45:
                    4b:95:fa:f2:ae:e9:fa:11:88:a8:5c:2f:6d:a2:87:
                    47:e7:87:17:17:73:2e:11:a7:48:c6:78:9b:ab:f2:
                    05:a2:ea:41:62:7a:2b:6d:e8:99:2a:b0:14:98:24:
                    d1:65:85:7e:4e:cf:07:37:fa:50:f3:e0:4c:d5:c9:
                    e5:5a:f9:ef:1c:4a:20:7f:34:23:33:38:41:00:b2:
                    0e:f9:dc:e3:74:4f:9b:4c:bb:a0:ee:fd:e2:b7:61:
                    ef:7b:c2:a1:55:09:6f:1b:28:8e:04:e2:a7:3e:7f:
                    a7:bd:88:02:62:46:8e:bb:ab:aa:8f:88:ea:46:ef:
                    8e:d2:1f:a7:eb:ad:68:18:f7:22:07:4b:4d:9b:ec:
                    3a:07:13:31:f3:f6:fe:97:7b:be:5d:48:e8:dd:a8:
                    3a:bc:05:52:27:63:01:41:d7:c8:96:1f:52:96:77:
                    c8:d5:52:82:fb:cf:0e:47:3e:54:ac:bf:a4:1b:72:
                    55:9f:6a:1e:35:5a:df:3b:cd:d0:85:af:e2:ac:a6:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:7E:DA:C3:C8:C1:61:C0:BC:68:22:CC:1D:E7:1E:0B:FB:92:57
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:e8:02:e0:10:e4:3c:fd:17:10:d2:ae:a8:21:8b:c0:13:
         77:d7:e0:8c:51:70:a9:ae:29:06:7d:27:b9:50:37:f2:8e:8c:
         fd:88:cb:c5:20:63:cb:f1:d1:8f:8f:72:8d:be:12:ef:2a:df:
         fd:70:2d:33:18:ce:4e:f5:1a:4a:89:a9:61:33:72:be:a8:01:
         0b:21:9c:bf:37:e5:f4:5e:bf:a4:03:a9:a2:ef:45:a7:57:f0:
         fc:50:ef:4a:59:1d:b8:ed:64:12:a1:b6:6f:23:c3:49:f5:0c:
         f1:02:c4:e0:7d:ed:6a:a4:55:52:e9:8b:c4:fe:c2:5a:08:56:
         f1:a0:7b:84:8f:03:e9:77:0a:ca:f7:9e:0c:27:73:48:70:e7:
         15:e8:52:ad:43:42:eb:09:26:27:cb:07:9c:20:a1:98:dc:f1:
         44:3a:96:fd:a4:29:ca:a8:5f:da:a7:5f:bf:fe:7e:a2:2a:0b:
         51:a7:4c:31:4a:e5:84:06:f5:c1:f7:d3:4c:f5:65:bb:b0:17:
         9a:4a:20:d9:33:3e:e3:0f:87:aa:73:06:7d:c9:78:02:84:92:
         91:8e:dd:bd:ca:cd:a9:25:af:ac:6e:11:5d:9e:f2:f4:0f:7e:
         2f:34:3a:68:b5:64:b5:6e:33:69:aa:ff:69:a5:d0:db:d9:d2:
         39:5f:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:39 2025 by rpki-client