Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa
File:                     3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa (raw, json)
Hash identifier:          84yronc/eNrQ5eOhN8YUuXg1ibsBqpC6cH9k34iQrFA=
Subject key identifier:   78:7A:05:AC:1A:AF:BB:7E:57:8A:53:48:67:49:DE:E1:D0:A6:91:68
Certificate issuer:       /CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
Certificate serial:       37AD5E23CCE0617F3D1B15DCBF539736EE24A714
Authority key identifier: 50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa
Signing time:             Wed 05 Mar 2025 22:32:54 +0000
ROA not before:           Wed 05 Mar 2025 22:27:54 +0000
ROA not after:            Wed 04 Mar 2026 22:32:54 +0000
asID:                     266618
IP address blocks:        128.201.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl
                          rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ad:5e:23:cc:e0:61:7f:3d:1b:15:dc:bf:53:97:36:ee:24:a7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
        Validity
            Not Before: Mar  5 22:27:54 2025 GMT
            Not After : Mar  4 22:32:54 2026 GMT
        Subject: CN=787A05AC1AAFBB7E578A53486749DEE1D0A69168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:1d:b8:1e:4b:55:2c:9f:66:53:be:8b:9c:
                    f1:aa:41:fd:48:e2:d2:c0:53:85:5b:17:a6:48:54:
                    98:a7:ac:3f:f6:f9:e4:51:18:fc:fb:a2:41:98:b5:
                    34:bc:39:ad:b8:27:62:35:b3:b6:f6:d7:9c:53:ea:
                    6c:71:ae:9e:02:58:e4:8b:2e:8c:aa:19:78:4b:03:
                    d4:5b:fe:cc:a3:b1:72:22:a2:5c:c2:c4:67:fc:35:
                    e6:75:dd:ec:cb:ac:cf:94:11:0e:3b:8a:6e:55:ab:
                    95:b9:d7:eb:00:89:5a:5c:12:f9:97:d8:34:20:8c:
                    e0:a9:d3:41:12:54:f7:14:42:17:d8:3c:cd:5d:fd:
                    9d:53:47:f0:70:87:c3:79:65:08:09:eb:ca:b1:6f:
                    97:c5:d4:ad:5c:27:d0:fa:10:ba:23:16:16:24:ef:
                    4f:f2:aa:45:74:ba:f6:d9:a7:5d:84:82:33:85:bd:
                    cb:5e:da:48:c9:8b:77:ef:de:6f:a2:df:1a:0a:93:
                    a9:53:8e:81:41:f4:ee:ed:4a:58:51:d5:fb:e4:98:
                    4a:aa:ed:f6:01:1e:1d:19:b9:1d:f0:5d:5f:92:93:
                    ce:3f:10:06:ca:ab:f4:0b:38:e6:6c:f4:b4:dc:37:
                    33:79:aa:86:1c:b8:c5:06:e2:79:8e:e3:f2:e1:0a:
                    df:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7A:05:AC:1A:AF:BB:7E:57:8A:53:48:67:49:DE:E1:D0:A6:91:68
            X509v3 Authority Key Identifier:
                keyid:50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:bf:25:9b:5f:cf:f5:6f:44:0a:6a:af:92:b9:7b:38:18:
         39:e4:21:c1:34:5b:ac:56:ea:e1:7b:53:5d:a1:d3:44:02:24:
         be:4a:01:0b:48:91:d2:8d:ab:e8:b8:d1:2d:11:26:f2:47:b3:
         a7:70:a2:e5:08:b1:f7:b6:8c:33:c4:a1:41:2e:e5:97:e0:f9:
         99:1d:2c:b3:ac:c3:0e:d4:ea:05:a1:f9:fe:26:d4:db:3d:6a:
         16:2a:23:54:7c:47:d8:0a:be:7e:5d:ba:4e:a1:cf:cc:9f:0e:
         c3:25:c7:e7:e0:da:e8:79:dd:d2:1a:1f:0e:2c:77:08:ea:b6:
         2e:94:c6:77:6c:7c:01:03:9b:89:2b:03:ec:44:9c:77:75:42:
         9b:35:43:bf:f8:0e:e0:16:f0:f7:68:e6:80:21:96:e0:b9:4e:
         c1:f9:14:65:7c:eb:54:8f:c1:bd:07:7d:4f:7e:2c:6e:de:bd:
         a2:b8:98:01:56:df:f2:91:2f:10:aa:34:68:8d:fa:d9:cd:9b:
         33:c0:88:c5:05:ed:fe:75:59:ee:f3:6d:be:47:99:5f:49:df:
         0f:ce:55:eb:e7:be:7b:da:c5:06:0b:ad:03:4d:9c:9c:1f:27:
         c0:81:85:0e:7c:cc:a2:be:69:ab:e8:9c:4f:e7:02:48:99:62:
         2f:af:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:52:16 2025 by rpki-client