Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32302d3230203d3e20323632383735.roa
File:                     3138392e3131332e33322e302f32302d3230203d3e20323632383735.roa (raw, json)
Hash identifier:          0XfNNdONRDhk7d7hcwzUbH8tWAMOc7pld/xqbMIxiH0=
Subject key identifier:   09:AA:FE:1A:0E:E4:5B:D2:70:13:EC:60:CA:06:94:C1:35:60:F4:A3
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       06A09BA0A7929AB9F2605C96CF3DAE7402E4FB6D
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32302d3230203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:00:55 +0000
ROA not before:           Thu 02 Jan 2025 12:55:55 +0000
ROA not after:            Thu 01 Jan 2026 13:00:55 +0000
asID:                     262875
IP address blocks:        189.113.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a0:9b:a0:a7:92:9a:b9:f2:60:5c:96:cf:3d:ae:74:02:e4:fb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:55:55 2025 GMT
            Not After : Jan  1 13:00:55 2026 GMT
        Subject: CN=09AAFE1A0EE45BD27013EC60CA0694C13560F4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:86:1b:74:16:26:02:45:25:60:1f:e6:39:
                    fe:58:b5:9f:57:de:e0:2f:75:7b:1c:eb:8a:ad:9d:
                    b0:72:90:e0:09:79:2e:fd:19:18:71:04:b0:73:6c:
                    e2:01:73:7e:3a:ff:73:c0:e4:b8:d8:aa:8c:32:0c:
                    f6:52:37:cc:d4:a6:b7:8d:7f:e5:68:b9:9e:d9:9c:
                    2b:91:16:38:97:f5:f2:c2:a8:7d:24:56:61:bc:5f:
                    a0:02:a2:b3:90:b1:d8:3c:43:d8:08:36:35:f5:3e:
                    ef:8e:bb:16:f1:b9:8b:3a:38:c4:e2:ad:a6:3c:a4:
                    39:34:f4:dc:55:f7:88:6f:13:58:5a:08:d0:e9:75:
                    2c:1b:35:67:94:a8:7f:90:15:b9:58:aa:0c:49:b0:
                    cb:4d:ab:58:a4:06:dd:f8:dc:14:60:d6:c5:67:42:
                    b8:eb:3c:ba:77:d5:e6:1c:df:f5:53:41:78:c5:7f:
                    8c:9d:34:9c:2d:27:04:06:84:e4:51:06:e4:0e:1d:
                    ee:ff:85:71:60:74:0d:55:af:89:8f:44:22:21:38:
                    14:72:8c:ea:bb:4e:b9:75:62:5d:23:53:4f:ac:dd:
                    e5:5c:d3:a5:82:6d:29:90:a5:2d:3d:de:ef:91:f6:
                    34:06:92:83:81:d4:3f:20:d0:41:80:83:f2:a8:ff:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AA:FE:1A:0E:E4:5B:D2:70:13:EC:60:CA:06:94:C1:35:60:F4:A3
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32302d3230203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:42:0b:37:0e:ce:89:63:ee:be:32:ae:fe:e1:31:d5:a4:29:
         7e:37:3f:e7:56:ed:93:7c:9c:f7:3c:7d:94:83:06:49:34:09:
         21:f5:16:eb:ab:02:c2:1f:66:bb:32:48:52:4a:ba:0a:57:3e:
         fd:0e:5f:d7:e6:b5:bb:56:df:e1:2d:91:e7:80:33:98:2d:e7:
         9f:c5:f3:b9:07:71:b5:23:1f:3b:52:ac:ea:c7:c0:ff:cb:96:
         0d:22:41:65:11:f3:1b:86:d6:92:67:e6:61:4a:86:4f:de:f2:
         18:37:90:72:50:ba:9c:e3:9e:88:35:aa:5a:2e:de:84:0a:df:
         cb:cc:a8:f4:b4:24:a2:b3:cd:0c:bd:6f:ff:00:a4:b5:dd:84:
         62:5a:51:ee:b2:95:64:1b:2f:e8:1a:1b:62:19:d0:70:34:21:
         24:06:3e:3e:91:e2:cb:6e:ca:01:82:fe:e4:56:38:5e:92:c1:
         23:e3:72:c9:6a:c0:d9:3f:d3:c3:3f:22:82:2b:29:94:d2:5b:
         50:48:a1:69:1f:f5:b0:10:d6:4a:6d:06:cd:f0:34:b9:ac:ef:
         77:84:d6:b3:ac:04:76:37:3d:a5:5b:93:5f:9e:79:ef:41:8f:
         22:43:ea:08:14:e4:f7:fb:e0:99:ee:39:a4:fd:da:21:97:98:
         86:84:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:52:50 2025 by rpki-client