Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          13dv5BCOJqbiQfW61xlns/H1BRA7fVsslYtu0stwjTM=
Subject key identifier:   23:DA:E5:6F:43:02:6A:B3:81:04:2D:A5:E1:5F:E0:9B:6B:A5:7B:B5
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       5D0FE21532D63FBA87FC73CE04FD29CC7F14858A
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:08:38 +0000
ROA not before:           Thu 02 Jan 2025 13:03:38 +0000
ROA not after:            Thu 01 Jan 2026 13:08:38 +0000
asID:                     262875
IP address blocks:        189.113.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0f:e2:15:32:d6:3f:ba:87:fc:73:ce:04:fd:29:cc:7f:14:85:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:03:38 2025 GMT
            Not After : Jan  1 13:08:38 2026 GMT
        Subject: CN=23DAE56F43026AB381042DA5E15FE09B6BA57BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:b5:7a:5e:03:aa:fe:b2:ba:cb:6c:5b:bf:
                    b7:5d:ca:6d:77:bd:48:08:63:5c:5d:70:0c:a9:12:
                    24:8b:e0:05:b5:a2:7d:72:c2:7c:d2:c5:1c:44:98:
                    45:bc:73:4e:9b:6c:0b:f3:c6:cc:3d:74:3e:ce:b0:
                    32:72:54:b5:70:dd:57:6d:08:2a:3e:26:05:72:0e:
                    41:65:d9:74:39:f2:3c:2e:13:fd:c1:9f:bf:3a:c8:
                    b4:47:86:dc:3d:1f:73:c3:2d:32:e2:16:c5:33:46:
                    da:45:01:cf:50:a8:66:de:88:c2:a0:9d:a7:86:95:
                    f1:08:e9:7d:87:6e:74:cc:ce:65:53:79:c8:da:e0:
                    32:53:d9:2b:51:24:da:09:e1:ad:5e:28:fa:33:54:
                    db:32:76:c1:9f:0e:86:51:b3:9f:f7:88:07:94:50:
                    fc:e4:49:30:2c:a0:87:4d:61:9f:df:49:46:e2:99:
                    ce:aa:cb:47:ce:30:85:e4:98:8e:8c:4d:06:6b:35:
                    43:b3:91:58:cd:c9:07:84:52:97:81:c2:70:89:bc:
                    bf:3f:a5:58:e7:c7:48:76:29:a4:91:a8:22:d6:e7:
                    46:24:91:f2:fa:9d:3a:ac:b1:83:c0:71:15:a3:df:
                    89:de:6f:0a:31:db:e1:90:73:e3:6e:9d:27:1d:9e:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:E5:6F:43:02:6A:B3:81:04:2D:A5:E1:5F:E0:9B:6B:A5:7B:B5
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:00:ec:2b:91:ef:cf:0a:c8:ae:6c:74:8f:bb:09:52:d7:cd:
         5c:1f:7e:54:18:68:ac:40:5d:7c:94:f1:91:da:1f:92:a3:29:
         1e:55:fd:47:40:14:e7:7b:24:5e:9a:15:9d:0e:15:69:35:4e:
         3a:7e:f9:56:bc:f3:27:1e:3e:0c:61:9e:79:3f:c5:5d:66:3c:
         2e:20:3c:b8:47:a1:43:22:88:55:8f:66:26:d5:7e:56:97:c6:
         7a:16:77:8a:55:8a:1c:21:b2:f4:41:96:8b:66:bf:dc:27:b8:
         7a:2d:33:29:85:4c:4c:20:98:fb:69:0c:1b:74:72:82:7f:1f:
         0a:d8:42:d1:5e:5f:8f:71:0a:63:6c:99:9d:b7:0f:31:75:2e:
         8c:c8:d0:93:cd:ae:1a:76:6f:20:9c:c3:d1:c9:cc:49:19:46:
         bd:0b:5b:fb:bb:f0:ab:74:8a:6c:8a:02:88:84:39:4f:23:94:
         a9:1c:87:f2:48:73:81:31:4a:74:97:94:c4:9a:18:c0:b0:a5:
         6a:19:44:a9:c9:49:ef:0a:62:a4:09:7a:0e:fe:5d:9a:2e:16:
         ac:3a:36:76:b6:8f:7c:0f:a4:16:d8:79:27:9c:57:d9:21:be:
         c9:34:e4:e3:1e:95:eb:fd:9e:57:7c:8b:71:47:f6:c6:43:36:
         c4:0c:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:50:28 2025 by rpki-client