Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
File:                     3138392e31342e38302e302f32302d3234203d3e203238323737.roa (raw, json)
Hash identifier:          n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=
Subject key identifier:   B4:1B:7D:A5:16:19:3B:B7:40:D0:37:CC:93:16:14:42:40:15:C5:C1
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       2863BDD1D336CCFD83A2FFCC129776892C9AD9E1
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
Signing time:             Tue 08 Apr 2025 20:15:21 +0000
ROA not before:           Tue 08 Apr 2025 20:10:21 +0000
ROA not after:            Tue 07 Apr 2026 20:15:21 +0000
asID:                     28277
IP address blocks:        189.14.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:63:bd:d1:d3:36:cc:fd:83:a2:ff:cc:12:97:76:89:2c:9a:d9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Apr  8 20:10:21 2025 GMT
            Not After : Apr  7 20:15:21 2026 GMT
        Subject: CN=B41B7DA516193BB740D037CC931614424015C5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:61:fc:f1:48:68:59:71:5f:0e:d8:94:91:
                    50:38:42:d7:56:e1:e6:cd:bb:b1:5b:ae:8f:7e:de:
                    5d:0f:e9:69:bf:5c:01:f2:2a:d6:64:a3:c7:f6:2e:
                    7f:b5:19:80:42:31:01:a2:19:1c:a6:40:11:e2:68:
                    d7:2d:0d:5f:94:0e:fd:e1:4f:93:d0:70:c4:0f:66:
                    38:16:c9:29:8b:ec:cb:7c:88:13:93:08:36:3d:6b:
                    ff:70:ba:b1:d2:ea:23:f0:cd:bd:68:c7:c1:45:40:
                    a0:57:d6:4e:68:3b:fb:e7:4e:40:b1:e6:8c:57:65:
                    91:8a:c5:3f:0b:7c:54:95:c8:ea:99:8c:8a:c0:e7:
                    4e:7c:4c:bf:5c:97:9f:57:7d:71:84:31:99:d3:57:
                    6d:72:9b:5b:ee:a3:be:33:58:93:73:d1:02:aa:50:
                    c6:b6:cf:68:ea:86:d0:dc:80:4f:69:5e:5f:df:36:
                    d5:cd:a2:19:18:ea:a7:12:b6:d2:e4:4b:f1:50:10:
                    02:ab:00:e0:45:70:3f:42:34:c3:be:82:54:7e:c2:
                    90:6b:f9:04:ae:57:a0:7c:07:53:a5:de:37:56:04:
                    c5:da:fe:80:ca:59:fc:fd:7b:62:46:8a:4b:89:3c:
                    5b:dc:78:cd:70:ea:5c:4b:f7:35:e0:7e:d8:e6:4e:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:7D:A5:16:19:3B:B7:40:D0:37:CC:93:16:14:42:40:15:C5:C1
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:2c:ca:8d:25:b3:ba:07:21:3b:84:ec:50:db:e9:58:9b:e1:
         ba:7f:5f:2b:f6:07:24:4b:1c:12:e1:24:99:9c:87:96:de:1b:
         63:81:a5:c5:6e:c7:17:2d:ea:b6:b3:f3:f8:e5:54:b8:e8:e3:
         df:19:88:e2:a7:e9:92:43:ee:11:57:ca:fe:74:2a:5c:49:67:
         67:68:a6:80:43:16:4a:8e:c8:4b:62:90:06:6e:db:24:96:e2:
         e6:90:01:6a:d1:be:df:10:78:1c:16:ca:a0:eb:b3:cf:1b:87:
         91:8e:47:5c:ff:a9:70:bb:e7:08:1e:07:e2:57:aa:45:e3:97:
         69:cf:8f:f0:28:06:dd:7e:e4:b0:1b:54:49:4e:54:45:a8:93:
         e3:fd:ef:19:26:fa:37:ad:1c:4a:ad:a2:8c:61:20:2b:d8:b3:
         67:ea:02:fe:5a:89:4b:89:57:c5:6e:ee:1a:f5:11:87:76:9e:
         39:a9:eb:f8:87:4b:a4:e2:6b:1d:92:71:96:9c:35:dc:26:fa:
         db:39:a3:3f:ef:d9:8b:83:27:f6:f8:a4:a3:b0:8a:29:e1:a4:
         e3:22:ba:9b:b8:ab:66:bb:73:f6:3a:70:7d:88:6d:43:79:40:
         fb:73:c6:69:ac:0b:1b:8c:ad:3a:6c:34:6e:b8:7b:f5:55:6b:
         6d:16:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:20:43 2025 by rpki-client