Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3234203d3e203238333730.roa
File:                     3138372e34352e3134342e302f32302d3234203d3e203238333730.roa (raw, json)
Hash identifier:          ajoqP0chGI7RDEOpLwPl/OarxrO/YWkTO3ucnYFpUmQ=
Subject key identifier:   35:3C:B2:F2:83:B5:09:6B:62:6B:4A:4F:8B:D5:97:6E:AC:17:21:11
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       0ACCF759664C92751F5D6AF655D6CA1D670A4393
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3234203d3e203238333730.roa
Signing time:             Thu 06 Mar 2025 02:07:06 +0000
ROA not before:           Thu 06 Mar 2025 02:02:06 +0000
ROA not after:            Thu 05 Mar 2026 02:07:06 +0000
asID:                     28370
IP address blocks:        187.45.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 07:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:f7:59:66:4c:92:75:1f:5d:6a:f6:55:d6:ca:1d:67:0a:43:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Mar  6 02:02:06 2025 GMT
            Not After : Mar  5 02:07:06 2026 GMT
        Subject: CN=353CB2F283B5096B626B4A4F8BD5976EAC172111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:44:ca:89:b4:47:cd:cf:1d:30:04:5b:e2:
                    b4:5e:13:a1:f2:ad:bb:d0:ac:7c:91:ba:1f:40:b9:
                    69:07:64:45:57:dc:bd:cc:0c:38:5d:de:15:53:74:
                    b3:e1:d4:ac:82:9e:36:31:1e:5f:6b:15:f1:89:23:
                    8f:25:d7:21:55:ca:56:a0:fc:34:f0:aa:df:38:f0:
                    99:c5:0d:06:94:5f:23:d8:eb:5f:3e:44:4e:9d:de:
                    3f:9a:0c:04:9c:3c:68:96:35:00:90:f1:d7:f7:1d:
                    bc:a1:a2:37:9e:dd:48:72:20:9d:64:78:ad:a0:b5:
                    9c:dd:df:28:99:ed:2e:b8:08:1a:48:b5:06:2e:05:
                    dc:21:b3:a8:86:f8:61:0e:5d:e0:f4:ba:62:35:2f:
                    e4:41:3f:34:3b:57:80:ff:dd:a6:84:0b:4a:9b:2c:
                    57:89:78:48:42:88:e5:72:97:9f:a8:bb:22:1e:7c:
                    81:a9:72:08:45:c4:ec:d8:d1:a1:21:43:26:4b:80:
                    41:e0:58:f3:ca:62:b6:ad:a5:51:a0:40:66:26:2f:
                    b3:b6:2d:1a:55:3a:b2:ab:20:78:4f:32:e2:25:05:
                    c4:18:3c:85:ee:b1:ee:07:a2:04:1d:ed:53:94:40:
                    3c:65:cf:2a:18:54:7a:8d:a3:ca:a1:45:95:28:d4:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3C:B2:F2:83:B5:09:6B:62:6B:4A:4F:8B:D5:97:6E:AC:17:21:11
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:20:bb:17:f0:6a:bb:47:42:91:77:b6:85:78:76:7f:61:8c:
         64:79:66:31:4e:eb:0c:22:73:da:81:c5:73:a4:8e:cd:1c:7f:
         59:d2:4e:41:a3:d3:f4:e0:e0:63:e3:38:f3:c3:82:c3:85:8f:
         e7:74:9f:df:7e:db:67:81:37:6e:11:36:3f:04:cd:93:1c:90:
         39:38:fa:1a:10:1d:d6:62:13:a7:9e:55:ac:05:b3:87:da:46:
         f5:8e:23:74:d6:5f:e1:2e:94:bf:ec:b2:ec:88:9b:c8:5a:2e:
         15:2e:a2:e4:3d:94:11:21:f7:22:c6:89:e5:f7:d4:4f:cd:52:
         17:16:fd:00:e6:38:cd:2b:ec:f4:0a:f2:97:9b:c3:73:02:af:
         07:98:45:f2:67:89:65:15:6d:7b:44:70:9b:71:1a:7b:90:59:
         1d:92:c0:d0:b3:97:44:57:c5:82:e4:2d:d6:9f:25:b2:3e:87:
         18:68:f0:9b:d5:83:bb:95:3f:44:c0:4e:1b:fd:db:7e:80:8c:
         2b:34:11:e6:87:0e:08:b2:33:7a:92:51:4c:88:b1:3f:3d:03:
         62:15:2f:99:44:e5:e0:64:06:70:f9:be:a2:a2:57:50:68:49:
         14:f9:5c:23:f6:e3:8b:f9:d4:fa:46:b5:94:1c:07:fb:9b:fc:
         ec:22:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:55:35 2025 by rpki-client