Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
File:                     3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (raw, json)
Hash identifier:          olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=
Subject key identifier:   1B:7B:F4:79:12:BD:10:78:5D:C5:5C:3D:94:0F:94:5B:E3:8D:0E:A0
Certificate issuer:       /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial:       03A1E8C11EB7317992C1AC7E92DDB387E5E8D823
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
Signing time:             Thu 06 Mar 2025 08:34:22 +0000
ROA not before:           Thu 06 Mar 2025 08:29:22 +0000
ROA not after:            Thu 05 Mar 2026 08:34:22 +0000
asID:                     53120
IP address blocks:        187.111.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
                          rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:e8:c1:1e:b7:31:79:92:c1:ac:7e:92:dd:b3:87:e5:e8:d8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
        Validity
            Not Before: Mar  6 08:29:22 2025 GMT
            Not After : Mar  5 08:34:22 2026 GMT
        Subject: CN=1B7BF47912BD10785DC55C3D940F945BE38D0EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:54:33:c0:3d:b6:29:58:28:0a:26:23:ff:
                    e5:b0:0a:c7:9d:9f:8d:1a:19:48:09:a0:4a:fc:fe:
                    a5:b1:37:93:bc:9f:29:c5:a6:88:41:42:98:f8:c2:
                    13:30:60:0e:ce:19:a8:11:91:33:0b:c5:ec:17:7e:
                    dd:e4:24:5f:da:69:d6:c3:d4:41:7f:4c:c0:49:1b:
                    7f:65:91:2c:80:7c:27:9e:13:d8:55:74:9d:43:3d:
                    5a:d9:ca:4e:10:0c:36:61:38:1d:f3:c2:98:25:c9:
                    2c:4f:9b:8d:b0:71:b5:65:9b:01:7c:dd:b7:41:5f:
                    63:7c:17:2d:63:43:49:e5:84:48:69:e5:00:a0:f4:
                    d6:a7:b4:f5:2b:fd:bb:c2:f0:6d:9b:88:2c:f5:ac:
                    b8:67:34:1a:2c:56:ba:54:b1:73:e2:f0:d5:44:f4:
                    ff:cf:c6:28:48:e8:d8:36:90:cb:0a:be:2b:61:bd:
                    1c:9e:69:4d:a2:b5:cc:c4:ec:fa:a5:d6:17:94:33:
                    cb:ee:24:2e:64:bc:ef:b2:17:e1:59:a9:15:de:cf:
                    b7:22:6c:7b:f3:d0:e2:25:84:e6:f0:17:9a:e6:30:
                    70:a4:60:30:da:37:7e:3f:e3:ec:95:00:f3:d8:65:
                    3b:51:6d:1d:ea:7b:47:2e:7d:49:bd:38:e2:07:63:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7B:F4:79:12:BD:10:78:5D:C5:5C:3D:94:0F:94:5B:E3:8D:0E:A0
            X509v3 Authority Key Identifier:
                keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:58:e7:46:19:66:78:3c:a1:ec:22:36:6a:30:85:b6:f0:71:
         5f:01:19:5e:26:8b:1a:14:a1:c5:a6:60:43:71:bd:65:59:6d:
         a6:de:dd:f9:f5:ee:49:f7:3e:4f:a3:a0:8e:e2:95:35:7f:5c:
         75:5b:b1:07:9a:d6:15:67:ea:86:e5:b8:dd:3e:a6:59:26:0d:
         90:6c:6f:1d:5b:79:1b:69:cd:34:4a:81:59:be:58:a6:c4:0f:
         88:c3:ef:16:21:61:01:43:cb:7a:08:86:60:c2:a2:6f:d9:3b:
         78:0f:f8:c1:3f:f8:8d:2c:83:12:57:b2:c3:63:af:76:6e:84:
         e0:b6:e9:a6:61:a3:db:f4:25:6c:9a:ea:4e:d1:af:63:74:07:
         6b:13:61:fc:4d:de:41:9a:b9:94:ac:73:c3:c3:84:49:1c:15:
         0d:7f:84:74:ec:47:44:ad:b2:f2:4e:f9:97:db:48:57:7a:8b:
         89:c5:54:8d:8d:f3:23:85:5e:14:32:e1:e3:8b:aa:8a:d2:b7:
         14:c8:f5:3e:3b:53:87:eb:33:d0:d3:b7:a1:e3:83:54:a7:ba:
         74:ed:f1:ef:8a:6d:1a:22:b5:d2:7c:e9:dc:b4:7f:8a:f3:c3:
         02:bc:a8:aa:0c:b7:e0:eb:c2:47:f7:a7:b1:63:e1:44:0c:1e:
         f7:0d:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:20 2025 by rpki-client