Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa
File:                     3138372e3130392e31362e302f32302d3232203d3e203533313132.roa (raw, json)
Hash identifier:          50DoABEetqJlpnnRKeabW7myKIroo5u0eIf3SSZzKUc=
Subject key identifier:   BB:87:67:18:A9:24:4F:66:1A:2E:FE:D8:7C:AC:3B:45:CC:51:E5:18
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       2D7633660715A87E935786D6DDAE57A5D5AD2E55
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa
Signing time:             Thu 06 Mar 2025 10:20:34 +0000
ROA not before:           Thu 06 Mar 2025 10:15:34 +0000
ROA not after:            Thu 05 Mar 2026 10:20:34 +0000
asID:                     53112
IP address blocks:        187.109.16.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:76:33:66:07:15:a8:7e:93:57:86:d6:dd:ae:57:a5:d5:ad:2e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Mar  6 10:15:34 2025 GMT
            Not After : Mar  5 10:20:34 2026 GMT
        Subject: CN=BB876718A9244F661A2EFED87CAC3B45CC51E518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2e:c0:9b:57:15:5e:f1:1f:e8:cf:15:ae:04:
                    fa:20:90:5c:76:34:98:6f:8e:bb:04:53:2d:43:42:
                    9c:76:1c:5f:0f:22:4b:ea:2e:7d:1f:ab:0f:6b:2e:
                    e4:88:a4:a9:10:e3:ca:8b:98:76:9c:20:a7:0d:74:
                    fa:15:7f:01:28:2d:de:1a:e2:df:90:0f:de:2f:4e:
                    28:c5:7b:84:3d:9b:e0:18:7d:2c:91:f5:00:4e:c0:
                    d5:63:37:a1:83:66:e4:1e:c6:df:5b:ab:04:17:b2:
                    b5:45:ed:06:57:35:03:a6:02:8e:fe:08:17:8b:2d:
                    c6:00:4b:5f:6a:3a:af:2f:e0:ec:de:f1:f8:81:4e:
                    f6:ed:32:28:c6:b7:a6:39:4c:3d:dd:94:70:0c:ff:
                    7f:60:c5:08:e4:46:15:36:c2:b8:e9:30:d6:5a:70:
                    9b:f7:67:17:b3:32:94:a4:2b:d4:a2:88:96:cd:23:
                    49:7a:68:2c:66:2d:85:b7:c7:70:fd:01:05:98:be:
                    50:19:13:0c:f0:82:0d:9d:ae:83:9f:30:03:08:50:
                    a7:32:e1:08:cf:b1:10:0a:53:31:ae:75:8c:8a:57:
                    a8:ce:c8:55:3d:bd:6c:37:f5:00:d3:d7:c6:56:99:
                    a7:77:a1:63:59:7f:d7:a1:35:9b:4a:a0:29:1a:31:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:87:67:18:A9:24:4F:66:1A:2E:FE:D8:7C:AC:3B:45:CC:51:E5:18
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:a5:bb:6b:6d:38:68:c4:8d:72:3f:ee:18:d7:2b:85:2e:cf:
         8e:ec:71:b8:9f:b3:7e:f1:66:1c:b0:76:c4:5b:05:9a:2d:a9:
         bd:3a:61:5d:74:33:11:54:5f:3a:b4:ed:40:e2:bd:c7:72:52:
         b3:e8:1e:5a:7f:25:fd:a4:23:d4:81:d4:99:df:7d:fe:e0:d2:
         a8:16:22:2d:cd:be:25:a7:ab:88:92:99:6d:e9:29:a8:09:ab:
         79:dc:1a:a4:5f:a4:b2:54:80:1c:5f:77:9e:08:2b:13:66:54:
         29:83:f7:c1:dc:b7:e5:18:76:f6:f3:6b:67:6d:02:5f:9a:f0:
         1e:a4:35:56:8d:65:8f:35:2f:d0:0b:0a:1a:b1:15:3c:a3:47:
         1d:29:6a:e4:12:7d:f3:16:02:30:43:f2:e3:09:55:b2:7a:9d:
         da:48:df:b2:dd:48:6e:43:4e:89:81:d5:70:c8:a5:15:dd:8b:
         d1:de:3a:97:ba:d3:66:e1:b1:df:ac:3a:dd:8a:ad:2c:57:a3:
         f7:d3:ca:6a:92:be:77:8b:48:75:c9:1b:4c:f4:d3:8d:3e:19:
         a0:02:38:8b:04:b9:6c:6f:6b:42:51:86:dc:a3:95:88:45:f5:
         47:3e:ba:1d:04:ee:cb:b9:ce:07:11:94:f8:7a:5b:f7:c9:a4:
         c7:42:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:52:54 2025 by rpki-client