Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138392e39302e3134342e302f32302d3232203d3e203533313132.roa
File:                     3138392e39302e3134342e302f32302d3232203d3e203533313132.roa (raw, json)
Hash identifier:          m22IoOB9yBPI76iRH4PyAK0erTLTCog5ChHcXqMOhus=
Subject key identifier:   7C:8A:01:3C:94:8E:3B:F0:E0:06:E6:90:48:0E:8C:87:55:96:1B:B5
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       6DEC3D363950E2A5D771F35A9A25D645FBC747DC
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138392e39302e3134342e302f32302d3232203d3e203533313132.roa
Signing time:             Thu 06 Mar 2025 10:20:34 +0000
ROA not before:           Thu 06 Mar 2025 10:15:34 +0000
ROA not after:            Thu 05 Mar 2026 10:20:34 +0000
asID:                     53112
IP address blocks:        189.90.144.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ec:3d:36:39:50:e2:a5:d7:71:f3:5a:9a:25:d6:45:fb:c7:47:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Mar  6 10:15:34 2025 GMT
            Not After : Mar  5 10:20:34 2026 GMT
        Subject: CN=7C8A013C948E3BF0E006E690480E8C8755961BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:59:d6:d0:ae:fe:d7:85:6c:44:6e:1d:c6:
                    f0:ca:15:e4:17:29:3d:0b:67:e6:9f:59:9b:49:d7:
                    de:a8:c5:b2:9b:94:23:e8:f1:28:5c:bf:4d:06:65:
                    da:85:18:b1:0a:26:f8:12:d4:bc:72:1b:76:6a:b5:
                    aa:8a:c5:8c:71:53:4d:29:f3:de:c7:87:55:33:92:
                    2c:7f:9a:cb:15:8d:af:26:cc:5d:d3:5e:1f:a0:a7:
                    2c:d3:b1:43:3d:81:3c:ef:3d:ad:2c:9d:b9:3f:69:
                    72:82:fb:a3:8c:af:dd:88:5a:cc:4f:8b:f8:dc:2c:
                    12:ed:0a:f2:f9:de:98:61:93:75:c8:bc:5c:5d:fb:
                    76:07:5f:0a:06:69:3f:7a:16:f6:d0:ce:eb:89:61:
                    75:26:91:ed:38:b4:d5:f0:21:4e:02:b4:3a:99:be:
                    bd:04:d6:73:2a:54:3b:b5:e3:88:bb:fd:46:db:5d:
                    9d:33:7c:a2:ff:52:f0:2c:ed:24:af:3b:dc:2b:9b:
                    d4:41:ee:e0:56:82:41:37:3b:e1:92:db:e9:09:b7:
                    90:05:ee:bc:09:09:3c:4e:e3:e3:7e:93:83:c7:18:
                    10:a3:f0:b5:27:0a:20:7d:18:7e:38:11:9d:d0:9d:
                    93:f8:4e:78:85:1d:be:59:3f:07:7a:d0:4c:9d:b3:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:01:3C:94:8E:3B:F0:E0:06:E6:90:48:0E:8C:87:55:96:1B:B5
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138392e39302e3134342e302f32302d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:99:bf:7e:9e:89:04:c4:a5:9a:13:44:a2:cf:85:90:7f:13:
         b0:f2:51:2a:f4:52:a2:af:5c:fa:8d:ce:e5:ad:ec:83:8a:51:
         b6:99:1b:d9:fd:b9:15:8d:57:29:85:69:31:6c:45:4c:9b:eb:
         43:5c:c7:8b:cd:b4:a3:e5:7e:95:e3:c7:e5:19:73:7d:cb:4a:
         68:47:21:7d:e1:b8:eb:3f:ed:a6:84:7b:86:90:df:f5:c3:a5:
         a1:54:08:86:26:9f:13:fc:da:b0:9d:08:d2:e3:0c:6d:9c:06:
         00:3c:5d:0a:ae:25:bc:d3:fe:f4:93:dc:c4:a5:ed:34:fb:0f:
         95:61:bf:6c:43:ae:13:de:46:2f:46:d7:91:cc:24:f1:ca:56:
         a8:9b:01:7b:e4:04:e6:17:fe:9e:15:9e:46:cf:49:35:63:04:
         d0:f7:53:96:a6:3d:b1:7e:e1:0e:54:50:20:34:8e:03:f8:67:
         19:4f:fb:26:dd:f4:89:cc:ef:52:09:65:00:e3:08:e0:07:62:
         d2:33:23:73:69:f9:0f:ea:b3:39:5f:cc:01:80:1d:e9:4b:68:
         45:8f:ff:1a:f4:7e:8f:c5:4a:ac:cd:04:7e:c2:c5:64:a0:2d:
         eb:b7:f8:d3:fa:31:6f:08:03:19:8b:f6:8b:f0:d1:69:4d:e1:
         88:07:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:50:34 2025 by rpki-client