Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/3138372e31392e3132382e302f31372d3234203d3e203238313236.roa
File:                     3138372e31392e3132382e302f31372d3234203d3e203238313236.roa (raw, json)
Hash identifier:          PLpB0xYjgHeDsp+iZSpujm7aIXU8v8E1FvgVoiS0Bas=
Subject key identifier:   D4:47:83:BF:5A:17:34:6D:B4:4A:90:07:EA:0A:20:F4:BC:D0:69:33
Certificate issuer:       /CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
Certificate serial:       41DB46AE6CC03A2467C3342CE6FD7FD9629547CD
Authority key identifier: E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/3138372e31392e3132382e302f31372d3234203d3e203238313236.roa
Signing time:             Tue 11 Feb 2025 19:14:12 +0000
ROA not before:           Tue 11 Feb 2025 19:09:12 +0000
ROA not after:            Tue 10 Feb 2026 19:14:12 +0000
asID:                     28126
IP address blocks:        187.19.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl
                          rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 07:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:46:ae:6c:c0:3a:24:67:c3:34:2c:e6:fd:7f:d9:62:95:47:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
        Validity
            Not Before: Feb 11 19:09:12 2025 GMT
            Not After : Feb 10 19:14:12 2026 GMT
        Subject: CN=D44783BF5A17346DB44A9007EA0A20F4BCD06933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:b9:76:aa:37:40:e5:47:b0:13:7d:bd:7d:
                    37:3d:ec:f3:d4:e8:fb:fa:23:61:38:c0:ca:40:69:
                    90:2a:d1:06:50:b2:ac:63:09:fe:6e:41:0b:32:33:
                    ee:4f:03:3d:3e:e3:3e:bc:d7:ae:f2:7c:b7:91:3c:
                    e1:25:e4:fc:73:6f:38:1c:c3:bb:e6:ba:f7:71:a9:
                    e2:a7:26:a8:43:ea:7e:46:f2:cc:34:21:1e:fa:44:
                    7c:3b:15:60:fc:cb:3b:2f:e0:40:f8:84:c4:b2:4c:
                    fa:ee:8f:28:81:21:1c:69:cc:49:24:97:8c:96:d1:
                    be:fa:50:f7:e7:6b:c8:1f:e6:58:ff:7e:52:fb:ef:
                    39:58:f4:ad:b8:5f:0d:7a:be:ca:70:a0:cc:6b:74:
                    24:87:44:5b:a0:63:33:85:97:48:05:16:d2:c5:33:
                    ba:e0:90:c1:33:11:d6:59:37:b4:e5:95:b1:c1:c9:
                    ee:f8:09:5c:4a:24:1b:fc:6c:bf:7c:c8:be:13:55:
                    e9:02:b0:3f:bb:0f:e2:aa:fd:a5:94:0a:10:87:67:
                    1d:38:e1:a2:19:e3:a2:17:d9:bc:45:95:6e:6f:df:
                    4d:b0:44:ff:2f:29:fd:bb:9a:99:00:b7:62:b9:cc:
                    52:57:6d:57:83:7d:b3:ff:c0:ff:b5:84:f5:6f:f6:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:83:BF:5A:17:34:6D:B4:4A:90:07:EA:0A:20:F4:BC:D0:69:33
            X509v3 Authority Key Identifier:
                keyid:E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/3138372e31392e3132382e302f31372d3234203d3e203238313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:ad:fd:03:e1:b8:df:7a:e2:bb:37:6a:8e:12:28:a5:3d:
         95:bb:b6:e2:61:bf:9b:6f:65:39:1c:ad:d7:d0:f4:11:46:de:
         cf:b5:ba:b1:2c:fb:1b:d9:2a:41:07:78:ad:d9:69:96:84:76:
         bf:29:c7:30:ca:60:85:af:c3:36:12:87:0a:eb:2b:b7:b7:53:
         51:ba:ec:ff:07:93:00:98:64:b7:82:e8:e6:7a:35:83:69:a2:
         9e:fb:26:91:83:08:93:e6:9f:9f:88:f2:f9:73:bd:20:5f:89:
         b9:66:f1:66:ff:ff:9f:5e:58:bf:db:85:96:8d:06:e1:93:de:
         b0:08:84:bc:82:1c:b4:5b:aa:c1:47:a4:49:28:5b:f7:fd:2e:
         db:09:f3:41:52:5c:ff:c6:38:28:fa:77:40:35:71:38:33:2d:
         2d:26:32:56:f3:50:01:e6:d3:d6:f1:fd:11:42:11:44:e1:09:
         19:5a:aa:71:26:12:dd:18:c1:31:c7:03:13:80:cf:1b:65:9e:
         4c:d5:23:e0:06:7a:c1:98:c0:57:fb:a2:84:a1:2a:21:94:6b:
         c6:6d:ce:54:6e:33:cb:85:09:98:dd:13:42:d5:13:be:65:50:
         f8:ba:52:a3:be:c3:16:98:a2:28:c9:6e:ba:7a:23:0e:24:a7:
         66:fb:7b:b9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUQdtGrmzAOiRnwzQs5v1/2WKVR80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMEQ1NEQxNjE2MThCNkExOThFOEE0RTUzRkJGNkQz
QzdDRjBGMDAeFw0yNTAyMTExOTA5MTJaFw0yNjAyMTAxOTE0MTJaMDMxMTAvBgNV
BAMTKEQ0NDc4M0JGNUExNzM0NkRCNDRBOTAwN0VBMEEyMEY0QkNEMDY5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZLl2qjdA5UewE329fTc97PPU
6Pv6I2E4wMpAaZAq0QZQsqxjCf5uQQsyM+5PAz0+4z68167yfLeRPOEl5Pxzbzgc
w7vmuvdxqeKnJqhD6n5G8sw0IR76RHw7FWD8yzsv4ED4hMSyTPrujyiBIRxpzEkk
l4yW0b76UPfna8gf5lj/flL77zlY9K24Xw16vspwoMxrdCSHRFugYzOFl0gFFtLF
M7rgkMEzEdZZN7TllbHBye74CVxKJBv8bL98yL4TVekCsD+7D+Kq/aWUChCHZx04
4aIZ46IX2bxFlW5v302wRP8vKf27mpkAt2K5zFJXbVeDfbP/wP+1hPVv9obRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU1EeDv1oXNG20SpAH6gog9LzQaTMwHwYDVR0j
BBgwFoAU5DDVTRYWGLahmOik5T+/bTx88PAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XZDM0SGJrc0FzbjF2eFZXQ0RlTmY3ajd3d2pBZmNOMVZoWjNqYlZjY2Zz
LzAvRTQzMEQ1NEQxNjE2MThCNkExOThFOEE0RTUzRkJGNkQzQzdDRjBGMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNDMwRDU0RDE2MTYxOEI2QTE5
OEU4QTRFNTNGQkY2RDNDN0NGMEYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
ZDM0SGJrc0FzbjF2eFZXQ0RlTmY3ajd3d2pBZmNOMVZoWjNqYlZjY2ZzLzAvMzEz
ODM3MmUzMTM5MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM4MzEz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQHuxOAMA0GCSqGSIb3DQEBCwUAA4IBAQBsU639A+G433ri
uzdqjhIopT2Vu7biYb+bb2U5HK3X0PQRRt7PtbqxLPsb2SpBB3it2WmWhHa/Kccw
ymCFr8M2EocK6yu3t1NRuuz/B5MAmGS3gujmejWDaaKe+yaRgwiT5p+fiPL5c70g
X4m5ZvFm//+fXli/24WWjQbhk96wCIS8ghy0W6rBR6RJKFv3/S7bCfNBUlz/xjgo
+ndANXE4My0tJjJW81AB5tPW8f0RQhFE4QkZWqpxJhLdGMExxwMTgM8bZZ5M1SPg
BnrBmMBX+6KEoSohlGvGbc5UbjPLhQmY3RNC1RO+ZVD4ulKjvsMWmKIoyW66eiMO
JKdm+3u5
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:43 2025 by rpki-client