Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139372e302f32342d3234203d3e203238333238.roa
File:                     3138392e31342e3139372e302f32342d3234203d3e203238333238.roa (raw, json)
Hash identifier:          o5Yc0bPSjVUcOcu2DTMwvMmjxFc93Euev25c/N9EJlc=
Subject key identifier:   94:58:EC:88:70:26:27:7C:29:53:5B:31:E2:34:A5:13:4A:68:8B:27
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       503D02A8BEC60C70F3D07FACA85AC20D179DE2A8
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139372e302f32342d3234203d3e203238333238.roa
Signing time:             Wed 26 Mar 2025 21:46:59 +0000
ROA not before:           Wed 26 Mar 2025 21:41:59 +0000
ROA not after:            Wed 25 Mar 2026 21:46:59 +0000
asID:                     28328
IP address blocks:        189.14.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:02:a8:be:c6:0c:70:f3:d0:7f:ac:a8:5a:c2:0d:17:9d:e2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Mar 26 21:41:59 2025 GMT
            Not After : Mar 25 21:46:59 2026 GMT
        Subject: CN=9458EC887026277C29535B31E234A5134A688B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:7a:1d:c4:5c:45:87:9f:f2:7b:9f:8c:b5:
                    2e:12:34:fb:92:f2:21:67:de:d1:fc:ff:32:c5:50:
                    9b:14:e2:25:c0:ab:c9:5b:dc:8b:b6:0b:e1:a0:21:
                    c6:2b:3f:a1:77:55:7d:1e:bb:fa:34:6f:a4:55:1f:
                    2f:f2:84:6e:50:88:47:1b:1f:3c:bb:f3:e1:40:ef:
                    2c:37:9e:42:49:38:f6:27:ad:6f:22:5c:13:34:6e:
                    26:dd:50:7d:85:22:b8:84:07:f5:36:9b:41:c2:3f:
                    9e:8d:26:10:52:a9:48:ac:b7:67:47:16:c2:6d:fb:
                    49:e3:14:2f:e3:36:17:a9:17:43:b8:e2:12:53:a2:
                    59:78:96:d2:a8:50:82:fd:48:36:96:34:7f:46:cb:
                    6c:d2:91:84:62:ba:2d:19:7a:74:2d:8e:2e:d8:d7:
                    2f:9c:b8:7a:30:4b:49:6a:37:d6:ac:c4:6b:de:12:
                    f4:b5:38:dd:37:30:24:cf:2b:1c:c3:70:af:5f:dc:
                    da:06:a2:97:91:4e:93:fa:cc:13:92:b8:41:5b:0f:
                    4b:cf:f9:10:97:e6:45:e2:0f:fe:d4:18:0e:e0:8f:
                    68:e9:b8:72:8e:b9:19:4b:6f:20:51:a8:f8:d3:aa:
                    2f:5e:f3:3b:d5:83:4e:bf:77:29:88:e0:75:0d:80:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:58:EC:88:70:26:27:7C:29:53:5B:31:E2:34:A5:13:4A:68:8B:27
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139372e302f32342d3234203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:e1:2e:15:3f:3e:cf:42:70:f9:b7:68:f4:c8:d1:d0:ba:
         c8:6f:d1:e6:3b:b2:c7:09:42:93:72:fc:cb:23:4d:b0:c8:0b:
         1c:9f:96:35:14:c3:66:ae:8d:21:3d:ac:27:99:95:6f:cc:38:
         8e:bf:01:dc:9f:8e:cd:a8:71:d5:b7:b5:93:bb:46:d9:52:4d:
         0f:49:f6:40:60:5d:ab:c3:22:89:91:ec:27:0a:b7:3e:47:d8:
         6c:c6:53:bd:fe:a3:bd:9a:7e:8c:c1:a9:d1:99:b2:92:30:fd:
         d9:85:7f:d5:bb:10:38:0f:1a:f6:95:6d:a2:55:f4:a4:9f:68:
         65:41:e6:4c:ae:d9:7e:be:de:b5:e6:46:0d:c6:c3:52:5e:0c:
         96:43:6f:5b:11:8e:04:86:20:ec:a3:68:eb:35:d3:17:32:1a:
         ea:fc:ef:bb:27:8f:96:f4:30:ea:5d:b2:e6:e2:c5:a1:01:dd:
         c5:ab:eb:f9:6f:5f:60:46:33:72:21:1f:74:48:f5:42:1f:18:
         0b:ac:0d:e4:24:e2:05:c8:9e:44:76:21:e9:61:03:7b:9c:29:
         2e:ba:eb:92:d6:da:19:fd:f1:ad:f2:00:61:0e:34:a2:70:e2:
         9f:f2:99:42:30:79:b4:2f:2c:e8:bf:f8:27:e6:69:b4:96:d8:
         8d:ea:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:04:22 2025 by rpki-client