Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa
File:                     3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          dFxhsTTxQ4BzI7CQMi3J8+57mauDkXfp5fNpHegCPqM=
Subject key identifier:   68:9C:50:54:FC:6B:39:00:ED:7E:EC:BA:7B:EE:8F:13:66:A1:63:95
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       16077E95A5D7EA826434747EE1707B4F10B2FF29
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa
Signing time:             Thu 06 Mar 2025 23:46:07 +0000
ROA not before:           Thu 06 Mar 2025 23:41:07 +0000
ROA not after:            Thu 05 Mar 2026 23:46:07 +0000
asID:                     28279
IP address blocks:        187.17.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 12:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:07:7e:95:a5:d7:ea:82:64:34:74:7e:e1:70:7b:4f:10:b2:ff:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Mar  6 23:41:07 2025 GMT
            Not After : Mar  5 23:46:07 2026 GMT
        Subject: CN=689C5054FC6B3900ED7EECBA7BEE8F1366A16395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:30:94:d7:cb:3c:59:1a:4f:13:73:7d:3a:
                    0d:1d:f3:2d:d5:37:ae:1c:0d:67:05:00:03:45:f6:
                    5e:a1:fe:96:86:68:2c:ad:fc:d9:38:d5:88:bf:62:
                    2d:6f:3d:04:37:34:d0:59:83:a0:3b:7a:65:b8:c7:
                    93:87:d6:2a:41:56:62:bf:a2:d9:3c:34:b0:bf:f2:
                    af:5d:b6:1c:6c:c6:75:55:3f:0e:2c:3d:93:bd:0e:
                    2b:37:6c:91:91:78:6a:f5:7e:ad:7d:e1:32:ff:84:
                    b1:ce:a5:29:d9:c7:f6:5e:aa:45:aa:5c:09:c5:15:
                    09:0b:27:18:11:3a:ee:d4:c6:7e:b6:8c:09:c3:69:
                    a1:c9:3c:83:8c:d8:23:01:3e:21:b3:47:f7:a4:61:
                    bb:af:e7:20:bf:4a:65:27:7a:34:7d:05:e2:3e:08:
                    b3:b6:af:ef:d1:75:24:07:d4:e5:c5:63:71:dc:28:
                    dd:55:d0:42:ef:30:c7:8d:6a:58:d0:99:c1:29:05:
                    82:54:ac:a0:a8:10:fb:52:9d:e0:ed:45:e4:bc:f3:
                    59:d8:00:2e:84:ab:7e:d6:ec:fd:cb:de:4b:73:e6:
                    e4:b1:78:80:7c:e1:37:2a:f6:69:19:c5:59:80:93:
                    f8:a3:44:d6:a7:2f:88:57:39:d7:75:51:8c:14:38:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9C:50:54:FC:6B:39:00:ED:7E:EC:BA:7B:EE:8F:13:66:A1:63:95
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:19:da:83:3d:b4:73:35:c1:53:db:df:9a:3e:62:c9:57:f1:
         f8:08:6c:a4:c3:a6:72:c8:93:78:c8:46:db:2b:93:ed:11:9f:
         af:21:de:93:28:cd:56:12:ce:4c:04:93:2d:3f:3e:5a:e8:11:
         02:ad:26:9a:95:00:1b:6d:42:94:ea:78:e7:a2:1a:9f:88:d5:
         99:8d:ae:6f:7c:ad:b4:c7:73:24:ff:c7:17:43:98:39:76:03:
         a9:cc:6d:7d:5a:34:d4:f8:72:83:38:8c:e0:96:17:d4:38:17:
         ef:66:ae:33:e1:71:84:9f:bc:52:f1:4e:a5:6a:30:d6:a0:eb:
         47:ae:d8:6b:e6:72:c0:26:fa:02:30:87:e8:25:49:96:d4:be:
         1e:24:22:2a:bb:d3:67:26:2f:c3:8b:94:bb:91:0f:f7:04:d3:
         cc:84:54:70:56:ba:b6:eb:65:51:55:28:d5:4c:2d:56:fa:90:
         bf:38:49:6d:88:a4:d7:85:10:4c:da:82:2f:48:bc:1e:e7:64:
         ee:09:5c:91:e3:b5:d5:36:64:37:0e:bb:a0:92:75:c0:78:3d:
         a7:52:59:60:f7:6d:05:01:8f:61:e5:99:d2:54:85:37:82:0c:
         c9:87:7a:9f:3e:a6:e5:a6:f3:8c:f0:2a:68:f6:56:1c:56:85:
         6f:2a:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:17 2025 by rpki-client