Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/3138372e36322e3137362e302f32302d3234203d3e20323632363632.roa
File:                     3138372e36322e3137362e302f32302d3234203d3e20323632363632.roa (raw, json)
Hash identifier:          WUHpSIvsBDJaddyWJVEQWX7M9VHsPLN6SX8hmVCPo34=
Subject key identifier:   82:3D:A6:8E:4D:10:CA:EA:48:E5:1A:C5:89:5D:0E:91:9D:BF:89:1C
Certificate issuer:       /CN=1776B7AE3715D1BD28F30CB4080BA932641F064F
Certificate serial:       4BE1D65E0DF80B4BC393346C27ADF9BAEF263F16
Authority key identifier: 17:76:B7:AE:37:15:D1:BD:28:F3:0C:B4:08:0B:A9:32:64:1F:06:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/3138372e36322e3137362e302f32302d3234203d3e20323632363632.roa
Signing time:             Thu 06 Mar 2025 09:26:23 +0000
ROA not before:           Thu 06 Mar 2025 09:21:23 +0000
ROA not after:            Thu 05 Mar 2026 09:26:23 +0000
asID:                     262662
IP address blocks:        187.62.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.crl
                          rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:d6:5e:0d:f8:0b:4b:c3:93:34:6c:27:ad:f9:ba:ef:26:3f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1776B7AE3715D1BD28F30CB4080BA932641F064F
        Validity
            Not Before: Mar  6 09:21:23 2025 GMT
            Not After : Mar  5 09:26:23 2026 GMT
        Subject: CN=823DA68E4D10CAEA48E51AC5895D0E919DBF891C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:ab:4e:bf:0c:cb:45:c9:f4:55:9c:ba:fd:
                    d8:af:14:ee:85:ea:4f:fc:55:74:da:52:5e:f3:bd:
                    fc:ba:db:08:f6:bd:4a:93:33:28:0b:a6:c7:bc:16:
                    e6:0d:13:39:04:04:b6:58:e4:e0:cb:1a:20:3b:66:
                    d2:37:95:13:e7:da:aa:d4:13:9c:dd:d4:de:77:f8:
                    32:4d:b9:89:d3:23:6b:db:d1:0f:1d:a2:cb:48:55:
                    08:14:7d:35:39:9a:17:ec:19:0d:d6:78:fb:77:63:
                    19:19:6c:10:7d:1f:f0:32:5e:ea:10:a9:ad:db:20:
                    65:35:0a:2c:6b:7b:1f:b0:2d:71:8b:62:a0:9d:ba:
                    13:63:0b:cb:e5:50:56:b0:8f:79:42:b0:c2:cc:2a:
                    f5:e3:72:d5:d7:b3:76:42:6d:98:f5:9a:c6:3f:34:
                    e2:52:b7:dd:f9:a6:8b:73:4f:0f:35:c5:ff:bd:53:
                    b8:18:60:92:18:3e:bd:d2:19:52:ce:79:ca:9c:f0:
                    f8:15:42:5e:28:74:f9:f8:66:52:e4:e9:97:3c:36:
                    1a:7d:51:55:5c:78:57:a5:a6:7a:5b:10:e6:5c:fd:
                    3f:e0:32:24:f7:a9:08:90:fc:7f:92:3c:02:50:6c:
                    a6:47:92:d3:34:ab:be:76:63:51:33:c0:34:26:bb:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:A6:8E:4D:10:CA:EA:48:E5:1A:C5:89:5D:0E:91:9D:BF:89:1C
            X509v3 Authority Key Identifier:
                keyid:17:76:B7:AE:37:15:D1:BD:28:F3:0C:B4:08:0B:A9:32:64:1F:06:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1776B7AE3715D1BD28F30CB4080BA932641F064F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/r2MwL5rU82G44ySUdZrovT5pJzbbndpF1UBR7oDBCi8/1/3138372e36322e3137362e302f32302d3234203d3e20323632363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:67:fe:75:03:16:43:9e:2c:39:85:a1:da:69:64:24:f9:50:
         a9:d3:9b:4f:b2:c7:47:59:1d:38:56:b7:87:e6:16:f6:a2:f3:
         93:0a:77:1b:1c:93:82:c2:9b:15:21:93:4a:38:b8:77:30:9a:
         1e:43:31:5a:b5:3f:30:30:6e:bd:5a:ef:57:e8:09:42:1c:01:
         80:2e:26:6e:62:64:1e:52:cf:b9:cc:a2:07:6a:68:7e:fd:15:
         47:ab:68:6d:fb:fa:43:8a:f0:c7:58:41:42:eb:31:37:4e:05:
         e2:f5:8b:d6:e1:ce:89:fd:9f:b6:57:77:23:ff:8a:16:fb:4d:
         24:f2:3c:f7:57:79:e3:a3:47:09:27:8e:fa:79:00:02:06:9a:
         44:fa:da:1d:86:26:0a:ed:cd:2c:73:42:f2:30:9e:cf:45:a8:
         57:7c:5f:e9:36:1e:2d:68:05:9f:50:07:2e:2e:87:df:42:5c:
         68:8d:a2:88:9d:87:dc:97:b4:1f:18:f7:cf:b8:c4:e4:ad:7a:
         1d:cc:39:37:f1:1a:09:db:8a:b4:b7:f3:c4:12:7d:4a:b8:b2:
         53:fe:ea:d5:29:ca:d3:7a:21:e2:ba:e1:0f:ff:de:8a:90:59:
         a4:48:14:91:4d:fe:2b:21:ec:1d:03:f3:55:9a:fa:a6:88:21:
         b0:a1:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:35:18 2025 by rpki-client