Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f31392d3234203d3e203238323230.roa
File:                     3138372e37332e3139322e302f31392d3234203d3e203238323230.roa (raw, json)
Hash identifier:          Z5oPlW339DmXFdKNhrIAxt8yyYwVcgPUPGnj8/6fqk8=
Subject key identifier:   DE:B4:43:A8:73:FA:EA:46:CD:9B:DD:EA:E5:6E:F2:CE:D1:73:B1:EB
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       41307C755CEB75CC34485A383D0470312E52BBA1
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f31392d3234203d3e203238323230.roa
Signing time:             Fri 09 May 2025 13:42:09 +0000
ROA not before:           Fri 09 May 2025 13:37:09 +0000
ROA not after:            Fri 08 May 2026 13:42:09 +0000
asID:                     28220
IP address blocks:        187.73.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:7c:75:5c:eb:75:cc:34:48:5a:38:3d:04:70:31:2e:52:bb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: May  9 13:37:09 2025 GMT
            Not After : May  8 13:42:09 2026 GMT
        Subject: CN=DEB443A873FAEA46CD9BDDEAE56EF2CED173B1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:54:dd:9b:18:7d:d1:8a:48:32:ab:75:47:
                    b6:96:f3:4a:b8:71:79:eb:25:33:30:28:ce:58:07:
                    d9:aa:a9:ae:aa:69:54:77:18:ff:9b:3b:b9:4c:0e:
                    d0:0d:ea:33:71:61:f4:0e:ad:c9:a9:00:b6:56:e2:
                    bd:5e:46:ea:17:53:e8:f8:90:5d:9d:0f:2f:8c:81:
                    a5:71:8b:47:17:23:16:13:08:17:61:04:dd:ba:df:
                    fb:b3:f7:7b:36:6c:65:e3:71:9a:e7:33:52:69:9c:
                    92:96:ea:c5:92:5b:c1:99:66:d3:e5:9e:c7:79:3d:
                    33:19:b5:17:ba:27:58:13:3a:b1:3e:63:30:55:a8:
                    bb:b2:c6:79:50:ae:c9:d5:da:4c:04:a0:8e:ed:a8:
                    9d:3c:c5:05:40:5e:88:33:35:60:29:f5:55:fc:4a:
                    d8:55:99:20:d8:7a:2d:b4:be:a2:a7:af:4d:c1:97:
                    f1:60:3b:c2:b2:60:78:cb:4a:0a:de:0b:72:47:af:
                    71:5a:9c:a8:ec:61:eb:7e:41:af:bc:88:65:d9:c7:
                    24:61:ee:d3:7d:40:d2:00:bf:64:e6:93:0d:d0:90:
                    58:a4:49:2c:a1:4a:96:fd:c2:c6:f9:f9:52:c6:64:
                    07:a5:4d:59:da:d4:e1:97:6e:11:f0:50:33:4b:0f:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B4:43:A8:73:FA:EA:46:CD:9B:DD:EA:E5:6E:F2:CE:D1:73:B1:EB
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f31392d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:48:62:fe:f1:70:3b:64:80:7c:52:09:36:2d:77:26:6e:68:
         cf:38:7e:30:f6:75:dc:14:af:c0:b0:47:65:75:ec:a7:36:67:
         6e:2b:59:ef:0a:e8:b4:31:8f:cd:e4:e1:e1:ab:c7:70:9f:d1:
         99:b5:26:5b:78:8f:f2:2f:63:9c:f7:dc:33:0b:41:db:3a:31:
         9a:3f:60:3c:59:47:11:35:22:23:e5:89:76:6a:f5:86:c9:a7:
         30:5e:bc:2d:81:f3:c9:02:5e:d7:e0:8d:2c:54:57:1b:a6:ae:
         ab:43:55:aa:e9:1a:c6:63:18:b4:63:97:85:98:aa:a7:03:2b:
         29:70:bf:9e:9b:ca:12:63:09:8a:c5:1a:95:49:dd:16:97:5c:
         85:77:90:21:ea:c3:85:52:c7:fc:ab:85:dd:e9:33:ca:df:b6:
         5a:1d:b3:aa:ad:2c:0a:eb:98:64:62:b9:ce:a3:80:7a:ee:fc:
         7d:71:cb:bc:b4:d6:30:22:28:d0:dc:29:bc:03:5b:8f:a1:1b:
         6b:4b:1a:13:d1:69:70:c0:08:e6:32:51:df:e2:e3:11:ec:2c:
         58:de:3f:4b:bd:dd:8f:bf:bc:ff:06:33:93:0f:69:cc:25:a0:
         c6:ca:cc:54:f3:c1:98:49:63:3b:c8:15:93:cb:00:44:38:f0:
         a6:c0:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:58:47 2025 by rpki-client