Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138392e312e33322e302f32302d3234203d3e203238363633.roa
File:                     3138392e312e33322e302f32302d3234203d3e203238363633.roa (raw, json)
Hash identifier:          6X7jeMRLT2ZtN3k5ce6d//Iawi2gc4/W3IntF96uvhU=
Subject key identifier:   60:92:21:AF:78:A1:BF:68:D5:63:51:BC:78:0D:E8:0F:67:59:28:0D
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       53479D8405DCB9DA3A85AE8EF07004E4FFCC0E00
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138392e312e33322e302f32302d3234203d3e203238363633.roa
Signing time:             Wed 02 Jul 2025 13:44:02 +0000
ROA not before:           Wed 02 Jul 2025 13:39:02 +0000
ROA not after:            Wed 01 Jul 2026 13:44:02 +0000
asID:                     28663
IP address blocks:        189.1.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 15:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:47:9d:84:05:dc:b9:da:3a:85:ae:8e:f0:70:04:e4:ff:cc:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Jul  2 13:39:02 2025 GMT
            Not After : Jul  1 13:44:02 2026 GMT
        Subject: CN=609221AF78A1BF68D56351BC780DE80F6759280D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:1b:4c:13:15:67:14:be:7e:9a:41:29:e5:
                    ef:ae:23:40:99:c5:da:74:a8:b9:ac:35:5b:54:66:
                    7d:30:4e:b1:55:ab:5f:4c:ec:db:0e:72:87:42:cf:
                    88:7f:e0:69:c7:cb:a6:e2:f3:85:9d:bf:d6:27:76:
                    73:c4:72:f6:b7:ea:e8:6a:77:7e:d0:24:0c:31:55:
                    30:b3:ad:bc:82:fc:9a:3c:69:34:bc:b8:2b:35:7f:
                    a8:d9:bc:f0:66:94:a9:56:fa:19:d5:e3:7e:d2:cf:
                    0f:6f:08:cd:5e:18:1a:24:8d:7a:91:e8:76:aa:81:
                    7e:ad:c1:02:10:5a:16:ad:bf:ca:16:51:51:26:72:
                    c1:60:0c:f2:fc:85:c7:9d:41:e9:52:2a:73:9b:8e:
                    52:bc:44:6c:41:5c:eb:1d:12:da:78:4b:3b:ec:94:
                    a1:a2:5b:2d:c5:e0:ae:23:5c:67:8f:31:ee:f1:b8:
                    21:0c:f4:9e:90:81:e1:b4:c2:08:80:a8:2e:fc:2a:
                    d0:8d:5d:5e:da:d5:06:50:49:10:f7:b7:f3:d0:91:
                    ee:b3:08:15:81:e9:d7:79:d9:40:c0:34:8b:ac:63:
                    cb:5e:d1:78:f2:e6:8e:68:87:00:b8:2a:18:84:2f:
                    e0:05:80:e1:df:d1:4d:9c:50:bc:b3:2f:83:e9:1f:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:21:AF:78:A1:BF:68:D5:63:51:BC:78:0D:E8:0F:67:59:28:0D
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138392e312e33322e302f32302d3234203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:b5:fb:90:cc:40:d9:88:13:2a:32:1f:5f:b8:69:3d:55:
         26:81:8b:e9:49:54:60:01:ef:ef:1a:29:cf:1d:6f:be:53:f0:
         cd:ef:a3:46:b4:fd:4e:7c:a8:23:78:22:73:0a:18:9a:08:2a:
         6b:44:78:23:cb:d3:92:3b:49:5a:c4:08:d1:36:9f:cd:6d:9c:
         42:79:a3:f1:e2:e0:f8:9c:8b:51:3a:db:3d:e7:51:fa:8b:c5:
         17:a7:fc:f5:af:c0:6d:bb:4f:aa:ee:aa:9a:5a:27:b8:a5:a6:
         ee:ac:e1:23:56:d1:56:ea:75:e4:c6:23:d0:90:ff:10:c4:bc:
         64:67:7a:d4:3f:83:b4:4b:e3:53:0c:34:ff:58:7a:cc:68:68:
         b1:7d:5c:3d:ef:8f:a7:41:63:bf:1b:80:ab:55:07:a8:e9:cf:
         ae:76:19:17:df:4f:a3:3e:76:7f:6f:f2:a8:60:4d:13:c5:57:
         4e:d2:c1:70:8b:ae:d0:52:74:75:e6:7a:66:f2:ff:33:28:0f:
         70:1d:eb:7b:f0:c1:19:76:8d:20:a5:cb:79:92:f5:b7:2c:6e:
         fb:9d:eb:77:5d:4a:29:57:66:e6:d0:44:2d:c3:80:fc:4a:d5:
         df:be:a6:a7:3c:25:de:cc:e3:42:16:f9:8d:0f:98:f4:84:cb:
         72:3b:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:25:51 2025 by rpki-client