Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa
File:                     3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa (raw, json)
Hash identifier:          VQ2nRm2+YMc/UCt8ERS/C8ZPSft97reB3mR1kQAvLaI=
Subject key identifier:   18:D5:1F:43:9F:A8:14:7A:E2:8C:26:1E:45:30:EF:E9:50:DB:D2:54
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       2FDED6B7B705F572952DD9006A9F13F3A98A28D4
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa
Signing time:             Mon 12 May 2025 15:00:03 +0000
ROA not before:           Mon 12 May 2025 14:55:03 +0000
ROA not after:            Mon 11 May 2026 15:00:03 +0000
asID:                     53118
IP address blocks:        187.110.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
                          rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 06:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:de:d6:b7:b7:05:f5:72:95:2d:d9:00:6a:9f:13:f3:a9:8a:28:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: May 12 14:55:03 2025 GMT
            Not After : May 11 15:00:03 2026 GMT
        Subject: CN=18D51F439FA8147AE28C261E4530EFE950DBD254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:77:46:49:ec:31:4f:2b:f1:d0:67:e3:0b:
                    af:33:c4:91:95:ad:2d:f6:67:b6:fd:63:68:a4:05:
                    13:f6:e2:77:bd:d6:5c:ed:92:6e:0e:28:a8:34:24:
                    65:74:79:eb:12:d0:0a:f7:aa:8d:3e:c1:5e:85:78:
                    d3:b5:71:b7:a8:4f:e4:9f:b8:f8:1d:0a:ce:51:2d:
                    06:5a:f4:52:40:db:e5:5c:0b:80:0c:34:92:06:e0:
                    44:9c:3d:58:48:73:a5:e0:98:8c:fb:0d:23:2e:de:
                    65:74:3d:f3:96:85:96:a4:1b:a6:50:9b:c9:79:e0:
                    7a:29:45:5b:bc:e4:53:e0:ad:87:b6:69:a7:e8:c8:
                    b7:ac:65:16:f0:b9:02:ce:3a:8d:b6:0b:d2:37:81:
                    8f:49:37:95:6c:12:70:c8:9b:e4:c1:e5:94:48:46:
                    6c:bd:a7:56:0a:94:7e:94:0b:1a:d1:c2:a6:04:c4:
                    a8:c4:a1:9e:d7:92:0b:36:4e:3d:f7:89:25:a3:3e:
                    e0:70:86:7b:12:15:f3:53:9b:76:cf:93:fe:d7:18:
                    09:3f:b9:3b:9a:39:5d:50:fd:2b:24:9e:37:7a:d9:
                    29:60:6d:f3:83:bc:d4:14:95:55:23:d8:07:09:66:
                    54:5c:57:f0:00:82:65:19:71:58:4f:e5:91:01:ee:
                    2a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:1F:43:9F:A8:14:7A:E2:8C:26:1E:45:30:EF:E9:50:DB:D2:54
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:fd:0c:96:e0:84:1c:30:b7:b9:2b:ca:65:24:14:0b:95:
         90:f5:e7:53:2b:5e:f3:8e:00:a9:1e:6f:63:9b:d6:3c:61:2b:
         bf:c0:db:97:bb:6e:63:67:a0:b6:bf:11:6a:17:16:a6:f8:69:
         2d:3a:c8:16:d4:8d:fd:dc:05:ee:f8:05:5b:b8:0b:f4:5f:7e:
         12:37:f1:8b:89:60:59:f6:a1:83:af:3e:6d:09:27:71:6a:9d:
         95:6d:d7:76:c4:5c:f1:48:37:f6:fc:0b:2c:de:a9:9b:79:c9:
         ff:cc:89:1e:16:7f:fc:62:eb:ae:11:16:e7:92:4a:64:91:19:
         63:96:e6:bb:69:4e:6c:3f:4d:ed:be:af:f9:93:5b:42:2f:f5:
         32:f2:84:1b:43:bf:9a:78:a7:08:67:80:87:78:24:ea:70:c5:
         f4:6a:9b:ba:ce:4c:a2:f4:73:1f:37:e7:99:67:d0:d2:44:ae:
         42:81:67:04:4f:e9:8e:7f:12:4e:0f:13:3d:e8:ed:b0:ce:7b:
         42:a1:ed:24:b5:19:27:45:d2:60:27:6c:65:14:57:83:4e:99:
         f3:f7:74:e2:81:d7:8d:28:60:d6:de:ff:af:78:f2:1d:c5:40:
         20:6f:af:d5:0c:b5:96:62:e0:10:cf:a5:89:c0:ec:c8:f4:a9:
         27:5f:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:40:10 2025 by rpki-client