Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3130392e39362e302f32302d3234203d3e203238313538.roa
File:                     3138372e3130392e39362e302f32302d3234203d3e203238313538.roa (raw, json)
Hash identifier:          anlTf9tz6sbB2NAzzJgeuKDI7WJVrMzG/84/qDYTdSo=
Subject key identifier:   48:15:D4:26:0F:00:5C:9B:40:7E:92:E3:4A:B6:11:77:3D:4B:62:F0
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       172BA857186C608B5E987C55B32045EEBBD7AD91
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3130392e39362e302f32302d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:27 +0000
ROA not before:           Thu 21 Aug 2025 15:03:27 +0000
ROA not after:            Thu 20 Aug 2026 15:08:27 +0000
asID:                     28158
IP address blocks:        187.109.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:a8:57:18:6c:60:8b:5e:98:7c:55:b3:20:45:ee:bb:d7:ad:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:27 2025 GMT
            Not After : Aug 20 15:08:27 2026 GMT
        Subject: CN=4815D4260F005C9B407E92E34AB611773D4B62F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:30:6c:bc:13:1e:8b:d7:89:75:c7:a4:63:
                    b3:c9:67:eb:ea:0a:55:aa:fc:39:66:86:e8:c8:f3:
                    0c:b9:4f:71:38:85:60:30:cf:92:ff:45:00:c7:59:
                    7d:52:52:16:4e:27:fa:f7:02:78:93:dd:5e:4f:2d:
                    d2:2a:8f:35:08:d8:92:14:9f:2a:a6:cb:15:4b:f3:
                    73:d3:41:2e:e7:5c:a3:db:4e:9a:b0:f7:60:b3:ec:
                    67:61:f2:32:11:c0:95:fc:70:98:a2:fb:5b:9d:4e:
                    10:9f:b7:43:56:3a:9b:8d:ae:a1:f6:41:f9:b7:f5:
                    53:79:6e:e9:de:7c:36:c2:a2:f2:a4:4e:06:b1:ff:
                    24:c6:4e:5f:97:1e:50:1e:46:a4:fb:cc:ed:be:4e:
                    d0:d5:5a:d2:15:3d:93:8b:46:06:ed:4b:82:6b:1e:
                    83:23:d1:d9:c1:ad:25:b1:63:d0:70:5d:07:33:72:
                    0d:61:c5:7c:ce:cc:32:e5:cb:dd:6f:e5:79:7f:f4:
                    3f:99:52:15:b8:33:06:5c:06:97:c7:c3:dc:e9:6a:
                    b4:2f:d1:05:34:af:8d:09:4a:fe:c7:f3:48:b6:c7:
                    76:7b:6b:39:d6:93:83:9c:28:82:3a:8a:32:93:e6:
                    ab:8d:58:ff:0a:10:14:93:99:4e:e0:1b:87:fb:f7:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:15:D4:26:0F:00:5C:9B:40:7E:92:E3:4A:B6:11:77:3D:4B:62:F0
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3130392e39362e302f32302d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:29:32:ab:7e:af:4d:8c:1b:f6:40:57:ef:e9:32:91:03:f9:
         0f:84:1c:a9:41:38:23:cb:35:64:01:5e:a8:8e:05:46:a4:bf:
         18:47:72:2a:a3:b4:ea:ca:88:46:32:ac:06:f4:52:99:c4:c6:
         d7:d7:7d:cb:12:2e:c7:a6:07:7c:b6:8f:97:67:ca:31:98:13:
         cb:6f:48:cd:00:9a:ab:2a:87:bc:56:07:e5:12:b6:02:a8:ba:
         87:ba:cd:37:b4:ad:0d:ef:52:e1:fa:fc:4e:be:33:a3:2b:f3:
         bc:7f:a2:94:32:bd:49:c5:49:3e:38:7b:22:4e:1f:e9:88:12:
         87:c7:65:7a:0c:7d:e8:b9:03:9d:cd:c6:02:f0:d7:46:c3:13:
         5c:dd:f7:06:68:5f:64:78:84:a6:49:50:71:71:2f:a7:fe:2d:
         41:ed:13:91:1f:05:96:6c:8e:38:28:cc:ec:a2:71:ce:96:bd:
         47:c5:9e:d3:0d:a7:fb:19:1b:13:30:8f:f8:de:fa:32:4f:cf:
         43:3b:b2:4d:a0:2a:a9:d8:57:ac:60:8e:c9:87:28:c8:e2:0e:
         28:ea:02:54:9a:7c:79:92:e8:3c:37:5d:7f:5f:e5:18:68:21:
         6d:7f:6d:36:b1:27:ae:ab:a9:fe:ca:db:5f:66:34:f8:3e:7c:
         d0:ae:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:06 2025 by rpki-client