Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3132302e3233322e302f32322d3234203d3e203238313538.roa
File:                     3138372e3132302e3233322e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          bve5O5x4o/BwjTYYesB9FnFLbbk2dZhmNOL5LUj0AAM=
Subject key identifier:   66:9B:A3:FC:AD:AC:A5:71:4A:73:00:8C:E7:07:74:C2:3A:B2:4F:5B
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       18C21BEB13904DCBBDB87A1741E6EED0BEE5846F
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3132302e3233322e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        187.120.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c2:1b:eb:13:90:4d:cb:bd:b8:7a:17:41:e6:ee:d0:be:e5:84:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=669BA3FCADACA5714A73008CE70774C23AB24F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:f1:5f:67:25:c9:cd:99:0a:ef:15:a0:2d:
                    70:56:a0:ab:ba:b6:5a:a4:d5:9b:71:b4:75:6e:9f:
                    4c:7f:ff:44:00:35:75:02:a4:69:d4:2a:39:7a:3f:
                    ca:cd:4b:d2:c3:9a:ef:ef:6e:c6:e7:e4:d1:88:b0:
                    9b:1a:18:24:92:2d:8c:04:8a:ed:33:70:4d:6b:06:
                    08:bb:32:fc:57:fb:1a:ab:0e:94:5b:58:32:c5:a3:
                    4a:ae:12:2f:5b:b6:95:2d:5a:6f:ad:f5:3f:72:52:
                    2f:a3:3e:e8:a6:08:fb:cf:71:35:5a:59:b1:0b:59:
                    e0:23:73:70:f7:15:ed:74:89:2a:60:b5:ac:14:3b:
                    fe:40:57:ee:2c:69:dd:94:4d:d0:92:d8:d1:28:6e:
                    e0:b4:ad:9e:23:25:47:e7:33:5b:37:2d:5f:71:38:
                    91:1b:ea:4d:26:17:e4:8b:7e:09:a9:ed:ec:27:6d:
                    5c:8b:7b:4e:90:a2:3a:ba:ac:30:7c:aa:a5:1b:d9:
                    5f:00:12:45:45:fb:d1:3c:3f:71:d7:79:8f:81:8c:
                    b3:bf:4f:9a:5d:13:45:38:38:5c:ae:0d:a6:c9:c0:
                    c8:80:4b:71:f4:68:a5:2b:17:25:a7:6b:6e:fa:fd:
                    37:1a:ce:62:9b:4c:57:76:9d:61:90:9f:cc:b4:ac:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:A3:FC:AD:AC:A5:71:4A:73:00:8C:E7:07:74:C2:3A:B2:4F:5B
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3132302e3233322e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:e2:aa:de:d7:ba:0e:1f:7f:43:e2:f8:6b:a9:6c:6b:77:
         b1:43:bb:01:90:b6:db:e7:ad:c0:0c:b9:40:7f:22:43:7b:55:
         72:4c:90:e5:3b:aa:01:aa:3c:de:fa:e6:a2:63:45:60:34:f6:
         29:f3:f2:4a:fa:55:79:3c:27:b7:ca:3c:a7:f4:e6:48:64:78:
         53:fc:33:9e:f0:f7:b3:a6:9e:eb:ea:3a:ff:98:ca:da:7e:25:
         30:81:0f:01:cc:a5:a1:a2:6a:22:3b:e2:4d:b9:73:50:9b:96:
         03:a5:e4:29:dd:29:ce:22:43:45:d5:cf:e1:4c:7a:8b:58:54:
         48:b1:ee:d0:37:92:a7:bf:db:fb:85:57:5f:88:96:26:63:97:
         29:16:f8:7c:a8:c9:8a:03:94:dd:22:38:79:a8:37:04:e1:20:
         98:25:0b:80:10:9f:42:68:35:24:d6:6c:bf:ca:20:5c:6f:43:
         62:32:4c:ae:45:08:6b:67:ca:b9:eb:e6:ba:a1:9c:83:a1:9c:
         20:17:bf:6c:da:74:e8:5c:e7:74:9e:07:2d:d3:d3:6e:11:56:
         3f:3c:de:9b:ec:22:78:a2:6e:f4:32:7f:68:b4:68:a8:a3:65:
         99:ae:c0:03:a1:88:12:ad:4c:2c:58:be:40:89:fe:d3:e1:29:
         69:e3:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:10:53 2025 by rpki-client