Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231322e302f32322d3234203d3e203238313538.roa
File:                     3138372e36302e3231322e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          BhYH3Ms8XUMKJ3p94zEqpUSf+t/Xkhr36WIfCJv0t/A=
Subject key identifier:   52:3D:59:0D:FB:18:1B:07:EF:E0:61:6F:84:A0:A7:F4:DD:9C:F0:94
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       48247F8B32759C70A8200D16A69F01543A6C5DA6
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231322e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        187.60.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:24:7f:8b:32:75:9c:70:a8:20:0d:16:a6:9f:01:54:3a:6c:5d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=523D590DFB181B07EFE0616F84A0A7F4DD9CF094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:7f:f4:5a:7d:01:d2:a0:d8:cf:f5:53:f4:
                    2e:79:a4:53:be:d9:70:5f:d4:5c:6b:ce:21:e5:db:
                    56:65:f8:00:5b:b6:66:57:f6:bb:05:4f:fe:75:55:
                    e1:2c:fe:88:2f:eb:a9:b8:0f:ea:a6:fd:13:60:78:
                    db:f0:8e:79:ca:fd:5d:bb:e2:92:21:75:59:a5:d2:
                    d4:4a:6c:a2:a0:8e:29:e3:20:5e:48:52:78:e5:2e:
                    f4:c1:96:b6:9a:07:15:fd:d5:ee:5c:95:de:ef:61:
                    bb:6c:1d:9c:36:9d:d4:e0:c7:40:b6:c8:6b:4e:8f:
                    81:5b:cf:2e:b2:dd:6e:10:e5:91:bf:08:2f:eb:39:
                    16:6f:03:90:04:f3:81:aa:5b:66:52:5b:28:45:1e:
                    fd:ce:9c:19:98:38:f1:94:d7:b4:3f:8d:c6:bd:e2:
                    87:06:01:14:4a:d5:2d:8d:db:fe:4f:11:09:f7:93:
                    96:15:da:60:e4:11:b3:37:3e:63:8e:a2:8f:f7:3e:
                    ce:ba:da:cb:59:54:dc:4a:d0:d4:fc:10:22:d5:10:
                    16:c8:c0:bc:cd:97:71:48:3c:fa:74:51:bd:f6:33:
                    b3:c3:21:07:ca:3a:09:97:3c:d4:a3:83:22:96:70:
                    72:16:ab:2e:de:63:b4:a6:6f:90:7a:1f:cf:cc:3d:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3D:59:0D:FB:18:1B:07:EF:E0:61:6F:84:A0:A7:F4:DD:9C:F0:94
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231322e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:42:6b:39:3c:b6:c6:6b:4a:87:03:86:22:1a:7b:10:81:de:
         55:8e:5a:21:94:26:38:48:38:7b:e6:2e:85:4c:5a:62:95:b8:
         c4:b3:4c:66:e3:c2:4a:22:bd:68:71:15:8f:d4:07:f7:08:8f:
         27:4e:c0:da:79:63:65:19:84:27:37:f5:a6:09:14:45:77:ee:
         bc:b3:e3:20:b9:57:ba:55:1e:12:35:40:d5:d1:cc:17:bf:c4:
         a4:9e:e6:2f:83:d0:9c:d4:8f:29:26:59:96:a3:57:0c:14:1b:
         e7:f7:c6:2d:05:07:02:d7:59:fc:64:13:75:74:4a:7b:21:72:
         a8:00:12:21:b6:27:ad:c1:8c:7e:d5:b8:c2:24:6f:82:ac:b0:
         ae:d6:4c:85:bc:e5:17:2c:d9:ba:98:e1:0a:21:72:2d:23:89:
         4a:53:43:50:62:e6:39:23:56:75:d8:74:54:ec:ed:e8:d5:4a:
         8a:c8:48:ad:75:39:96:e2:ad:61:71:5b:da:f7:0b:67:da:e9:
         47:e8:ca:38:ba:1f:2e:b5:33:85:39:73:43:c8:9f:b3:24:50:
         eb:19:2d:f7:28:f4:04:82:9b:62:ce:ba:66:d9:ff:0d:39:98:
         3b:eb:10:07:9b:53:23:71:20:66:f8:17:13:13:8b:ee:06:26:
         10:87:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:32:59 2025 by rpki-client