Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231362e302f32322d3234203d3e203238313538.roa
File:                     3138372e36302e3231362e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          FfO5o/cXhTmyoELUtgE+xwpZSlhU9tv+lgYksxVV7EU=
Subject key identifier:   AB:A7:AA:A2:2C:96:7E:03:CD:96:87:4E:8F:AD:F1:97:55:DF:5B:05
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       2A9D781F60BB27DEE897F042830D7CBCF78B3DD4
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231362e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        187.60.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9d:78:1f:60:bb:27:de:e8:97:f0:42:83:0d:7c:bc:f7:8b:3d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=ABA7AAA22C967E03CD96874E8FADF19755DF5B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:4b:ca:f3:9f:1c:35:66:ca:20:77:f6:83:
                    8d:a5:b9:54:e1:a8:14:57:2c:fb:a4:32:55:4c:66:
                    5b:dd:ee:20:da:b1:d6:fa:2e:58:fc:a1:63:1f:20:
                    e9:a6:d6:aa:75:a9:bd:9b:dd:0a:32:c2:4d:d2:3a:
                    c7:0a:bf:16:0a:1c:04:b5:6a:b7:e9:f5:94:f4:1a:
                    29:95:5a:b2:4b:22:42:c0:ad:48:55:02:3a:78:60:
                    6f:76:a3:fe:21:14:ac:14:1b:35:ef:aa:3a:5f:c4:
                    8a:24:b9:bb:6a:64:d1:42:0a:68:40:47:bf:dd:32:
                    ba:ef:94:a6:3a:a5:c6:cf:3f:57:bf:0f:3b:b6:99:
                    ef:47:61:a0:76:0c:b6:ba:ee:eb:b2:ba:c7:cc:d4:
                    90:70:3b:45:b4:17:24:9d:c9:96:6b:f0:55:2f:a8:
                    88:b8:95:2b:cd:81:20:62:cc:69:6a:6a:d7:0e:0f:
                    7f:a8:08:37:fd:c4:a0:f4:76:98:fa:ae:ff:92:60:
                    30:67:d5:42:62:a7:c1:e6:09:28:ec:63:df:89:b0:
                    30:33:24:f7:3c:32:c5:45:41:4f:53:26:cf:c6:d2:
                    e8:6f:5f:3e:2c:5e:8c:9e:99:93:bf:f0:74:98:02:
                    80:d3:63:ae:6d:40:13:66:84:ee:5f:54:a9:5f:e5:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:AA:A2:2C:96:7E:03:CD:96:87:4E:8F:AD:F1:97:55:DF:5B:05
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231362e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:1b:ef:1f:43:12:ae:4e:6e:4a:9a:6d:3f:fb:61:d9:bf:26:
         f9:91:8f:ba:07:b7:7b:2a:7c:52:32:b6:51:e6:f7:d3:c2:56:
         73:a8:e3:03:68:26:cb:b4:0f:fb:d8:49:52:84:93:ff:62:9e:
         16:6c:c1:4d:09:90:f7:3b:19:ba:a8:06:d0:65:30:16:7c:4e:
         7b:9f:f5:5d:83:50:70:7c:0c:9b:1e:02:74:f4:c3:9b:0f:7f:
         3f:62:c7:8a:4b:c4:54:09:a2:37:d0:c8:b3:35:9f:bd:6c:90:
         36:dd:16:b0:6a:f3:fb:05:37:ed:23:b6:ed:44:dd:d7:70:c2:
         ec:36:41:00:86:bd:d6:1f:0a:30:14:3a:56:3f:cf:a2:51:70:
         ea:51:61:57:09:f5:40:51:fe:e7:2c:95:a8:fb:6c:83:07:b4:
         7e:64:a1:dc:f6:9b:7d:53:bb:bd:89:0e:3c:0f:7a:ac:52:28:
         b9:08:b8:2e:9a:ea:d4:ca:1b:30:5c:e5:ee:13:3f:d1:c5:03:
         d9:94:fe:30:c0:1c:97:67:bc:16:62:8b:47:96:80:e4:ca:8f:
         c9:71:10:c3:c8:a6:a1:f9:20:26:a4:12:b9:68:02:40:80:b9:
         94:80:07:b6:5f:d9:93:30:26:9c:59:21:1d:31:ae:9f:5b:c8:
         ff:8e:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:26 2025 by rpki-client