Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134362e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3134362e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          627xtKxfg55VzuhN3bz+keHwrQkQOTj5/tPOTgiUIC0=
Subject key identifier:   7A:D7:06:3D:00:E2:CA:9B:17:4D:F7:AF:F1:C3:39:57:7D:CE:1E:48
Certificate issuer:       /CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
Certificate serial:       6A1F26ED5F8DC8D7F2A2A11F9F0F0A9EAD9CFB00
Authority key identifier: 07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134362e302f32342d3234203d3e203238313630.roa
Signing time:             Wed 02 Jul 2025 18:55:08 +0000
ROA not before:           Wed 02 Jul 2025 18:50:08 +0000
ROA not after:            Wed 01 Jul 2026 18:55:08 +0000
asID:                     28160
IP address blocks:        187.62.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1f:26:ed:5f:8d:c8:d7:f2:a2:a1:1f:9f:0f:0a:9e:ad:9c:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
        Validity
            Not Before: Jul  2 18:50:08 2025 GMT
            Not After : Jul  1 18:55:08 2026 GMT
        Subject: CN=7AD7063D00E2CA9B174DF7AFF1C339577DCE1E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:d8:40:f3:9f:54:f6:73:fb:7d:b6:e6:c4:
                    83:fa:32:14:d1:80:4e:9a:68:60:9c:ab:4d:5d:59:
                    c4:93:da:1f:ea:6f:5c:e9:e5:3b:92:96:3b:00:44:
                    6a:4f:29:82:a2:eb:e4:e6:1c:c9:e9:0b:86:46:3a:
                    e4:9c:c0:c5:ed:ae:c5:74:8b:da:50:a5:61:ee:49:
                    40:f0:84:56:b8:88:89:61:1e:1a:6c:62:1b:0b:25:
                    43:66:37:9d:35:08:1d:7c:53:10:4a:9e:1b:fe:a6:
                    34:66:54:dc:f7:a5:f4:48:0e:a1:4a:99:16:4e:d9:
                    94:89:62:9e:20:41:67:de:61:a6:bf:5e:0f:be:e7:
                    6f:7d:12:d9:fe:12:75:e0:f9:45:69:39:9b:2d:46:
                    f9:23:1c:76:d9:16:17:3c:3c:ed:98:1f:f3:59:85:
                    01:6a:dc:18:28:c8:e2:8f:36:ce:2b:67:8d:12:32:
                    cf:bb:ca:40:1f:9b:3a:a3:f4:06:c0:1f:d8:8f:72:
                    65:da:cc:db:6a:77:cc:52:73:ee:34:fc:1a:ce:ee:
                    d3:f5:ca:e9:b5:60:de:d1:90:98:89:85:dc:3e:28:
                    5f:55:d3:9c:8c:08:29:5b:76:8c:71:a0:8d:9b:f4:
                    f4:49:ef:fc:42:a3:4d:3a:23:ab:e7:d0:a2:80:a6:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:06:3D:00:E2:CA:9B:17:4D:F7:AF:F1:C3:39:57:7D:CE:1E:48
            X509v3 Authority Key Identifier:
                keyid:07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134362e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:57:32:d5:23:9e:7f:8f:55:a7:4a:00:09:3e:39:88:e9:
         c8:cf:38:1a:3d:64:3d:1b:0f:06:a5:17:96:e5:41:80:d0:3d:
         d3:dd:df:e6:58:00:bf:fc:f7:7b:82:40:46:3a:bd:f5:86:6c:
         20:1c:73:72:df:a4:e4:22:91:7c:75:30:73:f1:c3:c8:af:27:
         35:91:49:cc:27:1f:27:05:11:2f:65:9c:ec:8e:49:11:1a:3d:
         c8:85:e8:49:4f:ea:31:cd:d4:d8:aa:03:e3:38:a6:86:3c:0c:
         b4:14:45:28:bf:19:56:6f:75:b7:75:dd:1d:7b:4e:c1:62:52:
         c9:02:c6:54:56:17:a0:3b:63:1c:f2:4f:b1:6d:61:2d:fe:e9:
         02:bb:e1:79:64:c0:95:5f:ba:5b:8d:4a:66:4d:61:cd:de:06:
         1b:d4:18:94:8e:69:05:dc:86:f6:87:9f:2f:07:ca:5d:ad:a5:
         3a:b1:c4:7a:d7:da:57:bc:4d:7c:22:07:c3:d2:18:9b:a6:e2:
         1c:24:60:2a:b2:10:97:ad:fd:76:ac:b4:c0:63:fd:f9:ab:f3:
         38:46:16:b7:12:e5:05:4b:79:f5:cb:a0:bb:f7:58:e3:0e:23:
         ea:40:a0:8a:74:a0:19:79:df:b7:64:00:d7:8e:d9:c1:f3:f4:
         31:90:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:31:20 2025 by rpki-client