Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134392e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3134392e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          nzjH5LmwX83sGZOWwM3qBG7KH9RJQcVeC+qhrrT/Ino=
Subject key identifier:   B5:FE:7B:74:DA:7C:F5:31:4B:D3:A5:0E:B2:B5:E6:C6:00:E9:7C:52
Certificate issuer:       /CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
Certificate serial:       28851A5C0F3AB5FFCFF50DE367088BBF60350563
Authority key identifier: 07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134392e302f32342d3234203d3e203238313630.roa
Signing time:             Wed 02 Jul 2025 18:55:09 +0000
ROA not before:           Wed 02 Jul 2025 18:50:09 +0000
ROA not after:            Wed 01 Jul 2026 18:55:09 +0000
asID:                     28160
IP address blocks:        187.62.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:1a:5c:0f:3a:b5:ff:cf:f5:0d:e3:67:08:8b:bf:60:35:05:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
        Validity
            Not Before: Jul  2 18:50:09 2025 GMT
            Not After : Jul  1 18:55:09 2026 GMT
        Subject: CN=B5FE7B74DA7CF5314BD3A50EB2B5E6C600E97C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:0b:51:2a:b3:bf:2b:0c:31:90:b7:3d:c8:
                    c6:c4:57:cd:5a:b2:4e:ed:d3:80:ed:4d:4e:9d:f0:
                    6e:09:9a:3c:02:81:c6:79:c8:92:3c:c8:75:fe:64:
                    3d:50:ea:2c:87:5e:65:0a:87:36:0a:75:53:07:f8:
                    1f:97:3a:4b:e3:51:f6:ff:a3:74:0e:d1:7b:a7:6a:
                    2c:7d:6a:93:39:02:fa:a5:e3:40:4d:cb:2f:fd:ba:
                    12:e6:db:12:60:3b:9b:02:b3:61:67:34:3c:20:6a:
                    2a:56:a4:60:72:99:13:15:cf:be:41:80:52:ae:f1:
                    c8:67:31:48:ce:2b:9b:5d:8e:9b:76:bf:6f:23:5d:
                    4c:fb:c5:88:31:ca:0e:e5:e7:a5:5c:b8:5d:2d:09:
                    21:61:d4:93:17:81:5a:31:00:61:8b:62:e8:29:33:
                    1b:71:ec:c1:c5:b0:ca:4a:77:59:32:0d:4d:45:cb:
                    85:e4:86:65:dc:f8:8e:96:60:96:42:3b:11:08:a5:
                    73:32:d9:c4:69:81:bd:8f:b5:0a:c4:57:2c:bb:a4:
                    4a:16:2c:f3:57:22:a1:c6:46:d1:83:bd:bc:84:e6:
                    ca:4f:45:16:89:9e:da:cf:cd:d0:77:d5:2b:2d:27:
                    2f:b6:c3:52:80:69:28:a9:da:c9:48:a3:23:bd:ff:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:7B:74:DA:7C:F5:31:4B:D3:A5:0E:B2:B5:E6:C6:00:E9:7C:52
            X509v3 Authority Key Identifier:
                keyid:07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134392e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:53:3a:a7:a5:23:0e:af:b5:ca:eb:e2:67:ea:45:a6:d2:
         e3:8a:78:ef:fe:ac:c4:12:70:1a:14:31:90:5c:47:4d:da:a6:
         41:36:9e:cf:21:d8:09:3a:97:78:ce:10:8c:0f:a9:e0:df:c4:
         0c:51:cc:81:22:17:e3:2f:ad:09:97:d9:b0:f5:ff:b4:2e:69:
         ee:fe:03:c9:df:7b:12:85:01:55:8c:20:44:2d:e3:9c:81:8f:
         83:46:cb:31:d1:c7:59:ce:bc:0d:34:48:96:1d:3f:6f:da:4b:
         32:bd:76:d1:32:90:e9:e5:3c:57:b9:11:b6:75:f7:7d:2d:cf:
         a4:4a:60:12:37:74:e6:79:96:b0:2c:36:74:d7:24:ef:33:5c:
         7a:e5:dc:e6:c6:e5:8e:63:e0:0c:00:5e:6d:37:bd:99:af:81:
         ca:e5:36:eb:44:73:e7:42:a3:20:7b:3e:af:68:79:c6:5d:cd:
         d7:4d:9d:11:0a:74:84:3b:8d:f2:10:07:0d:24:0a:07:22:61:
         1d:d2:af:c4:c0:13:da:4f:ab:15:25:88:aa:61:dc:41:e6:3a:
         94:d5:ce:c2:25:c8:3a:54:de:b1:9f:a3:b5:20:2d:51:f5:b5:
         f4:e1:4e:c5:51:25:0c:0b:f4:18:c2:53:b1:7e:f9:0d:23:7e:
         74:16:a3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:53:05 2025 by rpki-client