Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32322d3232203d3e203238313630.roa
File:                     3138372e36322e3135362e302f32322d3232203d3e203238313630.roa (raw, json)
Hash identifier:          YhBNkzsZzvX70U2xZfGMPyhkxrZogez74z6scGtP75o=
Subject key identifier:   3D:1A:AD:B9:D5:89:58:21:0B:59:2D:CE:05:37:47:A5:F8:91:E1:8D
Certificate issuer:       /CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
Certificate serial:       5B77AF577E4442141EADA5F30623A84719B1EAA3
Authority key identifier: 07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32322d3232203d3e203238313630.roa
Signing time:             Wed 02 Jul 2025 18:55:08 +0000
ROA not before:           Wed 02 Jul 2025 18:50:08 +0000
ROA not after:            Wed 01 Jul 2026 18:55:08 +0000
asID:                     28160
IP address blocks:        187.62.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl
                          rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:77:af:57:7e:44:42:14:1e:ad:a5:f3:06:23:a8:47:19:b1:ea:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
        Validity
            Not Before: Jul  2 18:50:08 2025 GMT
            Not After : Jul  1 18:55:08 2026 GMT
        Subject: CN=3D1AADB9D58958210B592DCE053747A5F891E18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:a2:a0:7f:3b:7a:a4:d0:c7:86:e0:a0:9c:
                    84:c0:1c:8f:4d:f3:36:b5:4c:f5:c7:a8:a9:f4:91:
                    ba:0f:8e:e9:a9:66:5f:e1:83:70:f0:de:c6:18:49:
                    45:ed:a3:8d:37:7d:44:f0:30:33:40:e4:d5:de:0f:
                    52:f9:f0:a1:e6:20:a0:3f:63:fb:ec:76:26:3a:6c:
                    ec:57:63:0c:c3:8b:1e:fa:5a:b1:50:20:89:aa:9f:
                    1d:7b:a3:2b:7e:d1:da:2f:25:82:50:cc:99:fa:c0:
                    8d:53:8b:89:ce:31:e4:0a:35:8c:1b:65:0b:18:ad:
                    fe:d8:fa:8f:fb:36:4a:9e:d2:29:bd:83:b8:ee:2f:
                    73:9e:25:59:76:66:0e:48:51:eb:28:94:8c:31:a5:
                    55:f5:c8:f8:bc:f8:cd:05:01:94:ec:0a:05:99:e3:
                    12:61:d7:25:84:4a:a4:26:33:c6:3b:f3:df:85:6e:
                    65:66:66:1f:62:09:4e:69:ca:d3:5e:43:3e:d3:fe:
                    cd:3f:9f:a6:e4:5b:77:07:5d:3b:a8:e2:52:26:fa:
                    83:dd:29:30:2e:a7:5a:81:58:a6:a8:85:d3:35:76:
                    b9:08:e1:75:fc:a6:14:d6:84:09:7a:46:68:96:9e:
                    da:53:0a:4a:5d:5e:5f:df:e2:67:36:ad:32:17:25:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:AD:B9:D5:89:58:21:0B:59:2D:CE:05:37:47:A5:F8:91:E1:8D
            X509v3 Authority Key Identifier:
                keyid:07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32322d3232203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:94:47:b9:0d:9b:c6:f5:45:e1:38:94:95:86:8b:b5:ec:
         ed:dc:f2:04:6b:21:e3:20:ed:bb:4c:ff:fa:8d:c3:f7:1e:56:
         26:c7:b5:b8:88:1a:3b:cc:38:8e:51:c3:14:c0:3d:e2:26:7f:
         b3:8c:d2:0b:bf:ea:df:17:cb:6a:8e:67:af:fa:a5:b9:ad:91:
         21:1a:1c:a6:ed:59:74:cd:d8:bd:4a:c8:3f:f4:9f:9d:85:54:
         cc:12:b9:cf:30:63:18:60:9f:5f:4b:10:42:e9:40:ef:80:ea:
         61:92:34:ee:69:0d:7e:f3:0b:4f:52:7e:96:0c:29:4a:5c:a5:
         9d:90:e6:99:bd:be:47:44:6e:7f:fa:6c:43:bb:66:b4:3f:ed:
         74:f6:e0:ba:ec:6a:7e:33:5f:93:65:a0:36:17:1a:a9:b4:23:
         e7:ab:5b:b5:bc:6f:60:fe:b5:90:98:bf:fa:89:87:60:4a:22:
         a0:22:78:e0:7f:c4:00:49:6d:06:2e:e0:7b:05:be:0f:55:f2:
         6d:4f:dd:b7:e0:e5:52:c6:1e:f6:a8:11:ba:cf:57:10:83:dc:
         a5:51:71:c2:24:3a:37:ca:7e:65:7a:be:51:60:b1:de:a4:6d:
         98:e9:d0:ab:77:ab:e5:0c:8a:15:78:f7:96:68:26:77:90:95:
         87:35:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:11:23 2025 by rpki-client