Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32312d3234203d3e203238323736.roa
File:                     3138372e3130322e39362e302f32312d3234203d3e203238323736.roa (raw, json)
Hash identifier:          4VPRaN+uUrB0aeG4jLHYhcD+NGMJMVMPTM+pMSx1b+U=
Subject key identifier:   51:A3:F7:81:BE:0C:61:27:30:66:21:F3:FB:EA:9D:E4:DE:8E:FB:C6
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       4CBCF73D7634A4367706E8751E191C8994E75F9C
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32312d3234203d3e203238323736.roa
Signing time:             Wed 07 May 2025 19:31:15 +0000
ROA not before:           Wed 07 May 2025 19:26:15 +0000
ROA not after:            Wed 06 May 2026 19:31:15 +0000
asID:                     28276
IP address blocks:        187.102.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 14:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bc:f7:3d:76:34:a4:36:77:06:e8:75:1e:19:1c:89:94:e7:5f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: May  7 19:26:15 2025 GMT
            Not After : May  6 19:31:15 2026 GMT
        Subject: CN=51A3F781BE0C6127306621F3FBEA9DE4DE8EFBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:30:0c:fe:1d:5e:13:e9:e4:8a:a1:5d:84:
                    ef:e9:ad:1d:e5:44:69:54:43:97:3d:44:a6:89:6d:
                    43:1d:5e:7c:45:70:3c:a6:44:17:e0:5b:90:29:34:
                    16:43:8e:84:f3:b7:72:1a:7f:73:f1:8d:6f:7e:e9:
                    48:b6:21:1b:b3:a3:0b:03:be:f9:8f:1d:04:f0:56:
                    de:95:17:64:d5:5a:2b:df:fa:b9:69:39:72:fe:18:
                    64:03:3f:fa:6d:52:e6:e9:55:69:3c:ee:88:49:e1:
                    1f:ea:c1:92:94:5a:44:3d:03:58:01:06:d4:85:f3:
                    3c:5c:72:f5:15:b4:95:be:75:af:c9:71:e7:11:bc:
                    76:17:a0:8b:4c:c2:8b:ea:0d:0d:f9:04:46:93:3c:
                    d8:6f:69:c6:9f:71:00:99:ce:c2:4c:99:be:84:64:
                    75:cd:bd:ab:bb:6a:84:0b:29:ab:2d:e6:74:20:8a:
                    78:bd:75:cd:bc:fd:fc:f1:67:ad:a2:26:b1:99:85:
                    45:1b:fd:e6:67:04:1a:ab:9d:a0:f0:17:69:eb:e4:
                    23:64:8b:a1:f8:a6:fb:55:9e:73:23:6c:88:45:43:
                    d9:56:77:f4:c4:d4:38:50:bc:36:7d:c3:13:22:41:
                    3e:ab:9e:1d:80:92:44:49:90:5b:3e:85:bf:26:b2:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:F7:81:BE:0C:61:27:30:66:21:F3:FB:EA:9D:E4:DE:8E:FB:C6
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32312d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:a8:3a:87:f7:c8:bc:1f:2f:a3:ca:1e:82:f2:65:60:2e:
         bd:59:f4:6b:a1:c0:51:33:04:e3:c1:c9:5e:74:c2:dd:55:f0:
         e5:3b:3d:e0:15:37:3c:31:a3:4b:eb:4c:ee:c5:dc:59:fb:05:
         e1:58:f2:05:22:cc:cf:ab:2e:23:35:71:00:4b:b3:56:af:51:
         64:da:2e:02:e5:70:79:62:91:80:a5:0f:4d:b8:c3:73:05:9f:
         7b:72:1e:1a:2a:38:47:46:2f:d6:cb:82:84:f8:ed:0f:7e:d2:
         52:e8:9c:6e:86:9e:a6:e8:5c:c6:bb:75:03:b2:06:e8:49:b5:
         d0:ed:1f:e5:3a:b8:ce:5a:2d:9a:24:79:1e:b1:a3:41:ba:87:
         f7:cd:33:85:7c:21:62:ba:d5:0d:e8:18:3d:e2:81:bb:1a:b2:
         1f:a7:51:be:a2:9b:19:7e:be:94:ca:bb:82:cc:dc:8b:b5:22:
         ac:86:6f:b8:bd:b8:9f:95:14:da:a4:fa:c0:86:3f:cf:20:75:
         9b:63:f4:5c:9b:cd:d7:d2:24:2e:55:c1:47:e6:38:b5:2c:61:
         1b:7b:8b:ae:20:c0:13:ce:89:71:b0:cb:fc:d1:03:96:4c:b3:
         2c:26:e7:dc:e8:41:f3:70:af:36:01:b4:24:65:ee:0d:41:f3:
         4d:be:45:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTLz3PXY0pDZ3Buh1HhkciZTnX5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQzA4NEI1M0Y5Nzk4NzE0QzA2QTY0MkI2OThERDkw
RUMyRjI1RTAeFw0yNTA1MDcxOTI2MTVaFw0yNjA1MDYxOTMxMTVaMDMxMTAvBgNV
BAMTKDUxQTNGNzgxQkUwQzYxMjczMDY2MjFGM0ZCRUE5REU0REU4RUZCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvjAM/h1eE+nkiqFdhO/prR3l
RGlUQ5c9RKaJbUMdXnxFcDymRBfgW5ApNBZDjoTzt3Iaf3PxjW9+6Ui2IRuzowsD
vvmPHQTwVt6VF2TVWivf+rlpOXL+GGQDP/ptUubpVWk87ohJ4R/qwZKUWkQ9A1gB
BtSF8zxccvUVtJW+da/JcecRvHYXoItMwovqDQ35BEaTPNhvacafcQCZzsJMmb6E
ZHXNvau7aoQLKast5nQgini9dc28/fzxZ62iJrGZhUUb/eZnBBqrnaDwF2nr5CNk
i6H4pvtVnnMjbIhFQ9lWd/TE1DhQvDZ9wxMiQT6rnh2AkkRJkFs+hb8mssNbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUaP3gb4MYScwZiHz++qd5N6O+8YwHwYDVR0j
BBgwFoAUirwIS1P5eYcUwGpkK2mN2Q7C8l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43aERCNEFMVHFI
bjgvMC84QUJDMDg0QjUzRjk3OTg3MTRDMDZBNjQyQjY5OEREOTBFQzJGMjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkMwODRCNTNGOTc5ODcx
NEMwNkE2NDJCNjk4REQ5MEVDMkYyNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxZ0xyZVdMZmNMczJQNHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAv
MzEzODM3MmUzMTMwMzIyZTM5MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDu2ZgMA0GCSqGSIb3DQEBCwUAA4IBAQCPG6g6h/fI
vB8vo8oegvJlYC69WfRrocBRMwTjwcledMLdVfDlOz3gFTc8MaNL60zuxdxZ+wXh
WPIFIszPqy4jNXEAS7NWr1Fk2i4C5XB5YpGApQ9NuMNzBZ97ch4aKjhHRi/Wy4KE
+O0PftJS6Jxuhp6m6FzGu3UDsgboSbXQ7R/lOrjOWi2aJHkesaNBuof3zTOFfCFi
utUN6Bg94oG7GrIfp1G+opsZfr6UyruCzNyLtSKshm+4vbiflRTapPrAhj/PIHWb
Y/Rcm83X0iQuVcFH5ji1LGEbe4uuIMATzolxsMv80QOWTLMsJufc6EHzcK82AbQk
Ze4NQfNNvkXE
-----END CERTIFICATE-----
Generated at Thu May 15 06:31:52 2025 by rpki-client