Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa
File:                     3138372e32342e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          AZnN08+KqW/+0nVOlFEwAwQTk0RdwiZalVHDNBMP0A8=
Subject key identifier:   46:BC:51:F3:F0:64:A7:76:C9:2A:51:0C:BB:27:9E:8C:16:9E:15:E8
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       275293CB0940F080B84156B221CEB38AFEF3888F
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 17 Jun 2025 15:00:00 +0000
ROA not before:           Tue 17 Jun 2025 14:55:00 +0000
ROA not after:            Tue 16 Jun 2026 15:00:00 +0000
asID:                     22085
IP address blocks:        187.24.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:52:93:cb:09:40:f0:80:b8:41:56:b2:21:ce:b3:8a:fe:f3:88:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jun 17 14:55:00 2025 GMT
            Not After : Jun 16 15:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:9d:b2:a3:a8:7a:89:a2:6c:fc:00:65:f3:
                    a4:92:35:d9:c5:36:70:4a:bf:9c:08:c4:81:2a:a5:
                    94:25:0a:0c:c1:8d:d6:34:68:cd:14:ce:57:77:80:
                    d6:e1:1d:54:1f:ed:7a:2a:ee:00:67:cd:b9:cc:a9:
                    bf:21:8a:c1:c7:1d:5d:6c:6b:2d:1a:b8:07:0b:5e:
                    89:38:f9:96:a1:5e:b5:4d:51:a4:ff:f8:38:c8:bf:
                    93:4b:86:15:6d:60:99:b8:b4:48:16:d0:8a:db:5d:
                    aa:5e:b5:18:48:d4:aa:73:99:c9:40:5e:fb:c9:4b:
                    83:51:83:df:ca:cf:54:84:3b:b7:01:5c:93:f5:f8:
                    24:ec:d9:dc:7d:eb:0e:92:11:23:1f:e7:f2:81:fe:
                    db:d2:be:51:0a:a6:f2:f3:ef:01:0d:de:f4:1b:72:
                    a3:17:39:d1:d2:e6:00:c4:b5:cf:f3:0a:14:37:f0:
                    f9:36:9e:8b:1a:ee:65:8f:4a:43:51:b8:ac:c8:fd:
                    2d:79:d6:d5:1d:40:2e:a4:d6:92:d4:0f:46:86:1e:
                    84:6d:3b:a2:88:97:77:4c:e2:57:fb:7b:a4:41:52:
                    4f:05:64:e5:b1:4f:82:4a:97:12:11:86:cf:f5:1f:
                    27:1b:e1:4b:77:5e:4f:f4:d5:d2:9d:8b:c6:57:bd:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BC:51:F3:F0:64:A7:76:C9:2A:51:0C:BB:27:9E:8C:16:9E:15:E8
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9e:ec:26:60:14:ab:f8:04:60:08:72:e8:e0:15:e1:de:48:c1:
         83:e8:20:89:28:b6:5c:a3:b2:af:3d:f9:28:84:47:f2:e5:03:
         7b:40:9f:3c:2c:2d:02:65:98:82:f7:fd:1f:f0:08:60:9d:b8:
         2d:99:c3:5c:93:84:70:a8:a4:44:be:09:16:9f:a7:b4:46:1d:
         89:5e:5f:a8:08:d9:7f:f7:a2:c1:cb:23:38:b0:5e:a5:b9:cc:
         4b:50:93:b4:2a:01:7a:70:9f:c8:98:67:c9:e4:58:65:2d:97:
         76:e0:88:2a:28:cd:a5:a9:41:1a:b8:98:01:9b:9e:fa:e2:cb:
         5e:ed:a0:19:59:78:14:a3:fc:11:24:35:66:c1:2b:ac:16:e3:
         fd:44:32:f0:c8:05:bf:ea:6d:7c:69:e9:90:6d:d0:8c:95:93:
         c8:73:2f:57:9f:5a:cb:db:2b:38:9c:c5:a5:52:7d:6f:9a:2b:
         28:03:fd:54:c5:64:21:5a:b3:e0:9d:4e:5c:8e:bf:81:6b:6d:
         1d:e4:c9:89:48:4a:ed:3e:59:0c:f9:3e:7b:18:18:cb:1b:a8:
         16:12:55:7c:d1:53:a9:bc:cc:c8:2f:92:ab:8c:38:4c:59:1b:
         5f:87:c4:e8:dd:37:ec:ea:96:38:41:90:4f:7c:7a:01:4e:ba:
         04:35:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:59:12 2025 by rpki-client