Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa
File:                     3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          cwhOggcUhgsXwmvuR/M5wdQI9YkYq/eVLLx2IUjGGE8=
Subject key identifier:   C1:69:29:1E:92:5F:54:D1:69:D6:AC:C0:8C:0D:38:E4:C8:13:9A:07
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       4254C7F268563F927F4C282BEDF8AE3A6458003D
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:24 +0000
ROA not before:           Fri 16 May 2025 20:55:24 +0000
ROA not after:            Fri 15 May 2026 21:00:24 +0000
asID:                     262459
IP address blocks:        186.208.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 19:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:54:c7:f2:68:56:3f:92:7f:4c:28:2b:ed:f8:ae:3a:64:58:00:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:24 2025 GMT
            Not After : May 15 21:00:24 2026 GMT
        Subject: CN=C169291E925F54D169D6ACC08C0D38E4C8139A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:cd:26:2e:d4:b5:1e:0c:c2:43:50:99:3b:
                    9b:2d:66:4d:84:be:62:08:6b:6d:a9:9c:86:e0:52:
                    1d:75:94:ec:14:ee:6f:86:66:bf:d0:a1:87:f7:52:
                    b6:e9:f1:81:e6:2c:5a:64:61:07:11:06:6b:4f:17:
                    b2:f4:1d:57:06:49:ad:b5:9b:95:dd:0c:e3:63:5a:
                    bd:2e:40:96:0b:91:8f:7f:f1:69:5e:55:85:6c:08:
                    d9:20:be:92:e2:d1:33:4a:16:25:ad:18:59:27:ff:
                    fa:81:4a:1c:ca:d8:ef:46:5d:57:7e:d1:91:cd:a7:
                    5a:7b:1b:c7:e4:a9:06:a6:cf:77:b4:76:8e:ed:11:
                    ac:3c:6e:83:9f:a9:f9:99:9b:ed:82:9f:b6:09:3f:
                    db:52:76:16:dd:32:dc:8f:f7:70:ff:13:ea:92:3a:
                    35:63:91:6e:49:d1:89:c4:da:7d:9f:01:5c:19:b7:
                    aa:a6:99:08:0f:51:cb:e0:13:f0:7d:78:1d:b9:f8:
                    ef:c1:2e:5b:8b:4d:f0:1d:7b:5a:34:7f:6e:aa:95:
                    be:68:6d:68:1d:50:4f:66:8b:70:3f:bc:b7:92:08:
                    a1:c4:1b:0a:46:d0:7d:cd:d8:af:c6:49:53:3c:bf:
                    76:f2:70:90:74:05:61:e9:cb:db:63:df:5b:43:91:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:69:29:1E:92:5F:54:D1:69:D6:AC:C0:8C:0D:38:E4:C8:13:9A:07
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:a7:74:77:5a:72:bc:a6:6a:05:e8:8d:d6:99:2d:dc:60:
         fb:cd:5f:5b:6d:cb:c6:e0:7b:77:e1:11:cf:87:5b:1b:d5:a6:
         12:23:37:1b:63:68:d5:96:f7:cf:e6:d4:50:a8:10:10:37:eb:
         65:01:77:56:2a:a3:d3:3e:47:1f:6f:fc:74:ed:d5:81:bd:3a:
         53:d9:cb:a4:c6:be:90:06:b4:77:3e:eb:f4:47:67:19:b1:b4:
         7e:e6:9d:8a:0a:9f:43:7c:c1:64:26:3f:11:cb:6c:8f:cd:dc:
         d7:1c:da:5e:44:38:0d:e2:44:2e:9c:08:9e:09:b3:63:56:eb:
         9f:5b:da:26:7d:3d:6b:70:ba:01:5f:61:ee:e3:86:ed:fa:38:
         42:ab:ae:17:0e:e2:9e:4f:2b:33:78:1c:43:32:cf:39:60:f9:
         b9:04:0e:76:d3:ac:b0:a9:29:e9:c6:17:36:75:f3:58:bb:c8:
         75:01:6a:76:cd:d7:e4:f4:64:0e:6b:2c:6a:88:65:b5:d8:1f:
         a8:d3:fd:a4:78:07:d4:d0:10:42:9a:34:e3:f7:2a:87:35:2e:
         0c:77:d6:5e:5d:74:ef:a4:ea:60:68:7c:f2:4b:82:c2:14:df:
         07:cb:d6:5a:96:09:e2:5a:05:6c:a1:fc:94:2f:c8:9b:77:0d:
         a5:03:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:34:58 2025 by rpki-client