Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130322e302f32332d3233203d3e203533313533.roa
File:                     3138362e3230392e3130322e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          73kyqIr9OwHWqOMrsU8o8OTnyR/e8bP1KpQfNeOdNuo=
Subject key identifier:   06:24:C4:2F:DF:3B:91:22:C2:04:C1:8D:B8:DB:46:1F:26:4C:1B:C4
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       5C6A41C294496E1162C6AEEDA3BB7931CEA74246
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130322e302f32332d3233203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:41:46 +0000
ROA not before:           Wed 04 Dec 2024 15:36:46 +0000
ROA not after:            Wed 03 Dec 2025 15:41:46 +0000
asID:                     53153
IP address blocks:        186.209.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:41:c2:94:49:6e:11:62:c6:ae:ed:a3:bb:79:31:ce:a7:42:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:36:46 2024 GMT
            Not After : Dec  3 15:41:46 2025 GMT
        Subject: CN=0624C42FDF3B9122C204C18DB8DB461F264C1BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:9f:a9:84:fd:a6:d4:3c:4c:55:ee:f6:ae:
                    3f:e5:10:63:c3:e3:2f:97:d7:a6:2c:a0:8d:20:f6:
                    95:05:4b:d1:af:79:fe:5a:0a:d9:a4:1a:99:70:5b:
                    12:1e:97:1d:90:5c:ed:6b:a3:d1:15:75:6f:c3:fc:
                    34:71:59:b0:0e:e7:33:0a:e2:71:29:d6:67:bc:dc:
                    a7:f8:ab:48:a9:b5:5c:e6:fc:86:b8:70:48:43:e8:
                    31:5a:52:a3:cd:3e:bc:a5:cf:7d:9d:51:22:7c:67:
                    9b:6e:d3:47:cf:2f:44:97:28:fe:c7:4b:46:3d:b1:
                    d3:2e:c4:6d:3e:52:01:37:6f:4f:2e:97:9f:08:11:
                    1f:4a:84:96:24:8d:66:50:d9:1f:9a:4b:70:a7:e3:
                    6d:c6:1a:dd:9b:12:91:64:cc:14:ab:d5:50:bc:67:
                    15:ed:46:c2:10:ba:b2:12:46:55:51:fa:33:03:36:
                    9f:2d:70:1f:10:bf:e4:e4:80:07:56:27:89:9c:8d:
                    6d:23:ad:82:3c:6a:c4:b2:7b:17:25:ae:7a:d3:5f:
                    55:5c:c2:7c:dd:f6:f1:89:98:0d:2e:a0:ac:7c:d6:
                    90:af:41:d1:75:c9:30:08:de:9a:26:dc:03:a1:e0:
                    12:ec:9f:3b:3e:9f:a1:1d:f0:83:06:b4:ac:6a:e5:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:24:C4:2F:DF:3B:91:22:C2:04:C1:8D:B8:DB:46:1F:26:4C:1B:C4
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130322e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:c2:3e:20:64:4a:a9:98:1f:b8:b1:42:51:d8:e2:5e:38:
         1e:c9:89:a8:d3:fa:70:35:3c:36:ef:b8:39:4b:e9:58:49:ba:
         9d:dc:72:82:f2:13:be:23:e2:28:91:4f:ac:0a:06:f1:9b:c0:
         96:63:af:64:67:97:64:b0:b8:23:ed:0f:8f:5c:4c:75:7f:52:
         61:72:0e:6d:53:d0:b7:51:d0:b1:a6:54:89:b9:08:4f:58:13:
         22:b9:8e:6f:73:96:92:76:be:19:cc:b8:dc:72:31:34:35:80:
         46:da:ae:51:02:a5:26:ca:a7:c4:e2:67:2b:7c:e8:07:0b:30:
         1d:31:e4:82:31:48:3d:d0:aa:4e:f2:7a:3b:fc:33:7d:01:c1:
         17:c5:78:31:57:ab:dd:b3:f4:d0:8b:b2:fe:c4:bd:cb:67:5d:
         5b:ef:38:43:97:40:b2:eb:49:3f:34:e9:1e:e6:39:46:9e:71:
         fd:90:40:5d:d4:01:20:6e:bb:39:33:d4:e5:85:67:14:49:70:
         91:c3:cc:2f:89:51:b3:94:ce:6d:bb:ec:a4:cc:2a:6f:c6:ab:
         71:4a:3a:73:11:e6:37:d0:6e:d7:b7:ca:d3:d0:b3:4a:21:5f:
         26:01:bd:73:5f:54:66:7d:25:93:d6:79:3b:e4:7a:d0:b6:7f:
         46:4a:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:26 2025 by rpki-client