Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          yeY/pgMNdSqA9P2qsSr8xt+fv8+bgbRt6QsuV8RKI0Q=
Subject key identifier:   F5:C1:2F:6C:5C:2F:98:4E:7C:EE:C1:34:8B:25:CE:C2:BA:B5:C7:42
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       38E5AE9DA875966A3362A9094CF6301E0AECB816
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:41:49 +0000
ROA not before:           Wed 04 Dec 2024 15:36:49 +0000
ROA not after:            Wed 03 Dec 2025 15:41:49 +0000
asID:                     53153
IP address blocks:        186.209.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:ae:9d:a8:75:96:6a:33:62:a9:09:4c:f6:30:1e:0a:ec:b8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:36:49 2024 GMT
            Not After : Dec  3 15:41:49 2025 GMT
        Subject: CN=F5C12F6C5C2F984E7CEEC1348B25CEC2BAB5C742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:fe:f6:56:ee:0a:90:f1:23:94:24:20:93:
                    61:e0:8b:db:be:ed:57:e7:a3:34:54:8b:6e:e8:bb:
                    24:2e:a1:e3:e8:f8:7b:1c:78:bd:06:c7:3c:25:b2:
                    9e:1f:b3:4d:6f:af:1d:b3:6f:71:f1:fe:05:f6:ca:
                    8f:66:47:c8:93:be:db:83:cf:0d:33:ed:97:8d:be:
                    cf:e4:0c:4b:b6:b9:bb:a4:9b:63:cb:76:0e:c4:da:
                    12:e0:c9:6c:41:b1:d8:74:e8:25:77:52:0d:82:33:
                    29:29:e8:20:4a:c6:02:91:68:47:cc:d8:e3:b7:31:
                    9f:8d:8a:a0:28:31:b7:7d:be:ad:9d:99:bc:8c:3b:
                    19:23:74:34:77:28:0e:21:9f:16:4b:e7:36:51:52:
                    27:2e:5b:4b:bd:1a:0b:8c:a1:62:06:1b:e5:a2:5f:
                    4a:a4:e4:4a:47:2b:6a:03:1c:6a:65:45:a2:52:24:
                    4a:2c:66:b3:58:0f:7c:e2:19:1a:0b:d2:36:4a:ca:
                    ce:24:65:34:ff:da:44:8d:44:e7:33:64:61:47:bc:
                    a7:01:0c:a7:45:1f:3e:79:db:fd:d5:2d:cd:29:7b:
                    a0:72:0c:7f:10:9a:30:6b:2e:ec:2c:fe:99:73:5e:
                    d1:dc:4b:ab:78:42:d4:54:a2:3c:37:40:8b:32:ab:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:2F:6C:5C:2F:98:4E:7C:EE:C1:34:8B:25:CE:C2:BA:B5:C7:42
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:6f:10:41:bd:a1:b3:17:da:4a:85:c6:32:bd:29:19:95:
         ab:e1:42:f0:3d:c1:22:a4:e5:93:1e:8a:9a:75:90:0e:73:93:
         c6:5b:50:91:ca:e1:32:d3:0d:f2:e3:22:04:c8:b2:da:a2:fd:
         fa:c5:fc:91:89:e2:46:5b:02:86:4d:d0:57:ff:16:9b:19:b0:
         28:34:32:80:4b:db:b9:22:ad:2d:c2:b4:1a:c9:95:df:a8:9a:
         a8:65:a3:4a:a5:e6:d6:f2:89:57:1b:3b:ec:9d:0b:5e:60:27:
         e8:fd:fe:b8:2e:d7:dd:00:8e:df:66:ee:8d:9f:fd:10:47:dd:
         7b:21:68:e5:a4:cc:c7:6e:5b:b2:74:f0:b3:0e:92:96:68:13:
         e9:4e:71:b0:ed:fb:67:29:27:3d:48:e2:83:82:cc:b6:69:c8:
         53:85:9f:0f:e8:79:28:63:cb:c1:7f:74:e9:6b:3f:71:29:49:
         de:e2:e3:7e:bb:1f:cf:58:ef:cc:17:9d:aa:54:b2:00:d7:0a:
         e9:a2:d1:9e:0b:fe:96:36:66:4d:ae:81:81:52:c3:ea:9d:fe:
         19:62:6c:ba:9d:eb:28:59:24:be:ef:87:8a:21:58:5f:f9:bb:
         b3:21:ef:0d:bc:1e:51:ac:94:54:66:7b:bf:aa:f0:2b:aa:1c:
         c4:1f:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:04 2025 by rpki-client