Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          IB8T/n8sPLj0qchS6W2klUMVIUa2JST3CehxUUmYPYw=
Subject key identifier:   87:19:6E:C6:F9:9F:14:04:11:78:C3:60:49:0C:1B:7F:D5:BC:47:93
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       3DA65B5388D66FEF8569D042420DEE737C7AA1AE
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:41:55 +0000
ROA not before:           Wed 04 Dec 2024 15:36:55 +0000
ROA not after:            Wed 03 Dec 2025 15:41:55 +0000
asID:                     53153
IP address blocks:        186.209.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a6:5b:53:88:d6:6f:ef:85:69:d0:42:42:0d:ee:73:7c:7a:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:36:55 2024 GMT
            Not After : Dec  3 15:41:55 2025 GMT
        Subject: CN=87196EC6F99F14041178C360490C1B7FD5BC4793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:63:64:f9:12:9d:6f:38:ee:68:6d:7c:dd:
                    76:3e:ec:65:98:56:eb:8e:1d:dd:d0:c4:a6:5b:ab:
                    46:79:40:9b:c8:2a:f9:b7:d8:aa:40:ca:3c:66:78:
                    49:77:5b:b8:6a:8a:e1:9d:04:cc:2a:0c:90:f4:ef:
                    cc:71:c4:33:06:46:03:91:3b:63:a4:4d:0c:5a:e2:
                    a8:9d:4a:9f:29:9b:b9:81:e4:42:a0:2a:3e:5f:4a:
                    10:36:1a:ed:12:92:a6:52:0c:ea:31:8e:5b:18:2a:
                    2b:09:36:f8:61:b1:68:f4:97:b9:88:24:b9:07:10:
                    2d:62:15:e3:98:d9:fb:c0:21:f1:58:53:f8:7e:fb:
                    84:73:c6:c5:a8:4a:e4:34:c1:18:00:e1:8a:b1:d3:
                    b2:94:19:7a:ee:f8:83:f6:1b:d4:18:62:01:31:b1:
                    5f:5d:d4:c0:5a:7d:bd:c8:ab:17:d3:40:4f:f1:6b:
                    30:8b:72:48:f3:68:c2:a7:3d:eb:a3:a5:f0:12:0c:
                    08:9a:1a:a8:c3:cf:0f:c9:4f:50:f9:25:5d:59:c4:
                    39:1f:fb:26:16:0c:db:8e:c1:98:c3:4d:66:a2:1e:
                    be:da:a1:b4:4d:46:04:fa:be:7c:de:db:3c:99:05:
                    71:91:1b:ad:f3:0b:f1:c9:ab:9e:9d:b4:22:88:8e:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:19:6E:C6:F9:9F:14:04:11:78:C3:60:49:0C:1B:7F:D5:BC:47:93
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:bc:0c:96:e2:a5:a3:d4:7e:a8:17:d8:8d:48:02:b7:a6:
         f6:9d:29:ee:78:ac:5f:c5:8f:e0:49:7c:61:2e:ba:ba:cb:ba:
         79:1e:3b:37:fd:e8:b7:2b:44:4c:53:f9:45:aa:c7:58:28:f9:
         72:f8:93:94:99:6f:44:4c:da:12:1b:2f:2a:da:cf:f2:d4:1e:
         a8:da:67:16:8c:6f:51:01:e3:1a:16:a5:2f:a9:6f:2e:e4:0b:
         d6:c2:a3:93:92:00:63:ed:c6:2c:98:f4:06:01:61:d8:70:68:
         e0:da:35:46:30:98:17:3d:f3:c2:54:27:3e:8b:75:19:15:e0:
         c7:9e:70:d5:94:d8:fe:e6:57:4a:bb:1d:ef:ab:21:b3:e0:c5:
         1d:59:a6:42:83:88:61:3a:80:fa:9e:46:e9:c1:8e:99:fb:c0:
         d3:83:d9:fa:9d:f4:02:1a:93:ce:c8:1f:54:81:30:29:f1:cf:
         66:cf:12:43:19:3e:08:19:dc:d9:a3:c9:c0:2b:0d:8a:c8:1d:
         0c:6b:23:e8:cf:e6:9d:e8:c0:f6:a4:6c:c9:5f:d2:41:df:d1:
         65:36:e2:3e:11:d9:af:03:34:16:ff:76:8d:6a:8f:81:00:ea:
         a0:4a:5d:e3:61:8d:74:bb:76:e1:e4:eb:c6:91:5e:7c:ef:8a:
         98:6a:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:54 2025 by rpki-client