Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39372e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e39372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          qQ/p6d8D6nlUpSNlr6MvfEW1GZnPf2GJd+cXHbWwKes=
Subject key identifier:   20:99:06:62:07:3F:C6:02:B1:14:28:78:94:46:29:7E:84:69:CE:4F
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       695ED54CF381C37793F583472AA5B714C0CA7871
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39372e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:40:49 +0000
ROA not before:           Wed 04 Dec 2024 15:35:49 +0000
ROA not after:            Wed 03 Dec 2025 15:40:49 +0000
asID:                     53153
IP address blocks:        186.209.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:d5:4c:f3:81:c3:77:93:f5:83:47:2a:a5:b7:14:c0:ca:78:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:35:49 2024 GMT
            Not After : Dec  3 15:40:49 2025 GMT
        Subject: CN=20990662073FC602B11428789446297E8469CE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:aa:32:ce:28:5f:2f:23:12:23:f1:fa:28:
                    45:20:be:17:27:4a:d3:31:51:e7:ae:10:e0:45:5e:
                    da:59:e7:82:06:6a:da:68:1a:26:81:18:3d:fa:1d:
                    dc:6c:c9:7b:49:8d:36:d0:91:c7:a8:d3:46:e5:90:
                    f2:cf:d4:46:19:3e:5c:ad:61:14:1a:09:20:93:51:
                    11:eb:aa:35:80:f1:fe:07:be:03:a5:4a:23:7b:c1:
                    31:8d:d3:32:86:16:77:8f:d7:92:02:55:64:b4:2a:
                    56:f0:45:2b:ac:e7:17:7d:c4:68:a2:e3:ae:ed:cb:
                    58:13:09:b0:f1:f8:93:a0:23:ea:b3:40:b8:8c:33:
                    94:5b:3d:3e:30:dc:90:b7:56:9d:9e:2a:e3:e8:ab:
                    85:f3:62:89:7b:b9:f4:fc:4b:0d:f9:40:09:25:f1:
                    f5:79:1e:ea:83:fe:78:55:cd:08:24:b9:62:42:c8:
                    2f:d5:c0:16:d6:de:31:67:ff:32:c2:d2:84:14:ad:
                    ea:8c:0f:f6:b6:9f:c5:52:b3:c1:40:ab:c9:fb:a7:
                    cd:a6:70:45:e5:33:96:6d:ae:c6:c7:c1:56:7e:49:
                    1f:83:56:04:13:22:fa:75:73:6e:f7:3b:66:5b:0b:
                    91:ee:14:e1:d6:9c:b0:70:94:c8:a2:38:d3:aa:de:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:99:06:62:07:3F:C6:02:B1:14:28:78:94:46:29:7E:84:69:CE:4F
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:04:7a:15:14:e8:c1:f8:50:a2:d7:51:4b:27:a5:53:11:88:
         d1:0e:7e:46:68:9f:a2:01:e8:e3:36:9f:1d:93:05:71:81:17:
         2e:7a:e6:e4:80:5a:7c:84:27:67:57:1a:d3:b8:02:f1:cf:49:
         a4:8c:2d:6b:5b:e7:48:7b:3a:50:e4:a6:6a:52:04:3d:0c:11:
         60:f1:21:a4:bd:e3:a3:d6:65:67:9d:e2:ee:da:75:33:17:f2:
         8a:6e:b4:c9:19:b0:41:ca:43:66:31:ce:16:fd:05:c5:bb:f5:
         48:58:6f:5a:79:53:58:30:e1:9e:4c:3a:63:59:a6:ee:b3:99:
         34:e9:75:2c:3d:09:9a:f2:b5:cd:92:4b:43:ca:31:56:6c:1d:
         06:b0:e4:e7:c2:29:b5:b2:dd:d4:86:bb:98:9c:e4:7c:97:c1:
         c0:f9:ea:35:fd:5f:56:d7:77:90:4d:09:9f:eb:d4:6c:b4:fa:
         47:7b:b6:a0:63:4f:51:ab:73:7b:77:10:f4:00:db:93:da:89:
         48:6c:bd:f0:56:65:cc:29:a8:2c:12:58:23:ef:69:48:b8:19:
         cb:fe:ac:47:5f:96:82:20:7a:b0:d9:c2:9c:f7:b9:0e:78:fb:
         3f:eb:41:6f:4b:1e:47:d5:26:15:1f:da:7e:19:34:0c:1b:cb:
         14:e0:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:33 2025 by rpki-client