Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa
File:                     3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (raw, json)
Hash identifier:          nA/OvwBKOsuVB7obdUjchPl+jWcy869HFASYU6GGRpI=
Subject key identifier:   6F:C8:83:C0:E3:DF:9E:B0:A0:E9:13:24:B4:6F:E9:50:1A:ED:74:17
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       39A682B28A3BA6B95FBD2AE75770D7021BE7E429
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61888
IP address blocks:        186.235.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:82:b2:8a:3b:a6:b9:5f:bd:2a:e7:57:70:d7:02:1b:e7:e4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6FC883C0E3DF9EB0A0E91324B46FE9501AED7417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:13:1c:e1:fd:cb:b9:8b:46:ac:9e:d7:f8:7e:
                    2b:6f:3d:f9:69:25:5c:8c:9a:fb:99:40:3b:e2:b2:
                    38:85:0b:82:ee:0f:72:bd:01:fd:ae:e9:1f:09:fc:
                    81:b8:ba:88:09:ea:7b:22:c3:3f:e8:c4:85:13:d9:
                    03:7e:f5:b2:fc:bd:ef:f4:30:db:c9:81:b0:4f:88:
                    5a:72:62:80:54:85:c6:6c:31:65:f8:e3:29:42:ac:
                    94:a9:11:56:31:c7:0a:38:ed:49:e8:fc:ef:69:40:
                    f4:9b:74:24:bb:d5:94:00:83:c5:72:53:62:4b:82:
                    ff:48:21:be:e1:16:67:94:47:6d:d5:25:62:2a:f0:
                    29:8d:ec:27:5f:18:a7:e1:8b:93:27:65:c8:9b:02:
                    0d:5b:09:74:33:18:96:34:0f:c2:e7:73:c1:70:00:
                    eb:4c:65:00:47:6e:0e:ce:02:0b:30:ad:7c:27:7e:
                    cb:9e:0e:cd:cb:c4:73:9b:33:5a:20:25:3f:f6:88:
                    fd:14:11:1f:df:2f:e9:d8:c1:d8:65:1b:58:69:fe:
                    b1:7e:de:27:33:fb:e9:1e:3a:5a:1c:0a:18:eb:44:
                    66:8a:4d:e6:08:9b:77:64:fd:84:c7:e8:06:d8:df:
                    75:38:e6:46:13:09:09:5e:90:a8:44:6c:d2:cc:70:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:83:C0:E3:DF:9E:B0:A0:E9:13:24:B4:6F:E9:50:1A:ED:74:17
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:fd:61:cf:f0:ce:a6:1d:77:b9:0a:89:ab:04:a3:37:5b:a9:
         71:ec:83:b8:f8:85:8a:70:08:44:d6:ff:f1:22:31:53:a5:d0:
         07:f8:62:45:62:87:ee:c8:ef:90:c0:28:b4:63:e9:d1:ff:88:
         01:ed:bc:c2:6f:d7:c0:a2:13:0f:20:a5:c3:f1:14:51:f4:29:
         9c:0d:19:9b:d5:2e:58:40:28:d2:e7:13:eb:1f:47:83:7b:16:
         0c:39:bb:f7:23:c0:a0:20:ae:fe:90:b4:99:45:f4:32:fd:9e:
         f9:49:be:02:79:69:05:ab:a6:7a:64:e7:fd:6c:6c:61:71:75:
         57:bc:a2:71:c7:4f:66:96:28:05:ba:93:b9:2e:c2:b9:06:6b:
         ff:cc:92:5a:8e:be:f5:0d:60:3c:f7:8f:53:76:8f:15:b8:59:
         0b:b0:3c:28:1b:78:5c:1c:30:6b:6d:dd:de:73:91:f5:ac:49:
         07:12:87:7e:dd:43:29:53:7a:42:1e:97:62:80:65:a7:d1:12:
         d6:b3:5d:6c:aa:07:48:6c:04:51:68:44:01:c3:f4:c0:68:12:
         63:84:6b:ae:52:7f:99:3b:3c:bc:0d:cc:89:99:2f:66:56:12:
         40:7a:98:3a:eb:46:49:ac:4c:1e:ac:7a:6d:74:da:cb:b8:8c:
         45:06:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:07:09 2025 by rpki-client