Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31362e302f32342d3234203d3e20323632383033.roa
File:                     3138362e3235302e31362e302f32342d3234203d3e20323632383033.roa (raw, json)
Hash identifier:          W1mZ6qPuOJJ6DszLLgz/69TdHkd3oB1xw9idTsOlFW0=
Subject key identifier:   DC:41:F8:77:6F:01:96:F8:45:D4:FA:21:CD:1F:D7:FD:3D:B2:C4:70
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       2F4247896DB285E738668B1BF334162BD1694D57
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31362e302f32342d3234203d3e20323632383033.roa
Signing time:             Wed 11 Dec 2024 03:00:44 +0000
ROA not before:           Wed 11 Dec 2024 02:55:44 +0000
ROA not after:            Wed 10 Dec 2025 03:00:44 +0000
asID:                     262803
IP address blocks:        186.250.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl
                          rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:47:89:6d:b2:85:e7:38:66:8b:1b:f3:34:16:2b:d1:69:4d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Dec 11 02:55:44 2024 GMT
            Not After : Dec 10 03:00:44 2025 GMT
        Subject: CN=DC41F8776F0196F845D4FA21CD1FD7FD3DB2C470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:b8:76:e6:5f:a9:80:10:05:14:e1:c5:da:
                    2e:3f:19:a9:7b:da:6e:f4:b4:44:80:45:20:52:e9:
                    11:95:61:36:90:8e:8a:75:6a:33:5e:2a:12:ec:40:
                    e5:0f:8c:2d:6f:ab:7e:19:b5:96:6b:c9:da:61:90:
                    63:6c:8b:68:aa:65:66:9f:e6:0a:33:7f:8a:94:83:
                    35:84:cd:99:4f:3c:24:4d:00:e6:65:dd:4d:96:40:
                    b8:b1:7b:f1:a4:9f:cd:05:6a:c1:36:3c:59:de:09:
                    a4:73:f7:11:a1:aa:c1:a4:b3:93:99:3c:ea:7b:fd:
                    28:aa:0b:69:42:79:d6:a8:e0:2b:c6:d1:1a:0b:3b:
                    66:c1:93:ca:e8:95:cf:dd:4b:5e:91:95:19:cf:d4:
                    e4:dd:87:67:35:92:b3:6f:b1:09:43:ab:f7:3c:6c:
                    95:04:bb:71:51:27:67:04:3f:b4:23:d6:78:e3:e9:
                    1f:28:17:22:37:7c:69:eb:1e:09:8b:12:9c:8b:61:
                    db:29:06:cb:8b:e3:b2:88:df:50:e5:0a:3e:e5:d5:
                    96:1e:7d:67:7f:e8:67:cb:88:67:53:4c:5e:d9:a2:
                    a7:38:41:c0:7e:d5:01:ea:ac:8c:41:55:0c:42:e3:
                    4e:15:63:18:39:81:22:eb:f0:af:b6:34:27:0b:a0:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:F8:77:6F:01:96:F8:45:D4:FA:21:CD:1F:D7:FD:3D:B2:C4:70
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31362e302f32342d3234203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:e3:a5:fb:6f:16:e2:40:c4:56:85:c4:ee:fe:9d:7c:e8:
         e5:b4:a2:40:a8:33:f2:01:4e:9e:af:a1:15:46:e9:2d:e6:f8:
         c7:3f:d2:1a:09:61:ee:d1:7a:e1:a4:68:84:d6:f2:93:12:12:
         4c:8f:23:17:fe:14:5e:0e:ba:7e:e4:39:7e:81:61:b2:af:b4:
         ff:48:e3:6e:ca:67:af:f5:56:c3:23:9b:74:f4:77:64:9e:19:
         5f:be:91:b1:99:93:10:a3:f9:c8:6e:81:ba:9d:8c:60:fa:94:
         6f:e3:c6:a0:18:a3:e9:9c:62:54:29:a4:9c:c4:01:d9:de:5b:
         03:20:72:44:30:4d:b3:07:ad:39:ec:c4:1a:cb:6f:04:a0:1d:
         77:1d:73:4f:a8:ae:d9:bc:b3:d1:7a:37:1e:72:fc:76:31:a3:
         63:61:c4:0b:27:41:b5:92:94:ac:b7:53:19:1a:ac:36:21:e2:
         2e:4c:6f:86:15:0a:b8:35:76:c7:38:cd:01:63:bb:95:e9:4f:
         9d:de:51:f6:94:e4:b5:2e:88:bb:08:b1:99:e1:a6:84:dd:e5:
         00:fb:38:6b:fa:0a:fb:62:11:fc:da:aa:5f:99:0f:49:4c:90:
         40:a7:53:9c:51:00:4e:75:73:62:d2:c9:cd:2a:4d:c5:ae:67:
         1f:12:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:52:58 2025 by rpki-client