Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31382e302f32332d3234203d3e20323632383033.roa
File:                     3138362e3235302e31382e302f32332d3234203d3e20323632383033.roa (raw, json)
Hash identifier:          TM5Ze3eOVpVTl+UCi1Qd46Ix8BHOId6ZTjQ0caGln5Q=
Subject key identifier:   FB:28:E2:00:30:5C:32:63:9F:F7:5B:2F:F8:FF:81:FD:EC:B5:74:87
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       6EADE5696EECF3EAAC44CE25D30C86D1D2DA6D4C
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31382e302f32332d3234203d3e20323632383033.roa
Signing time:             Wed 11 Dec 2024 03:01:12 +0000
ROA not before:           Wed 11 Dec 2024 02:56:12 +0000
ROA not after:            Wed 10 Dec 2025 03:01:12 +0000
asID:                     262803
IP address blocks:        186.250.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl
                          rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ad:e5:69:6e:ec:f3:ea:ac:44:ce:25:d3:0c:86:d1:d2:da:6d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Dec 11 02:56:12 2024 GMT
            Not After : Dec 10 03:01:12 2025 GMT
        Subject: CN=FB28E200305C32639FF75B2FF8FF81FDECB57487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:16:f0:6b:67:1a:df:c3:85:6c:7e:1f:dd:
                    9d:f4:e0:80:2b:01:6b:f9:6d:59:70:62:45:d9:10:
                    12:3b:bc:5b:86:79:d3:42:f2:71:4e:bf:aa:f0:20:
                    9e:88:6e:42:59:77:eb:04:e0:91:61:9b:f7:03:cf:
                    05:81:b7:a5:21:c6:97:35:12:cd:8f:fa:eb:07:8c:
                    24:99:d7:89:20:2d:14:27:89:c4:18:bf:b4:80:07:
                    6d:7c:27:af:33:ed:0a:2a:2b:e0:98:6c:72:cb:c2:
                    e4:3a:10:5f:42:3c:32:a6:5a:39:9d:0f:59:3d:11:
                    f5:c2:14:9b:48:ab:3b:80:37:72:31:77:04:23:38:
                    4f:c8:f7:70:d8:33:e9:97:36:f7:17:bb:1d:ad:90:
                    a3:99:c2:02:ae:2c:10:ee:ee:66:6c:f9:41:c9:87:
                    98:6e:cd:8b:f0:8f:fa:8d:f8:cb:f9:d1:2f:58:59:
                    dc:19:98:c7:f1:a4:08:c3:69:5e:33:68:7a:6e:7c:
                    4c:0c:e4:b7:61:2b:46:54:e7:c0:10:c2:28:5d:02:
                    41:44:75:72:1b:30:ae:73:5d:f9:e6:83:43:06:0f:
                    a4:31:5f:ee:88:12:74:2b:d6:1f:57:19:52:2f:c0:
                    6f:f8:b0:74:1b:61:8c:e3:05:f2:54:fc:62:a2:4a:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:28:E2:00:30:5C:32:63:9F:F7:5B:2F:F8:FF:81:FD:EC:B5:74:87
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31382e302f32332d3234203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:f1:4f:ba:20:42:72:4c:ee:b6:bb:52:81:c6:ac:3e:83:
         54:e9:35:44:84:a5:53:83:e6:0b:f8:5e:6c:ce:8d:65:55:3b:
         0b:4e:e2:2f:94:91:ed:81:e4:72:92:da:7a:e8:53:9f:dd:07:
         19:31:45:8f:5b:7b:a8:a4:ae:29:e7:82:48:cc:e8:e6:fb:3f:
         53:0a:3b:ea:78:42:39:d3:44:78:8d:b1:99:26:f1:a2:54:a2:
         d1:b0:e2:35:fc:22:c2:83:ab:9d:99:d7:04:e4:87:60:de:37:
         75:a1:9d:59:b8:8f:fb:69:d6:a4:b5:b0:36:a5:8e:73:e0:19:
         e0:03:85:72:13:c7:d7:08:0e:f6:bf:0a:b1:ca:0e:2f:e5:2b:
         98:3d:57:12:4e:94:fd:f0:1b:3e:15:95:c5:c2:45:a9:38:f3:
         ff:dd:4a:5b:4f:b1:b8:8a:29:df:49:5d:51:52:10:57:a0:d6:
         bd:b4:59:9d:e9:ee:30:c0:61:92:aa:b3:20:0a:dc:9b:61:ef:
         30:c3:b8:ac:19:5c:f3:76:52:46:6f:f4:33:0e:4d:57:44:2a:
         db:cc:ef:cf:2f:02:ef:7b:82:bf:64:ce:05:14:30:f4:2d:ad:
         d6:35:98:7b:14:42:5d:55:6b:ec:86:e5:4c:84:24:4d:a6:78:
         5f:d8:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:58:11 2025 by rpki-client