Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e32302e302f32322d3234203d3e20323632383033.roa
File:                     3138362e3235302e32302e302f32322d3234203d3e20323632383033.roa (raw, json)
Hash identifier:          0XqTUSv7X/dsz37Uh+hSYKL1qJN3lsdwxWqKRISkKsA=
Subject key identifier:   B1:A7:61:79:E0:9B:BE:E3:36:FE:79:26:DC:98:D2:85:FE:7F:0C:B6
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       56146545268C3DB8F3F64D1E3148FF1AD85BADF7
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e32302e302f32322d3234203d3e20323632383033.roa
Signing time:             Wed 11 Dec 2024 03:02:24 +0000
ROA not before:           Wed 11 Dec 2024 02:57:24 +0000
ROA not after:            Wed 10 Dec 2025 03:02:24 +0000
asID:                     262803
IP address blocks:        186.250.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl
                          rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:14:65:45:26:8c:3d:b8:f3:f6:4d:1e:31:48:ff:1a:d8:5b:ad:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Dec 11 02:57:24 2024 GMT
            Not After : Dec 10 03:02:24 2025 GMT
        Subject: CN=B1A76179E09BBEE336FE7926DC98D285FE7F0CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:a1:e8:65:90:f8:7d:6e:6f:ef:80:93:fc:
                    46:97:5a:7d:87:73:eb:38:15:69:a3:33:1e:5c:68:
                    85:05:bb:52:74:fe:9c:0e:cd:ce:a0:5d:25:08:ea:
                    95:de:b3:48:c1:47:81:27:a3:29:04:b8:6b:5c:5a:
                    a8:49:b8:17:44:86:01:49:9c:22:13:d7:d6:bf:a7:
                    c0:d4:7b:c5:a8:e5:0b:86:c6:38:a9:14:e2:a2:de:
                    8c:1e:41:97:0a:c7:3c:d0:17:39:84:3d:9b:62:1a:
                    49:c1:62:b1:6e:c2:94:7c:27:ba:96:fc:8a:a6:9d:
                    32:1b:eb:82:fe:28:76:6b:ed:68:7e:4e:59:cb:6a:
                    75:6f:a6:be:ad:53:22:bd:37:24:a1:b6:04:9f:49:
                    ef:b4:f1:8c:03:cb:63:62:81:9b:d5:61:2a:8c:18:
                    1a:52:8e:39:a3:79:7b:11:dc:4a:31:40:51:24:98:
                    7f:05:58:86:56:0a:c0:49:51:84:72:8f:1a:ef:22:
                    9d:dc:af:d3:01:86:ea:af:96:85:f6:62:16:08:f2:
                    c8:4b:62:6d:88:14:a8:1c:23:60:c7:a7:3b:d2:d0:
                    2b:c3:09:49:75:84:a6:26:0e:5b:2c:20:a9:58:d5:
                    61:1b:58:d6:7e:29:97:1b:b3:ed:d9:93:67:b0:cc:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A7:61:79:E0:9B:BE:E3:36:FE:79:26:DC:98:D2:85:FE:7F:0C:B6
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e32302e302f32322d3234203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:25:7d:3f:25:db:42:4f:e4:ac:41:30:af:8d:93:4d:3a:
         e5:3f:aa:ca:99:67:4d:ce:f2:2c:be:c4:bc:25:c7:5c:f7:ce:
         ec:f3:04:2b:93:91:30:b7:87:9c:e6:50:ef:95:80:df:66:a5:
         df:16:bf:fc:99:24:7e:1e:6f:06:f0:1f:71:e3:36:0d:29:5d:
         da:2b:1c:09:f5:b5:cd:25:87:e2:83:3d:46:96:31:ef:47:84:
         47:66:83:26:de:fe:6a:a0:be:92:2f:b9:b0:86:6d:55:ff:a3:
         43:f2:45:ac:4b:f3:57:be:b4:2b:4a:94:06:d4:59:ee:2e:fb:
         54:9f:9e:01:d3:d4:6a:af:d7:69:58:e5:f1:70:88:30:43:ec:
         a7:cf:99:16:a0:f4:89:a3:bb:c7:bf:ef:0c:59:cd:03:12:2a:
         15:52:69:f0:5f:3f:77:97:c6:93:1a:83:a8:a3:42:72:89:aa:
         9e:e2:21:ea:0d:a2:df:a3:c2:45:8f:b6:e9:7b:48:5e:d2:f0:
         56:08:2f:2c:64:5d:8d:f3:e1:48:ea:d7:ee:ee:3a:e3:7b:bc:
         9a:d5:80:aa:8a:6c:f1:55:fd:93:8f:39:99:18:a7:f0:e4:83:
         ea:93:3c:0f:3e:86:93:93:1e:f8:5b:b9:a3:26:8e:56:9a:c6:
         54:bc:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:52:25 2025 by rpki-client