Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          zCJ9NcAZgKh2r/gHTI/+9ji8xjgt5SZ/Um8SDcvF4VI=
Subject key identifier:   AE:C7:D6:64:77:76:66:1C:CC:AF:60:D9:A5:D4:C9:78:9B:C0:A8:EB
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       5DE1770099A97ADB3D47800616CD4B41B05E96BD
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa
Signing time:             Thu 06 Mar 2025 17:11:10 +0000
ROA not before:           Thu 06 Mar 2025 17:06:10 +0000
ROA not after:            Thu 05 Mar 2026 17:11:10 +0000
asID:                     262772
IP address blocks:        186.232.179.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e1:77:00:99:a9:7a:db:3d:47:80:06:16:cd:4b:41:b0:5e:96:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Mar  6 17:06:10 2025 GMT
            Not After : Mar  5 17:11:10 2026 GMT
        Subject: CN=AEC7D6647776661CCCAF60D9A5D4C9789BC0A8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:a9:1d:14:53:07:78:a2:7f:4b:65:13:bc:
                    95:4a:d4:9c:e6:4b:f6:73:d1:4f:35:f3:a3:f1:81:
                    d9:87:bf:5f:01:75:c6:20:e4:8e:a5:c6:59:f6:76:
                    dc:4c:95:9f:45:e6:18:95:b7:4d:b3:4b:46:e1:01:
                    c2:b2:ae:cc:85:34:01:b8:f5:4b:f0:a7:90:d6:3a:
                    45:e9:85:90:18:c3:74:f8:cd:b4:20:81:91:76:99:
                    7a:42:24:7e:ea:46:93:be:d9:10:a2:00:5e:b7:5e:
                    fd:88:fd:9a:be:97:45:ee:01:b9:ef:a6:93:19:db:
                    18:9e:07:5c:78:3c:95:bd:4a:a4:46:68:20:88:14:
                    c3:83:fd:67:9f:b5:78:d7:30:fe:9b:bb:51:14:ad:
                    10:bd:9b:fd:f1:83:88:32:f3:9e:f9:c0:5e:77:8c:
                    35:68:0c:bf:51:76:f4:05:47:39:b2:52:48:84:91:
                    24:c8:2d:9b:9a:5c:81:f0:d0:86:6e:13:a7:e2:32:
                    90:05:a0:8a:ef:8c:ba:b3:8c:7d:7a:03:c6:4f:af:
                    37:75:66:00:ff:32:01:51:8e:b5:4b:c3:4d:96:33:
                    2a:6f:1b:88:0b:6a:23:2a:19:e1:ad:89:8a:ef:3f:
                    ab:9d:5f:5d:0b:30:53:10:f9:78:77:5c:a0:f1:71:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C7:D6:64:77:76:66:1C:CC:AF:60:D9:A5:D4:C9:78:9B:C0:A8:EB
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:07:45:c4:32:e6:a5:db:10:c5:6a:00:c9:3c:d4:b7:c8:e5:
         e0:4b:39:ae:38:a4:46:09:ad:5e:c7:8c:47:ab:b4:08:b2:eb:
         9e:9b:f8:6b:7a:4c:73:77:f9:61:e9:52:42:28:49:b7:04:b6:
         b3:a0:0f:92:ef:04:64:bf:e4:e6:52:79:f3:a0:83:0b:81:42:
         ac:3b:e6:90:c3:37:63:b7:8c:92:80:5c:20:c4:af:e7:d7:a5:
         73:d9:40:a9:79:b2:60:50:3b:7e:30:1b:94:07:eb:b8:0a:c6:
         46:4f:e5:23:44:ba:77:16:83:45:15:dc:5a:d8:e1:5c:bc:dd:
         ed:4d:e2:ed:29:03:c1:52:ad:21:67:36:21:9f:0b:b5:8b:b0:
         89:12:03:82:39:0f:cd:1b:6a:c1:7e:f8:e0:e0:a3:c5:31:ca:
         1d:ca:e0:81:4a:02:b2:3b:b6:99:a0:ce:70:63:7d:e4:8b:f1:
         16:d7:9f:e0:9c:a1:c0:2c:76:d1:98:e3:eb:d2:c4:28:16:7e:
         1a:71:28:54:1e:3b:58:51:88:43:a7:df:e9:f5:88:72:c0:01:
         1d:db:5d:cd:38:25:f7:cd:c8:24:5e:5a:38:97:16:d6:79:2a:
         50:0d:c7:a4:c9:25:f1:e0:96:85:88:4a:de:2f:eb:32:9c:19:
         ec:61:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:28 2025 by rpki-client