Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa
File:                     3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          aayLUxa+4PtSzKbXdlcEV5j5+uegyNKpZJNgf1xFsc4=
Subject key identifier:   C3:B6:D5:92:31:48:CB:97:4E:AD:A3:52:81:84:11:BE:DB:66:92:7B
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       0735F7B6711434CA0BCBE32864245FB9468254BE
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa
Signing time:             Thu 06 Mar 2025 17:11:10 +0000
ROA not before:           Thu 06 Mar 2025 17:06:10 +0000
ROA not after:            Thu 05 Mar 2026 17:11:10 +0000
asID:                     262772
IP address blocks:        186.233.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 16:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:f7:b6:71:14:34:ca:0b:cb:e3:28:64:24:5f:b9:46:82:54:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Mar  6 17:06:10 2025 GMT
            Not After : Mar  5 17:11:10 2026 GMT
        Subject: CN=C3B6D5923148CB974EADA352818411BEDB66927B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:c7:93:93:11:74:2e:49:5e:6f:c1:95:43:
                    e2:72:62:c5:f3:e7:64:95:9c:4d:4d:78:26:4c:39:
                    c9:ba:3b:cb:23:1f:03:8e:2c:6d:97:fb:91:f3:75:
                    9c:4b:d8:1f:0e:2a:03:78:31:79:b0:6f:5b:ba:57:
                    8f:53:80:ac:50:83:4a:8a:e8:e0:9b:7d:78:5f:a3:
                    fc:e7:4d:eb:c1:ff:d5:e6:a2:0a:71:66:82:14:9a:
                    3a:72:e9:4b:97:b9:f0:96:45:76:ca:86:8b:7f:62:
                    60:f7:a8:32:61:f3:b5:1e:6c:a0:f6:3a:d1:2e:9e:
                    23:88:06:6a:09:d2:af:4d:83:45:97:3e:03:c7:82:
                    c4:df:be:f8:a2:2b:57:a8:3f:23:7d:29:ec:26:b2:
                    90:39:ec:29:bd:d5:e7:64:7f:5b:5c:c6:8a:3e:0c:
                    7b:4b:47:d5:c9:f8:1e:09:71:49:98:98:89:40:5e:
                    10:8e:5f:d5:62:f4:df:7c:c8:84:df:c2:bc:0e:30:
                    84:a8:69:fd:27:eb:a8:34:bb:61:88:73:2c:38:0a:
                    75:3e:5b:28:8e:03:78:0a:bc:37:40:22:26:02:f5:
                    92:3b:03:ae:96:5b:70:1a:8d:23:8a:b0:56:53:17:
                    85:57:87:c3:24:e4:0e:04:bf:9e:bd:be:c9:8a:77:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B6:D5:92:31:48:CB:97:4E:AD:A3:52:81:84:11:BE:DB:66:92:7B
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:53:35:e2:56:e2:93:b1:1d:06:6c:2b:6b:8c:f2:1d:4b:87:
         fe:d9:9b:05:a1:90:e8:06:03:0e:7c:9e:3e:a9:e4:d4:e1:d4:
         28:3c:36:f7:b2:68:85:c4:3e:76:ec:ec:75:ba:b3:6f:9b:be:
         d8:65:82:7f:3a:e8:c1:7f:23:6e:35:30:5d:59:ad:35:6d:1b:
         50:d1:2f:29:a4:98:31:95:43:e3:84:29:97:cc:b0:77:71:a0:
         d8:40:d3:9a:d7:f0:55:32:e8:45:16:af:08:44:63:9c:aa:53:
         a3:13:6a:21:b6:3f:7d:bb:c6:a3:4d:ca:46:9d:fc:46:ef:ef:
         7c:ec:c8:1b:b2:8f:22:7a:f2:81:a8:fc:d4:6d:44:07:ec:86:
         34:8a:60:36:25:3b:9e:e0:6d:9d:48:74:dd:08:ba:db:a3:6f:
         81:45:9b:30:f0:9d:f5:56:24:4b:7e:c3:29:51:d6:ad:98:9c:
         1d:32:0c:36:74:b4:77:03:83:9d:bd:a8:d0:b8:e4:ac:6f:1e:
         ab:31:5a:dc:f0:8d:8a:89:10:f7:cd:f9:55:0b:b1:df:3c:2c:
         08:85:80:a5:24:ff:a5:3d:3e:bc:9a:90:40:14:9b:99:3e:62:
         11:00:d0:fc:04:a8:84:79:c8:67:dc:22:15:59:ac:2f:86:60:
         6b:f4:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:31:55 2025 by rpki-client