Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa
File:                     3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          eQtF15LjNj6FDZHZkElJh6Yb4+GcGCOJMj782JJ6GaU=
Subject key identifier:   12:5D:93:AE:17:49:FB:EA:DE:A8:68:99:0B:FB:61:65:6C:3D:07:E5
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       2DB5426A5845D187D1A7272D50428C315AD9D6CE
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa
Signing time:             Tue 18 Feb 2025 21:26:51 +0000
ROA not before:           Tue 18 Feb 2025 21:21:51 +0000
ROA not after:            Tue 17 Feb 2026 21:26:51 +0000
asID:                     262769
IP address blocks:        186.232.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 08:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b5:42:6a:58:45:d1:87:d1:a7:27:2d:50:42:8c:31:5a:d9:d6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Feb 18 21:21:51 2025 GMT
            Not After : Feb 17 21:26:51 2026 GMT
        Subject: CN=125D93AE1749FBEADEA868990BFB61656C3D07E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:e8:af:46:01:f9:09:c0:0b:8d:48:2f:69:
                    8f:62:fa:99:6c:75:88:f1:02:b6:d3:9c:df:43:9e:
                    60:58:d4:1c:68:90:1a:4e:76:4f:50:69:7e:76:74:
                    ec:19:3c:3d:e3:d5:78:27:be:54:59:21:1a:8b:00:
                    b0:a8:ce:c0:59:39:6c:05:d8:6d:1b:92:29:2d:68:
                    b8:1f:32:96:d9:fb:96:bf:a2:86:41:16:b6:fc:24:
                    6e:a2:5b:18:9c:d6:9e:69:f5:bc:9d:08:bb:68:ee:
                    e1:ba:ae:d0:4d:b4:c3:09:97:20:08:a9:4f:58:01:
                    64:79:70:aa:86:db:c9:98:c7:9e:8e:e2:e1:41:07:
                    53:1f:b8:2d:d4:90:2c:1f:c7:86:4e:3b:0e:c4:58:
                    fc:eb:8f:d4:92:5a:06:dd:5d:a9:3d:45:4a:1d:1a:
                    a4:f5:db:e5:67:ae:14:c7:95:02:ff:7f:25:56:55:
                    37:43:9b:8e:db:8f:41:79:bc:9c:fb:81:26:57:c5:
                    07:ba:f3:64:66:74:5c:6d:7b:7c:11:a9:a7:bd:bd:
                    f2:a6:56:d1:5f:9d:e9:c0:44:31:36:4b:51:f8:fb:
                    d9:f5:22:3c:1c:68:23:cd:af:68:be:48:a4:3d:f5:
                    05:0e:71:45:0c:44:34:9f:88:bd:c6:a8:f1:0b:dc:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5D:93:AE:17:49:FB:EA:DE:A8:68:99:0B:FB:61:65:6C:3D:07:E5
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:01:b9:1c:1f:01:1a:d0:ba:91:e8:a3:a9:ea:d5:94:33:
         09:2b:d1:32:59:ac:51:6a:a7:d0:33:a2:83:8d:65:98:72:60:
         19:a3:d5:b5:da:0d:9b:a6:cc:9b:14:c0:ad:1e:3c:6b:12:1e:
         78:64:08:96:ed:30:cf:3b:69:4b:9c:0b:dc:49:f9:89:ce:24:
         5f:e7:40:6c:45:80:8c:7e:90:8a:3b:6b:3c:9e:ab:df:f9:ad:
         33:e2:5f:ed:c5:2c:b1:99:67:29:aa:b6:3d:14:43:00:2b:5c:
         a0:63:17:ea:d9:52:91:91:2b:a8:c0:be:7f:a7:7c:a8:1b:f2:
         08:1e:bd:3c:1c:75:94:b4:58:de:c1:0b:65:25:0c:f8:fd:bb:
         d9:08:a6:9c:6a:12:f3:88:58:ab:79:d4:c3:30:a5:23:61:58:
         1e:81:1e:2d:7c:7a:85:60:92:4b:f4:a4:c7:69:1c:23:6c:36:
         dd:3a:b6:00:1a:a1:08:8c:bf:c0:2b:fe:f7:c6:45:0d:11:e7:
         cc:30:c5:d1:fa:da:bf:6e:78:d2:32:b3:69:69:b9:8b:29:22:
         5f:a2:cc:0d:51:68:d3:33:c1:7a:40:7e:3e:4e:f7:07:b1:40:
         b3:d6:05:ad:78:53:e1:39:41:88:20:f3:27:19:bc:61:1a:d2:
         fd:3a:22:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:24 2025 by rpki-client