Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          L7vX0GIbf8NYMJY/zzpkLzOvTo0JGzXIluYWp320yLo=
Subject key identifier:   DE:71:73:41:30:CE:88:5B:6C:FB:E9:6A:38:E5:6C:51:38:0E:70:96
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       210989E76DC2BD8B5636A2C35F2F62E7BF7C4F59
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32342d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:43:08 +0000
ROA not before:           Sat 26 Apr 2025 11:38:08 +0000
ROA not after:            Sat 25 Apr 2026 11:43:08 +0000
asID:                     262708
IP address blocks:        186.193.32.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 05:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:09:89:e7:6d:c2:bd:8b:56:36:a2:c3:5f:2f:62:e7:bf:7c:4f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:38:08 2025 GMT
            Not After : Apr 25 11:43:08 2026 GMT
        Subject: CN=DE71734130CE885B6CFBE96A38E56C51380E7096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:8a:2f:32:47:28:ba:a8:31:c8:eb:93:e8:
                    31:da:fa:a1:cd:47:3c:d7:70:a1:f4:d9:59:8b:44:
                    7b:57:3b:69:6b:04:98:bc:74:fa:f8:78:dc:11:fa:
                    53:0d:a3:0f:b1:91:41:b9:de:05:ba:7d:07:84:1d:
                    71:bc:48:f8:70:29:14:d0:61:a5:54:ed:f5:1b:05:
                    8f:01:21:48:25:b9:11:09:25:84:03:90:45:88:d3:
                    8c:00:74:02:0c:19:8c:b2:3c:5a:b0:13:5e:d6:1d:
                    4a:61:19:7f:3b:6b:73:a6:16:33:79:43:ff:47:26:
                    6b:8c:8d:11:9e:61:76:c1:74:aa:be:e7:ac:17:80:
                    4c:86:25:fb:20:3f:a7:2a:ca:4c:c4:62:99:7a:c1:
                    38:29:78:6b:fd:3e:25:6c:25:85:18:8f:d3:94:3d:
                    6b:cc:06:f4:3e:83:b6:e3:1b:f3:d9:ac:3d:08:1d:
                    cf:5b:23:2d:ab:f9:12:e1:c4:eb:d6:c3:f8:6b:c0:
                    65:c9:fa:77:2d:27:62:67:f9:ee:8f:ea:31:67:b6:
                    8a:85:f5:5f:b4:48:11:d4:a0:49:c5:49:09:d2:c9:
                    b1:48:ea:b0:61:2f:99:5a:90:f2:fa:ad:18:60:6e:
                    fe:18:d6:04:73:22:7c:e9:a2:f3:b4:fe:69:37:38:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:73:41:30:CE:88:5B:6C:FB:E9:6A:38:E5:6C:51:38:0E:70:96
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:71:fb:f5:40:bc:3d:d9:ad:07:66:5d:4b:69:3b:50:1b:dd:
         b6:64:fc:3d:80:9c:47:b7:51:83:0c:ae:25:31:ca:e2:b5:79:
         fa:1f:ae:7c:03:b0:4d:f2:30:fc:9a:01:5a:35:57:92:80:73:
         1a:e1:2b:cd:f2:00:4e:48:98:98:f3:58:57:00:1a:bd:48:5c:
         c5:b4:5f:12:fd:e4:ea:e1:38:86:3d:f4:b9:a9:95:01:be:be:
         ff:53:e3:f6:4d:48:ff:43:ba:a8:ec:2a:88:16:1d:15:bb:2e:
         64:3d:c2:1a:83:59:60:2b:7b:9e:f6:f2:82:4b:fd:e9:0d:22:
         b9:50:7f:3b:92:55:bd:36:01:55:7e:66:d7:96:17:8c:83:b3:
         eb:ce:1d:0c:77:59:ff:43:c5:ca:43:6e:42:dc:0e:83:60:5d:
         8b:a9:82:4c:d3:0f:a9:1b:f2:ea:8b:c1:94:5a:48:45:f4:ef:
         5f:81:75:11:40:13:b9:bf:01:76:f3:a4:c9:c2:a6:8c:68:23:
         b0:f6:74:41:38:56:f3:44:c7:5f:77:c2:df:d1:89:4a:33:4e:
         06:49:51:f3:53:19:71:26:57:1d:83:35:b6:fa:3a:91:81:96:
         4d:1f:90:c4:5a:23:b4:2e:b2:9b:c1:e0:37:1b:de:6d:6d:43:
         fa:e8:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:20:07 2025 by rpki-client