Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          FV4+sTsK8L+Wc+1FlIhyi3Rh3VhzYSRMv4Yf70Ww3Y0=
Subject key identifier:   64:D0:FA:01:DA:CD:A0:16:AF:EA:6A:B5:1F:E8:0E:7F:E2:FB:2C:3C
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       5974472CC53C1A67B153FFFA91A16F6038A12C51
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:45:07 +0000
ROA not before:           Sat 26 Apr 2025 11:40:07 +0000
ROA not after:            Sat 25 Apr 2026 11:45:07 +0000
asID:                     262708
IP address blocks:        186.193.41.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 04:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:74:47:2c:c5:3c:1a:67:b1:53:ff:fa:91:a1:6f:60:38:a1:2c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:40:07 2025 GMT
            Not After : Apr 25 11:45:07 2026 GMT
        Subject: CN=64D0FA01DACDA016AFEA6AB51FE80E7FE2FB2C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:a8:e1:2f:7a:f1:0a:f1:9c:c7:15:c7:80:
                    02:24:e3:4e:48:5f:b0:4d:66:52:02:20:bf:d1:23:
                    e9:ac:34:80:a7:5a:12:39:0d:d9:78:6f:75:2a:03:
                    c2:d7:c8:59:23:8c:be:14:01:6d:3d:a8:4e:bb:2e:
                    a2:8b:56:56:14:e7:e3:f0:24:94:6b:a2:bd:49:83:
                    66:81:5c:df:5c:ee:81:ef:93:72:fc:84:c9:07:90:
                    34:dc:d5:be:54:f9:e8:d6:af:78:6c:a3:24:c0:71:
                    4b:ed:ba:ab:93:c0:36:8e:92:ba:4f:69:41:fc:e9:
                    14:da:99:8a:38:53:a0:40:3a:58:a6:05:3b:22:fa:
                    72:a7:eb:11:90:4d:05:21:98:04:3d:ee:36:73:b5:
                    0d:d6:c5:95:c3:a7:fa:20:63:3a:d8:fd:5e:94:b5:
                    ab:65:3c:36:2d:dd:21:da:56:76:0a:43:a0:7a:62:
                    9b:c8:2a:53:3d:89:b7:25:69:6c:95:26:d8:49:49:
                    c5:90:ff:93:de:f6:97:91:1f:e7:7c:26:98:43:3b:
                    f0:b0:da:8c:39:0d:9c:55:a8:5e:4f:13:8e:c4:4a:
                    bc:a3:1d:7d:3b:e6:a2:47:13:e1:32:b7:90:3a:bf:
                    58:98:57:06:3b:5b:e8:ca:d3:da:ba:a1:dd:8b:48:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:FA:01:DA:CD:A0:16:AF:EA:6A:B5:1F:E8:0E:7F:E2:FB:2C:3C
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:66:d0:73:ab:28:3a:4b:b7:91:64:34:7b:d4:c8:65:33:be:
         91:62:62:10:c1:90:8f:a0:2e:42:d9:7a:76:bf:8d:ad:85:e0:
         26:19:bd:10:75:42:18:e8:f6:10:fa:e4:be:ec:e0:f1:e7:0b:
         0b:cc:a2:84:21:3d:95:a9:cb:c7:58:b6:16:60:31:08:85:76:
         94:fa:14:a7:af:1f:5a:bd:30:ec:5e:6b:9e:c8:6a:31:63:67:
         6e:1f:7d:ce:5b:de:4d:7e:2f:f8:6b:ad:52:e7:47:a4:52:a9:
         67:4a:45:69:86:42:5e:82:c9:75:91:7e:86:fc:a8:70:73:c1:
         9a:a7:03:02:54:5a:d2:08:09:ca:a1:a9:13:ff:4b:ae:eb:d4:
         10:db:2d:79:c2:30:2e:ed:f1:47:00:16:81:26:c0:37:01:7d:
         19:0d:2a:96:26:0d:76:66:38:26:42:22:47:4d:14:93:e0:54:
         31:6d:4d:a6:e4:6a:16:fb:4e:4c:51:6d:c3:8c:d1:6b:d4:57:
         63:59:c0:3a:37:81:ed:70:9e:d4:6c:4e:14:4d:3f:94:70:63:
         73:02:cc:2b:8b:c7:3e:83:97:76:bd:91:cc:92:f3:c0:5c:de:
         88:ad:44:6b:50:3b:6e:09:27:d1:82:ad:d3:dc:4c:5b:6d:fe:
         c8:14:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:21:52 2025 by rpki-client