Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34352e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34352e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          9r6R0Fr2ykbxZMGi+dAZ+JyxM0ZhxriqBBf7b5CHJL8=
Subject key identifier:   21:32:59:91:11:9F:F3:CB:CC:81:87:86:6F:C8:9C:10:67:88:CC:E6
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       09BC5E34F88BC9C3290B1A2F3836FA084C7CF961
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34352e302f32342d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:45:54 +0000
ROA not before:           Sat 26 Apr 2025 11:40:54 +0000
ROA not after:            Sat 25 Apr 2026 11:45:54 +0000
asID:                     262708
IP address blocks:        186.193.45.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 06:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bc:5e:34:f8:8b:c9:c3:29:0b:1a:2f:38:36:fa:08:4c:7c:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:40:54 2025 GMT
            Not After : Apr 25 11:45:54 2026 GMT
        Subject: CN=21325991119FF3CBCC8187866FC89C106788CCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:52:75:b4:15:19:e8:77:f0:b7:c3:8e:42:
                    1f:a7:57:7b:b2:21:6c:ca:30:84:22:30:9d:24:78:
                    94:91:b0:b2:59:a3:53:f8:84:89:7f:2d:31:cf:fb:
                    8d:cd:31:66:21:e3:5b:26:03:94:d3:dc:02:28:55:
                    32:28:3f:ba:5d:0d:91:33:50:d0:2a:73:d9:3a:d8:
                    95:54:25:14:0f:c2:e2:b2:83:54:56:04:e3:fa:dd:
                    e6:58:a0:ce:34:c5:40:71:11:b7:80:8e:5e:06:09:
                    0d:dc:a2:9e:16:64:13:a9:26:17:2f:02:5e:de:aa:
                    4e:2c:06:1d:9e:4b:8b:45:e5:14:92:f6:be:d8:d8:
                    14:f6:0b:8e:c6:71:fb:d5:16:82:94:29:56:67:89:
                    39:08:8e:c9:c7:de:a5:94:a9:4d:e5:41:71:54:dc:
                    f0:ed:a2:c2:6f:a4:65:39:f3:54:0b:64:98:d2:c9:
                    7f:e0:fc:b5:f7:c0:d3:81:57:c3:6b:ef:ed:bb:05:
                    eb:a8:49:b4:64:22:72:e5:32:05:24:23:30:8d:a9:
                    1f:d3:24:56:8b:df:d4:cc:d9:3f:1b:70:2b:a8:d0:
                    7d:09:85:15:fe:47:62:c2:02:50:ea:be:d9:fe:1f:
                    d4:05:f1:63:ee:78:b5:b5:a3:bd:c4:68:73:57:a9:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:32:59:91:11:9F:F3:CB:CC:81:87:86:6F:C8:9C:10:67:88:CC:E6
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34352e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:4c:92:e5:04:e9:5c:81:0a:1c:fc:db:ff:9f:cb:e1:3f:
         f9:a6:23:6b:4f:df:3b:3e:a8:1e:4f:30:27:ff:41:dc:80:52:
         1c:a9:c7:47:e1:ae:8d:94:b0:91:fe:8b:9f:f9:7a:19:43:3b:
         5d:41:9c:9f:74:74:28:2d:3c:69:07:ab:67:2b:db:f7:2b:f5:
         4e:8e:18:16:d0:31:22:bb:73:6e:25:22:1e:fe:87:5b:10:fa:
         c6:ef:31:b2:f0:dc:70:ed:c2:dc:d0:f6:6b:e6:83:dc:bc:1b:
         62:b4:55:b9:89:2b:6c:8e:d8:ec:0a:45:2e:39:d8:be:6e:51:
         4a:9e:45:11:29:99:2e:3b:d8:ff:87:c3:69:4f:55:de:08:2f:
         92:ec:b4:b2:86:e4:16:1a:61:4c:c0:9c:51:08:4f:58:49:f1:
         df:e2:8d:59:4d:e1:db:2a:40:69:db:28:ae:64:cf:56:56:6d:
         14:92:17:c3:b5:70:40:de:03:8f:50:d5:c6:fe:a3:9c:23:a8:
         ca:61:1d:ef:73:40:9f:5e:df:44:7a:79:26:65:89:e8:6f:43:
         71:11:97:9c:61:5a:7a:ff:f6:05:73:93:fa:74:e3:a9:b7:f9:
         f8:8e:fb:80:f9:5e:99:8d:fa:47:2f:2b:5f:6f:45:2d:db:36:
         af:ab:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:07:03 2025 by rpki-client