Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=
Subject key identifier:   99:F8:5D:01:6E:37:3A:CA:55:F4:84:49:24:5B:77:94:F9:14:F5:5B
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       409975CDB7B658EB23ACAC7AF951113DD9062256
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 16 Sep 2024 19:22:07 +0000
ROA not before:           Mon 16 Sep 2024 19:17:07 +0000
ROA not after:            Mon 15 Sep 2025 19:22:07 +0000
asID:                     53218
IP address blocks:        186.250.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:99:75:cd:b7:b6:58:eb:23:ac:ac:7a:f9:51:11:3d:d9:06:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Sep 16 19:17:07 2024 GMT
            Not After : Sep 15 19:22:07 2025 GMT
        Subject: CN=99F85D016E373ACA55F48449245B7794F914F55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:b0:ba:6a:bb:a2:a1:6b:3c:77:53:42:75:
                    bf:e2:20:69:97:c0:89:96:0e:06:89:cf:70:3e:8f:
                    aa:44:1a:46:f0:f9:9b:42:66:05:ba:35:27:60:f7:
                    00:98:2a:fa:00:97:54:3c:66:03:53:15:e0:ca:bd:
                    b5:63:f7:df:45:4c:54:1c:40:45:81:7e:8a:f3:b4:
                    81:54:26:e4:1e:ff:41:6d:35:8b:be:f8:3c:f4:87:
                    8b:01:29:41:20:33:d4:89:55:a5:4c:af:7d:e7:3d:
                    02:99:04:6f:3c:65:07:99:52:af:a5:a2:bf:95:cc:
                    3d:d9:63:6f:16:23:19:49:f2:ce:37:a8:a6:59:35:
                    0f:79:24:6e:b7:6c:4d:f1:b3:be:71:8f:6d:8e:a8:
                    21:28:38:84:5f:ed:a6:b8:74:06:71:46:fb:f8:ca:
                    85:9b:43:01:a0:03:13:dd:63:4e:fe:03:d0:e6:ac:
                    a5:64:a9:61:93:a1:de:ff:67:7c:7f:fc:ce:7c:41:
                    07:a5:66:6c:1d:7e:06:ec:f6:d3:21:0b:6b:db:33:
                    b2:f8:5e:48:0f:b8:f4:34:b1:2b:1b:4b:ab:1c:85:
                    d7:eb:67:2c:d2:35:f7:1d:73:24:6f:26:3c:f0:a3:
                    c6:4d:5e:cb:f7:6a:ef:76:cc:56:04:e2:56:e3:ff:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F8:5D:01:6E:37:3A:CA:55:F4:84:49:24:5B:77:94:F9:14:F5:5B
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:2b:d7:f0:28:64:84:21:10:ee:a0:b8:8e:6f:44:21:3d:
         7d:b2:c9:d6:c5:60:83:7c:99:4d:a5:f6:8c:ae:6e:ac:28:bd:
         d6:12:1c:33:5f:6c:54:68:e9:2f:18:85:5d:62:d5:13:68:4e:
         a4:78:bb:e6:a9:a5:1f:14:0f:0a:cd:2b:e1:bd:a6:45:7d:bd:
         60:06:2a:41:bc:63:a4:09:5b:fb:79:d4:6e:b4:87:a4:6d:87:
         5e:a9:66:db:08:e7:46:91:42:7c:87:a0:27:10:9e:ed:47:89:
         e1:ff:bc:db:6d:41:3e:b0:ab:5a:57:72:c5:9e:25:ef:d4:41:
         a9:18:f4:e7:e1:fa:ca:4d:1c:4b:2e:06:fb:09:ad:67:c2:18:
         55:60:25:97:df:9b:40:45:06:16:70:81:8b:8d:9d:76:1a:92:
         03:de:fc:87:bc:c9:61:0a:73:40:11:2c:66:81:c6:62:d1:a6:
         e9:7a:77:64:dd:43:2c:40:3c:69:58:ca:bd:65:e4:10:d4:07:
         2a:41:f7:bc:f8:57:af:e3:ae:02:09:5d:56:84:80:46:c2:ec:
         62:99:2e:d0:9d:d0:ca:2f:9f:2e:cd:4d:69:0d:63:73:89:5d:
         80:23:a6:3d:a3:d4:65:40:c9:e0:45:01:af:50:15:5c:78:e1:
         dc:3f:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:22 2025 by rpki-client