Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34322e302f32332d3332203d3e20323730373235.roa
File:                     3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (raw, json)
Hash identifier:          86mbNBoxrsA5PU/6bdXPR6HwbxrKjF+4v1Ng/ngi+u8=
Subject key identifier:   8A:23:4F:35:9F:D4:6E:15:1B:7E:FE:C4:8D:98:16:4E:3A:CA:89:30
Certificate issuer:       /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial:       6C0ED4CDAF0AD90A314E8A369C3CFD8D0D04AD51
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34322e302f32332d3332203d3e20323730373235.roa
Signing time:             Wed 28 May 2025 13:52:14 +0000
ROA not before:           Wed 28 May 2025 13:47:14 +0000
ROA not after:            Wed 27 May 2026 13:52:14 +0000
asID:                     270725
IP address blocks:        189.51.42.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
                          rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 02:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0e:d4:cd:af:0a:d9:0a:31:4e:8a:36:9c:3c:fd:8d:0d:04:ad:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
        Validity
            Not Before: May 28 13:47:14 2025 GMT
            Not After : May 27 13:52:14 2026 GMT
        Subject: CN=8A234F359FD46E151B7EFEC48D98164E3ACA8930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:3a:a0:0e:15:d9:f1:0e:e8:49:de:a1:05:
                    c1:73:b2:f5:f2:f8:dc:f6:0a:da:80:c9:2d:d1:7f:
                    36:5f:9a:f8:24:86:ea:6b:13:8d:f3:25:d2:10:4a:
                    ed:24:07:26:f0:81:91:f1:be:c0:1a:2e:c8:df:45:
                    8a:6b:16:2e:57:59:61:3d:39:cf:22:74:df:b3:c4:
                    d8:54:ea:e3:be:fb:6e:e5:83:c1:17:e9:d3:d6:ad:
                    27:9f:d2:83:be:c5:c5:da:a9:00:64:5d:7e:dd:c5:
                    31:4c:56:a7:63:23:68:48:d9:33:0f:1e:95:ea:b8:
                    98:fe:3c:93:a6:8a:2a:e5:98:ee:4a:8c:21:a2:02:
                    f2:f6:56:9c:5f:21:a6:76:3e:fc:57:a8:0e:a1:af:
                    74:78:bc:29:f5:e5:8d:7e:f6:22:18:ac:35:ba:89:
                    63:27:31:7c:6c:d4:8e:cc:6b:eb:f8:cc:ba:fd:59:
                    26:14:8c:2a:6a:01:db:f4:05:f6:1b:de:72:d7:17:
                    44:7c:96:94:d8:0d:d9:5d:74:3e:70:d1:98:a2:8d:
                    c3:1e:90:f3:bc:e8:fe:06:b0:aa:7b:ef:e2:75:fd:
                    33:6b:0a:1e:dd:a3:fa:7e:05:b6:61:e4:6e:a8:96:
                    1d:06:c9:e6:3b:90:6c:b8:fc:b5:ca:4c:87:69:ea:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:4F:35:9F:D4:6E:15:1B:7E:FE:C4:8D:98:16:4E:3A:CA:89:30
            X509v3 Authority Key Identifier:
                keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34322e302f32332d3332203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:7a:c5:92:ad:b3:4f:ba:4a:b8:ef:cb:b3:31:cd:b0:c7:
         05:ae:1d:49:fd:fd:31:16:03:cb:e2:db:84:87:7f:86:bb:6c:
         bc:4f:3a:04:e6:f8:a7:a4:ef:d7:f8:fc:50:4b:de:4b:dd:b2:
         90:be:06:95:f8:ed:3f:e5:10:4a:19:ff:43:77:18:87:b7:e3:
         72:54:45:4b:cb:d0:99:64:f4:67:e5:67:d0:c1:f1:b2:53:76:
         8f:40:b3:52:fa:1e:62:a8:c4:f1:0f:16:bf:8e:1b:5c:86:d3:
         cf:98:0a:48:79:e9:64:41:31:a9:28:44:ab:a8:be:93:4c:7f:
         ef:66:bd:f0:50:54:b6:c7:71:58:84:d1:f7:9c:8d:ee:ed:f6:
         83:ee:c3:ff:85:6e:ba:55:6d:98:f6:12:4c:ec:85:9f:a6:fa:
         20:cc:64:14:bc:c3:f6:1c:35:5e:9e:b0:c2:89:32:e6:21:cc:
         64:20:b9:07:71:11:ba:ff:af:63:4c:c8:e5:be:02:e5:cb:44:
         a7:63:88:71:0b:4d:cb:d1:70:9a:58:ea:3d:56:1e:03:10:6b:
         f5:47:bc:5f:30:ed:59:2e:f7:2f:2f:3d:e0:2d:7c:89:3a:a2:
         06:de:ed:9b:81:4e:b7:43:82:14:df:64:70:9d:6a:4e:80:69:
         1f:a7:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:01 2025 by rpki-client