Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136312e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136312e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          ELHpqo+HAuJPGhyaJcpXu5OpV2AlDW1PalOWn9HnKEQ=
Subject key identifier:   31:74:11:96:22:A0:12:C6:F6:1C:89:06:E4:72:22:70:7F:FD:F7:49
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       2E60DF7EDE2B1B8DB14ADDA99F6D8F71CCE93DB7
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136312e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:25 +0000
ROA not before:           Sat 22 Mar 2025 09:54:25 +0000
ROA not after:            Sat 21 Mar 2026 09:59:25 +0000
asID:                     262784
IP address blocks:        186.235.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:60:df:7e:de:2b:1b:8d:b1:4a:dd:a9:9f:6d:8f:71:cc:e9:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:25 2025 GMT
            Not After : Mar 21 09:59:25 2026 GMT
        Subject: CN=3174119622A012C6F61C8906E47222707FFDF749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:ea:d5:1c:5b:0e:c9:2f:e4:d1:c0:57:86:
                    fa:3c:06:40:b2:0b:49:b4:e4:06:9e:74:cf:8b:c0:
                    a7:fe:40:1d:6b:67:eb:a4:67:6c:77:59:c9:b8:1e:
                    95:49:f9:09:06:0e:fb:05:97:59:ff:6f:f9:f4:d0:
                    5f:03:02:9f:5a:c2:94:95:b1:ee:f7:b0:f8:70:93:
                    3c:fd:4c:47:87:b2:aa:13:84:eb:dc:62:aa:c0:67:
                    f2:97:75:0f:38:1a:24:5f:3e:81:0c:53:56:8e:ab:
                    bb:9b:0e:09:76:71:f1:36:80:ed:1a:e5:ae:7b:fc:
                    f4:4c:fd:57:f6:c3:d6:ac:5d:4f:b6:0b:23:4a:f9:
                    08:1c:de:86:82:8d:9a:41:3e:29:ab:31:b0:06:31:
                    3f:dd:34:76:6f:6f:1a:1e:57:86:ab:c9:96:6a:25:
                    59:ae:7c:f3:76:87:12:ec:dd:39:05:b5:f5:37:e1:
                    58:26:26:42:8f:6f:f7:c8:d5:0c:e5:dd:e5:87:1c:
                    ca:c5:30:61:66:14:36:1f:04:8b:4b:1b:49:ed:6d:
                    48:5a:54:e8:0d:74:17:92:e0:6b:8b:76:6d:af:7a:
                    06:6f:46:3a:2b:25:86:ab:29:98:a9:34:97:ef:5d:
                    08:53:76:e9:ed:26:ba:7d:13:23:5c:73:61:56:29:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:11:96:22:A0:12:C6:F6:1C:89:06:E4:72:22:70:7F:FD:F7:49
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136312e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:11:c6:a9:64:19:e5:2e:12:68:01:cc:6f:95:c3:77:04:
         3b:35:af:0f:6f:79:d6:44:00:61:f9:eb:be:2b:17:be:96:72:
         b4:d4:4e:c1:a2:4d:44:68:5e:81:90:2b:7a:45:48:a5:a7:ad:
         84:19:17:ff:43:a8:a8:6c:e5:18:76:93:88:d8:68:8e:cc:ca:
         2b:ad:fb:54:cf:d7:a1:3a:72:f1:0c:50:a6:42:6d:bf:d9:c7:
         8f:2d:0a:17:4a:cb:0d:b8:55:cb:8a:6d:ac:f3:48:fc:85:4a:
         7f:04:7d:fa:d9:52:e2:e2:7b:e9:ff:5b:7b:61:ee:7c:22:41:
         c5:42:b6:12:15:62:fe:5c:aa:a6:03:27:e1:8d:3c:82:80:d5:
         20:0a:fa:6f:4d:a7:93:be:90:36:b3:06:90:de:aa:e7:e3:de:
         a6:37:04:d1:1b:b4:4b:3b:b4:ac:08:45:a2:c2:fb:d1:69:fb:
         d0:77:ab:08:b2:ca:d8:b4:a4:18:83:68:4d:ea:64:4c:fb:01:
         f7:db:ea:1c:55:46:63:b0:e9:ab:9b:d7:d6:e9:f0:13:8e:07:
         a0:55:74:06:7a:73:ca:98:36:e5:d1:82:de:02:e4:1b:72:aa:
         ce:56:4f:85:39:80:e3:a6:bd:a8:0d:56:a6:98:cc:d6:20:a1:
         8b:ea:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:03:11 2025 by rpki-client