Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          8ydYgL9e6KscwnULqd4grsU0vDzlrlFkxO5IPg+Ccjg=
Subject key identifier:   2F:1E:C8:CB:10:A2:6C:C8:15:AD:2C:8B:C9:3B:7D:27:53:41:49:5B
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       769B4F8014ADFA9E8BAEF8AB6FD05BDB6A8AFE0E
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:25 +0000
ROA not before:           Thu 13 Feb 2025 20:46:25 +0000
ROA not after:            Thu 12 Feb 2026 20:51:25 +0000
asID:                     263059
IP address blocks:        186.232.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9b:4f:80:14:ad:fa:9e:8b:ae:f8:ab:6f:d0:5b:db:6a:8a:fe:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:25 2025 GMT
            Not After : Feb 12 20:51:25 2026 GMT
        Subject: CN=2F1EC8CB10A26CC815AD2C8BC93B7D275341495B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:24:ed:18:6a:4a:0e:a5:ab:3c:e1:ed:5d:
                    e0:ad:a4:f7:3e:cc:dd:7a:e6:0f:24:ab:a9:03:8d:
                    f3:97:19:36:7f:3e:14:ef:60:cc:3b:9b:db:e7:88:
                    07:8c:bf:ab:4d:6c:7d:92:3b:80:6c:13:57:4a:60:
                    a8:e4:f0:59:69:fd:5a:57:44:49:cc:15:68:26:6c:
                    84:7c:e4:a8:a3:89:00:b4:ec:9b:02:76:5c:cd:58:
                    58:bf:b3:05:e1:ef:5e:3d:27:b2:39:37:db:90:b1:
                    60:46:d9:5c:71:82:91:02:6f:34:86:f6:6a:d8:cd:
                    15:46:58:11:0e:59:98:97:80:67:87:16:0e:45:29:
                    4c:37:d5:67:33:01:97:5a:70:85:be:1a:41:fe:f4:
                    a3:d2:18:b9:a9:73:62:3f:8f:e5:3d:05:82:be:13:
                    49:86:e1:f0:6e:f3:85:fd:7b:76:c2:51:89:81:53:
                    32:11:bb:2e:ca:ee:3c:d6:6b:11:66:75:91:e7:58:
                    91:cb:29:db:15:4f:33:66:49:96:47:46:0f:9e:2d:
                    c7:74:35:8a:2c:33:92:41:97:db:6c:11:4a:7b:cc:
                    63:91:f5:7d:1c:26:0d:73:27:f6:ae:3d:62:13:23:
                    bb:e0:9f:19:34:65:90:03:c5:f4:6b:fd:02:b5:29:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:C8:CB:10:A2:6C:C8:15:AD:2C:8B:C9:3B:7D:27:53:41:49:5B
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:37:f8:ce:66:84:9d:f0:ee:95:61:9a:89:ef:7a:09:40:
         ea:16:0e:fd:de:d3:f5:d7:c2:04:18:25:44:51:be:71:c9:eb:
         c3:3c:e8:bb:c5:f7:d6:dd:25:c7:34:eb:25:13:c4:30:46:33:
         c2:6d:5f:a5:bf:ec:b8:ba:ea:d4:2b:55:b8:52:0f:49:f8:05:
         70:4e:10:f7:a9:1a:87:1d:a0:9f:f8:a7:55:13:c2:37:34:e6:
         de:df:5e:86:27:29:11:50:5e:e9:c1:e3:98:1b:0c:7e:cc:ab:
         29:0d:f0:b6:1c:95:45:73:ad:6a:79:7c:35:26:be:02:05:ce:
         f0:d8:98:94:18:0f:be:0b:92:2f:3e:59:24:e5:85:ea:03:d2:
         5b:98:20:0d:57:eb:b2:69:77:80:be:0a:dd:b4:1e:c6:2b:a4:
         4a:77:5d:35:50:2a:07:c5:68:a6:54:ab:db:15:8c:d7:9c:e8:
         11:08:18:d8:4f:d2:a5:59:d7:f8:f5:de:be:25:5b:45:b5:67:
         dd:e8:44:44:bc:05:dc:89:77:ac:f1:2f:95:7d:48:50:6b:95:
         8f:5a:ef:ba:97:cf:64:42:9a:ef:c1:12:11:1f:21:48:2b:19:
         42:b0:01:5e:9e:76:c3:60:24:6e:54:aa:ab:f0:7f:8b:88:59:
         9a:ba:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:10:40 2025 by rpki-client