Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa
File:                     3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa (raw, json)
Hash identifier:          dP1V1ENcfyOGzD2oZvYqQyPqqUefvO8p22VqKEtiO70=
Subject key identifier:   34:E8:D3:C1:95:96:20:3A:01:77:30:96:AB:90:CF:07:7C:E3:FF:BC
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       63B2685EB7D5B365CCB588A162EA69B5D8D8ABBC
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:29 +0000
ROA not before:           Thu 13 Feb 2025 20:46:29 +0000
ROA not after:            Thu 12 Feb 2026 20:51:29 +0000
asID:                     263059
IP address blocks:        186.232.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:68:5e:b7:d5:b3:65:cc:b5:88:a1:62:ea:69:b5:d8:d8:ab:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:29 2025 GMT
            Not After : Feb 12 20:51:29 2026 GMT
        Subject: CN=34E8D3C19596203A01773096AB90CF077CE3FFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:6c:6b:de:37:67:51:8b:25:57:01:2e:e3:
                    c5:1f:de:b1:64:16:8e:36:a0:df:86:52:3f:f7:3b:
                    81:12:63:cb:8a:58:1c:0c:6c:e8:25:57:03:78:8e:
                    09:51:59:37:5a:0c:57:a1:a1:68:c9:58:50:57:cc:
                    69:38:7c:d5:36:2d:e8:ae:4f:2c:54:20:a2:b5:f4:
                    5c:f4:ae:15:6f:49:44:44:40:e8:41:f9:36:31:b9:
                    cc:72:17:50:de:9d:45:10:b1:9a:1d:bc:62:54:bd:
                    44:62:b0:fe:1c:42:68:b8:5d:76:30:a9:70:0a:45:
                    39:7b:b5:38:12:54:fa:ef:6e:9b:59:8a:df:6f:19:
                    a6:2d:38:a3:5d:27:b6:4e:f1:84:90:9f:3d:75:ad:
                    39:e5:bf:9c:1e:4e:1c:a7:be:96:38:c3:b4:a3:d6:
                    88:d2:4a:01:ed:64:2e:93:d7:4f:cc:0c:62:98:46:
                    94:33:64:94:fc:e6:37:93:27:74:59:22:eb:aa:14:
                    4a:cf:48:6b:10:ad:b3:12:41:65:92:89:66:01:60:
                    14:03:b7:36:c6:b9:e5:34:c3:44:30:00:09:5e:26:
                    a9:fb:4f:34:fa:13:91:ae:e1:de:b2:58:33:96:26:
                    5f:78:ad:0c:a1:e3:4e:d3:46:c1:3a:47:38:90:96:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:D3:C1:95:96:20:3A:01:77:30:96:AB:90:CF:07:7C:E3:FF:BC
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32332d3233203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:0f:f2:02:cf:0a:63:b9:de:2f:f8:22:90:d8:e4:fd:39:
         4b:c4:15:e8:5b:b9:4c:70:9f:b4:76:d0:b7:ce:79:9a:ec:f8:
         dc:e7:c9:16:10:17:99:01:aa:f5:21:84:00:84:72:2d:cd:ad:
         13:5e:a9:9e:eb:31:66:ee:57:b2:bf:a2:3c:ce:dd:8d:35:51:
         f3:1d:a8:31:8f:09:ab:13:d6:9f:5c:7a:3e:64:dd:6b:c6:45:
         05:96:8d:80:f5:e2:81:8a:dd:eb:74:fa:fc:1b:08:ad:d5:7b:
         cb:29:e7:43:f3:94:dc:32:d9:77:2c:53:5b:e3:59:bb:a9:39:
         1c:d1:bd:22:99:6f:b1:af:30:ab:11:1e:96:c9:0f:69:47:cb:
         7c:96:99:e9:03:a3:fe:ba:63:21:99:91:2a:66:ec:ce:84:73:
         de:00:d5:6f:df:b7:78:e8:99:c1:3f:59:5f:4a:58:69:da:00:
         16:c2:b2:6f:55:4e:64:c6:0d:86:21:e5:cb:39:ff:76:f3:e3:
         dd:80:f4:b3:3c:80:4a:6d:c9:c3:80:85:47:b4:6d:2b:3d:02:
         30:cc:f6:4a:5e:0a:16:06:de:64:6a:09:b3:0d:ef:e2:23:66:
         7d:fb:43:14:f9:90:ac:7e:f6:89:78:db:7b:05:94:89:3d:8b:
         73:e1:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:03:42 2025 by rpki-client