Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          UfuRvxIg7BaxxOuE1VFUdNEnoUF5v8jmtNS62UvolaE=
Subject key identifier:   2B:86:4A:43:79:FF:AA:75:1D:79:A9:8A:B7:84:51:1D:30:7E:4E:10
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       741003867E4407C233335A75DEB48C9646ACF059
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:33 +0000
ROA not before:           Thu 13 Feb 2025 20:46:33 +0000
ROA not after:            Thu 12 Feb 2026 20:51:33 +0000
asID:                     263059
IP address blocks:        186.232.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:03:86:7e:44:07:c2:33:33:5a:75:de:b4:8c:96:46:ac:f0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:33 2025 GMT
            Not After : Feb 12 20:51:33 2026 GMT
        Subject: CN=2B864A4379FFAA751D79A98AB784511D307E4E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:bf:b6:c8:43:fd:6d:7d:92:55:b2:70:e7:
                    0e:3a:3c:df:69:e0:4d:16:2f:9a:24:a7:f3:c9:3c:
                    45:cc:9e:b0:d5:91:d3:cc:2b:09:f2:76:48:4f:fc:
                    b0:cd:c6:70:d7:55:cf:39:62:d7:80:81:9d:ee:0c:
                    c7:eb:20:45:ee:2d:5a:33:43:f8:fe:6a:f0:56:b2:
                    c2:6c:c7:59:3b:0a:bc:5f:fd:13:b3:21:90:73:0d:
                    01:b2:72:ac:a4:d6:e7:86:4d:79:b1:b9:32:ae:6f:
                    dc:60:aa:f5:a8:5c:76:18:4c:0b:af:cc:d1:ad:d8:
                    b5:ad:c1:54:18:69:60:f7:dd:0d:4e:76:2f:51:b0:
                    e4:1d:3c:4a:68:a9:25:24:67:da:c1:4d:63:99:8a:
                    38:c6:83:e8:25:cc:7c:c4:26:36:20:3e:33:af:ec:
                    97:4e:9f:6a:19:43:76:99:e6:ac:7e:4f:d8:07:ae:
                    0c:ce:01:6d:59:de:e1:12:9e:ca:a4:05:63:29:e2:
                    e5:e0:6b:ba:4f:c4:5b:44:bc:d8:0c:92:9d:80:3f:
                    e3:96:3d:00:cf:1c:85:79:5d:2e:ce:be:10:14:e8:
                    da:5c:9e:7e:85:b6:a2:b8:4a:e0:13:fa:b2:e7:6a:
                    59:c2:e4:e2:56:c4:7f:ec:b9:eb:b7:ba:b6:aa:cb:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:86:4A:43:79:FF:AA:75:1D:79:A9:8A:B7:84:51:1D:30:7E:4E:10
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:29:8b:46:be:0f:46:e4:02:19:70:b6:32:66:c1:c6:89:
         50:8a:99:23:ed:82:13:77:aa:1a:40:f1:a7:b4:e9:31:ec:ac:
         46:b9:81:50:1c:0d:4a:90:22:72:d5:40:61:c7:3d:2b:9d:a0:
         80:27:ec:60:d3:b1:0c:f2:05:5f:bb:0f:80:8e:0e:85:a6:7e:
         23:f4:a7:3e:93:44:b7:c0:77:7a:a0:8a:c1:43:24:c5:5c:60:
         b8:94:25:25:3a:ef:d5:55:3e:2e:aa:a5:ce:38:55:55:da:2e:
         c0:ae:c2:20:39:b9:89:c8:e1:59:cd:bf:af:58:a8:ce:5f:5d:
         5b:93:0a:c3:53:7c:cd:65:60:48:61:91:dc:46:2a:e3:74:d8:
         b1:0e:48:dc:8f:54:3f:25:44:96:47:4a:6c:91:53:14:d6:f4:
         e5:89:c6:e6:cf:bb:dc:60:a4:4a:39:8d:7d:7a:04:6e:68:02:
         1a:5f:2b:76:f5:d5:fd:9a:7b:7e:22:03:73:32:c3:cd:cb:ce:
         03:21:2a:9b:ef:0d:55:29:95:9f:7d:5a:78:2d:88:b5:0f:94:
         24:1f:d8:d8:15:64:ce:f8:f4:29:76:a5:9d:f2:e1:96:d9:01:
         dc:12:98:bf:61:2f:31:7b:2f:a1:e5:5d:6b:65:be:53:a6:69:
         49:4a:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:22 2025 by rpki-client