Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          EaRJ4DpIO4lmpVolu43hGziTZOUKujpuyO3Q+85EAtI=
Subject key identifier:   6C:67:F3:F3:B9:53:D1:B4:45:88:BB:3B:59:44:8F:92:D2:5F:B4:61
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       3ED7FEE86B392571B506FD7BA87F5E3CA7674EEF
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:39 +0000
ROA not before:           Thu 13 Feb 2025 20:46:39 +0000
ROA not after:            Thu 12 Feb 2026 20:51:39 +0000
asID:                     263059
IP address blocks:        186.232.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:fe:e8:6b:39:25:71:b5:06:fd:7b:a8:7f:5e:3c:a7:67:4e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:39 2025 GMT
            Not After : Feb 12 20:51:39 2026 GMT
        Subject: CN=6C67F3F3B953D1B44588BB3B59448F92D25FB461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:c2:74:8d:4b:b5:f1:ad:90:3e:6e:21:4d:
                    64:5b:83:03:29:60:cf:0c:f3:dc:1b:50:45:cf:62:
                    aa:f2:9b:e5:e9:fa:19:01:3e:bd:56:50:67:20:43:
                    00:a9:30:7f:ea:b5:a5:d9:ec:ad:91:30:e5:af:d9:
                    3a:71:4e:7c:e2:bf:93:b8:cb:b8:8d:42:a8:b4:85:
                    02:7b:75:3e:d4:89:c1:ad:36:ae:97:34:94:58:f2:
                    96:41:86:97:4e:f5:eb:fb:df:5e:51:64:c4:44:ec:
                    38:ae:31:3b:ac:3f:d1:97:24:a7:de:5f:39:74:bf:
                    dc:5c:b0:fd:9b:d6:0d:30:53:95:9a:b9:d3:ef:9f:
                    77:1e:dc:6c:02:95:94:09:a9:97:22:cc:62:40:66:
                    01:20:f2:99:d2:f2:92:67:4c:12:25:7f:6a:53:e7:
                    61:53:4a:96:2a:42:2e:5a:fc:6a:42:12:d4:5d:8b:
                    78:1a:cd:a3:41:0e:a1:61:ef:88:b3:1b:32:6b:83:
                    41:3d:2f:57:1b:be:c8:54:dd:91:93:47:d6:63:c9:
                    f9:8e:19:70:f5:2a:4d:7d:e5:f3:ba:cc:dc:a5:44:
                    8c:d6:ed:7d:5f:4b:12:b6:1f:3d:98:ed:c0:a0:6b:
                    82:b5:a6:5e:a5:b9:10:91:3d:69:19:ab:2d:94:36:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:F3:F3:B9:53:D1:B4:45:88:BB:3B:59:44:8F:92:D2:5F:B4:61
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:f1:e1:59:10:7f:a8:51:74:c7:b1:53:04:86:dc:cb:ec:
         df:b2:05:e1:d0:42:4f:72:3b:1b:b5:d2:e7:ab:fb:7e:57:85:
         b7:ea:2b:05:4a:79:8a:ea:11:81:ae:9b:d9:2a:20:15:8f:14:
         80:d5:d2:2f:be:cd:7f:4b:90:68:f1:12:07:4a:50:1b:61:06:
         ca:fe:e5:b1:f4:f6:4b:4a:5b:c1:13:49:81:da:23:58:05:b3:
         2f:c8:d0:72:68:8b:36:b3:d7:02:f8:a6:b4:81:4c:85:32:67:
         96:1d:3f:a5:29:bb:69:87:36:82:b3:0c:67:98:98:94:64:27:
         2a:6a:ba:ad:ff:72:a9:02:fd:da:c0:06:54:53:8e:ad:41:5f:
         c4:70:e0:d0:85:57:b9:cb:86:a5:9f:b8:b1:36:c4:9c:ac:54:
         8e:a5:61:8f:c6:89:d5:56:60:1a:b6:62:99:cd:27:25:cb:92:
         b5:01:58:a5:a5:34:7a:ca:da:ae:8f:ad:1c:6f:74:b7:93:ba:
         e5:0c:be:1c:d0:41:ce:55:c0:3d:51:82:c7:ed:5e:93:21:90:
         a9:76:ee:07:7b:e1:3e:f2:34:71:8a:87:df:be:c1:48:04:d3:
         e5:ce:c6:99:e2:75:35:47:ae:4d:c8:d3:e3:2a:a1:5a:ee:1f:
         42:a9:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:10:39 2025 by rpki-client