Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
File:                     3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa (raw, json)
Hash identifier:          ryMim/OA/yOmzq2VgWP6t0lMqHk9WW15MKv5w/XuLRE=
Subject key identifier:   5D:45:F4:63:3F:B3:C6:C9:55:04:E0:A8:13:CB:FA:DD:B0:8B:04:77
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       4385234F9639926B98AD776FEB163E4C47C3B478
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:51 +0000
ROA not before:           Thu 13 Feb 2025 20:46:51 +0000
ROA not after:            Thu 12 Feb 2026 20:51:51 +0000
asID:                     263059
IP address blocks:        186.232.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:85:23:4f:96:39:92:6b:98:ad:77:6f:eb:16:3e:4c:47:c3:b4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:51 2025 GMT
            Not After : Feb 12 20:51:51 2026 GMT
        Subject: CN=5D45F4633FB3C6C95504E0A813CBFADDB08B0477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:e2:8f:49:1d:d5:a9:41:a8:34:d8:71:1a:
                    e3:b9:74:23:64:76:cb:bf:87:3b:ff:15:ae:ec:56:
                    a4:00:7b:d4:96:88:42:8b:9e:7b:0f:db:e7:ef:bc:
                    88:69:18:2e:5d:97:17:06:ca:57:eb:a8:a5:98:db:
                    25:7f:64:84:4b:f3:af:3d:ce:41:c4:21:f6:17:84:
                    e2:30:02:17:3e:51:eb:b4:2b:e7:b1:3a:9c:1b:27:
                    45:53:2e:53:90:26:18:ec:b9:5f:7c:73:61:78:82:
                    69:65:ea:44:f5:5b:93:53:7a:2a:57:dc:1a:d3:3f:
                    7e:5a:a2:6f:45:e1:51:01:d3:0b:c9:e3:89:88:dd:
                    a8:5a:9e:52:3a:61:f5:0c:73:26:84:ab:bc:32:31:
                    ae:8d:6a:3f:e2:5a:37:06:b4:6f:5d:24:73:02:71:
                    c3:41:ad:4f:8c:58:24:fa:27:3c:da:19:f3:f3:f0:
                    a7:b9:1b:7d:2c:bd:b3:d7:f6:7d:c8:04:d8:25:dd:
                    e4:ec:52:a9:46:c8:9b:6f:e6:ad:d0:e6:23:b0:11:
                    1e:1e:ec:10:5e:a8:6f:da:d5:db:35:db:b4:7c:8c:
                    53:b1:27:67:4b:5c:5e:35:4a:64:c9:d5:70:5d:18:
                    d0:e5:2b:8d:d3:be:60:2e:8f:8e:48:55:99:8e:94:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:45:F4:63:3F:B3:C6:C9:55:04:E0:A8:13:CB:FA:DD:B0:8B:04:77
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:de:95:ea:01:83:86:bc:c9:cc:cc:d8:cf:6e:c5:d4:6f:
         7d:23:ed:b6:a8:0a:f3:34:43:8b:ae:00:2f:c3:7e:12:67:ef:
         d5:40:f4:53:88:16:ae:bc:ac:36:d8:dc:e4:25:c5:89:a7:b1:
         76:1f:a9:96:3e:90:c4:a0:0c:d8:bb:23:dc:8b:88:af:80:90:
         eb:9d:c0:09:14:90:12:62:30:bd:f6:d5:80:09:10:1c:e7:ba:
         bc:af:d2:43:a0:2c:75:bd:43:37:a2:d8:95:73:3b:91:2c:60:
         6d:21:ff:94:dc:54:5a:6f:f8:af:90:97:3d:2d:9f:9c:d8:f0:
         3d:3f:4a:9c:35:b1:5e:4f:4c:dc:ab:7e:58:63:9d:1b:d3:1a:
         e6:bc:74:5f:37:fe:53:e7:ea:c5:2d:50:e8:e6:d8:45:ec:3f:
         e5:99:29:3e:74:73:69:a1:d8:32:57:19:98:f3:70:04:a0:8e:
         f7:13:ab:28:45:b4:24:01:a9:67:ff:4c:3e:85:f7:d2:e4:ee:
         10:da:7f:07:b6:1b:97:3f:68:39:94:e2:20:a8:63:89:6a:39:
         66:59:58:31:f0:a8:ba:4e:34:80:f7:cb:13:73:7b:b7:75:88:
         1f:14:50:d9:10:cc:61:c4:75:ae:73:f4:5c:f6:67:61:a8:22:
         32:e1:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:01:19 2025 by rpki-client