Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa
File:                     3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa (raw, json)
Hash identifier:          pwWiSHAN/+I+ur49JGzipgJZ93EDUqhwjDHGe8Mjg7w=
Subject key identifier:   73:89:28:02:74:37:DE:7F:1D:07:9A:FC:05:49:D0:E9:A9:85:18:BE
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       7EBC4368F5A89069881E5E152B7994F4A8371132
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:58 +0000
ROA not before:           Thu 13 Feb 2025 20:46:58 +0000
ROA not after:            Thu 12 Feb 2026 20:51:58 +0000
asID:                     263059
IP address blocks:        186.232.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:43:68:f5:a8:90:69:88:1e:5e:15:2b:79:94:f4:a8:37:11:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:58 2025 GMT
            Not After : Feb 12 20:51:58 2026 GMT
        Subject: CN=738928027437DE7F1D079AFC0549D0E9A98518BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:96:c5:d6:7c:ab:ce:d7:ee:29:ea:a7:cf:eb:
                    d8:6a:48:bf:97:02:6e:90:5f:28:0b:16:fc:e3:7c:
                    9b:b1:9a:c8:35:22:98:3c:0a:f2:65:41:a0:cc:7c:
                    7a:56:a0:11:35:3f:46:88:2a:92:c2:49:de:dc:64:
                    e6:b0:f5:16:d6:f2:dd:7a:59:a8:60:61:7f:6a:a2:
                    ad:e6:5f:fc:05:11:f9:70:31:d2:38:cd:73:99:c6:
                    53:e0:ba:70:01:6f:60:a3:53:d0:db:56:5f:3a:20:
                    4e:a0:f8:d7:b7:f0:23:ef:c8:53:1d:25:b1:e5:25:
                    a9:f6:21:df:7e:f5:09:ec:7e:d0:9d:c2:d9:af:50:
                    f1:b8:8b:29:63:90:68:b2:64:2c:90:97:5a:e4:28:
                    b0:f2:30:3b:a3:da:d3:f8:c1:b8:31:aa:ad:29:2e:
                    ba:10:fd:79:e4:35:bf:d7:46:06:9b:e0:ca:a9:a1:
                    c4:59:01:32:10:9d:6b:9f:fc:4b:0c:d1:97:73:61:
                    b3:66:b8:dc:7d:2d:94:4d:6b:39:7a:f0:1e:05:ee:
                    f4:1a:71:a0:74:12:78:82:7c:bd:c1:08:80:30:32:
                    df:4c:e2:3d:56:97:da:03:83:11:20:f1:b2:96:7e:
                    11:6f:78:39:c2:96:b5:55:82:43:14:7f:e1:c6:a3:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:89:28:02:74:37:DE:7F:1D:07:9A:FC:05:49:D0:E9:A9:85:18:BE
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32332d3233203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:3d:e8:12:f9:e2:9d:8a:80:f2:3d:50:56:9f:b6:b3:6a:
         59:8c:93:68:bd:90:63:59:9f:ca:c9:cf:b2:1d:12:fa:21:3c:
         10:ed:63:8d:31:55:1e:0c:37:d3:f3:3d:6c:d1:84:b9:19:d8:
         1e:8e:ed:61:ec:b5:5b:06:ee:c7:22:f1:7a:c5:fd:99:01:1b:
         7d:bc:a7:61:c5:87:bd:cf:b6:f8:83:cc:ba:f1:d0:12:f2:dc:
         9d:35:dd:d6:af:38:4e:31:06:08:05:23:b6:51:aa:e6:70:78:
         d3:fc:de:bc:ae:57:f4:0a:2d:78:50:5c:9e:81:93:42:a9:20:
         96:ef:cd:39:cc:df:44:2d:d8:51:fd:17:e0:bb:ec:bd:92:29:
         5d:c5:b2:94:cc:54:aa:e9:2a:ff:6d:73:65:fb:db:74:26:83:
         69:a6:5d:1b:31:13:01:b9:61:0e:b6:3f:80:28:43:0b:fb:0a:
         5d:8f:40:73:4c:85:7a:d3:30:76:cd:2a:d3:7e:cb:ad:07:0f:
         d0:de:38:fe:e2:a6:0e:75:c8:a9:29:e3:ee:61:67:4e:a3:41:
         54:78:0f:ed:73:ce:22:84:89:87:00:58:f5:c7:92:cc:9f:e7:
         62:ad:08:7b:66:9f:dd:d3:61:98:f3:21:e5:12:ab:da:23:0e:
         b7:fe:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:03:40 2025 by rpki-client