Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135362e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          85KM0GYF3JR2/08evxZDwJ0DIdBwGMr02qLAhCOwJkM=
Subject key identifier:   30:DA:BB:AC:37:D1:25:3D:02:D1:46:0C:20:06:CE:AF:9E:70:E5:42
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       709DFC283B5899C34A562D6C736D6997EC804746
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:52:06 +0000
ROA not before:           Thu 13 Feb 2025 20:47:06 +0000
ROA not after:            Thu 12 Feb 2026 20:52:06 +0000
asID:                     263059
IP address blocks:        186.232.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:fc:28:3b:58:99:c3:4a:56:2d:6c:73:6d:69:97:ec:80:47:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:47:06 2025 GMT
            Not After : Feb 12 20:52:06 2026 GMT
        Subject: CN=30DABBAC37D1253D02D1460C2006CEAF9E70E542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:5b:7a:e2:4e:2d:8c:8f:de:5e:d0:d8:00:
                    38:be:19:c2:17:80:c3:57:47:27:38:df:5f:f0:07:
                    73:c9:07:60:57:63:7a:89:25:11:a1:1e:37:ae:90:
                    38:85:95:89:bc:62:75:c5:38:3f:93:5f:77:a5:d2:
                    72:4e:22:f3:73:26:89:44:94:6f:83:f3:36:f6:e6:
                    66:f7:ee:f2:23:1f:6f:12:a0:cf:22:ac:2c:ee:a6:
                    8c:b5:e9:6b:d2:a0:bc:da:8d:cd:02:76:aa:32:85:
                    74:94:30:24:5b:39:27:f9:b7:f5:f3:c1:a1:92:00:
                    62:fe:4e:93:2d:c2:0c:c0:f9:d0:cd:c2:a5:f3:d0:
                    95:e2:55:a0:95:d4:22:5a:63:31:91:57:de:7b:61:
                    b9:50:26:10:35:9e:9b:d5:5c:86:5d:a7:95:3d:ac:
                    ec:6b:15:e2:0a:6c:ec:84:71:c3:75:62:27:c7:a1:
                    ec:32:66:ab:a4:ff:2d:0c:1f:cf:df:a4:6e:7d:22:
                    51:0b:fa:13:6f:36:c9:1a:3e:84:1c:ab:0b:a8:72:
                    6e:00:89:e8:ed:7c:4f:5b:e5:91:47:9c:ad:a6:3c:
                    08:da:17:b0:78:c0:d6:78:b1:f7:79:89:d6:99:d2:
                    d7:fc:b2:66:d4:28:e8:58:c1:bf:31:19:1e:36:a0:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:BB:AC:37:D1:25:3D:02:D1:46:0C:20:06:CE:AF:9E:70:E5:42
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:29:47:30:79:20:12:08:1c:03:ea:d8:bc:88:ad:26:a8:
         5b:21:c0:e2:0e:9b:4b:a1:04:2b:4c:63:95:4d:40:d3:51:42:
         28:a6:c2:e2:3d:5c:9d:e4:7c:61:55:6b:34:71:a9:da:2a:07:
         53:e0:f4:55:d9:1f:81:d4:5b:fd:6b:10:0a:0e:a8:64:50:b3:
         0a:92:3d:3e:3a:99:d8:63:b0:9c:b0:01:8a:d4:36:77:c1:a2:
         28:ff:61:1e:f7:27:3d:58:1b:2d:ad:fd:0b:b2:07:76:71:1f:
         c3:a0:d5:fb:7a:15:b0:f7:f8:6c:ea:3e:ae:b7:2d:1f:05:fd:
         4a:30:03:0f:ad:d0:b6:d4:e7:a8:b8:33:00:f9:82:cc:54:b9:
         d1:4b:93:9a:cb:9b:d5:de:e2:8c:11:0f:ce:5b:85:45:2b:5b:
         5a:01:05:0d:27:d9:95:b0:9e:96:bf:81:6c:fa:51:61:3f:bc:
         cf:53:92:69:0c:d9:73:da:25:31:9a:10:11:43:25:99:45:ed:
         9c:82:75:6b:1b:be:39:60:f7:57:3c:ca:3b:e8:26:e3:2a:41:
         be:d8:dd:de:87:fc:2b:d6:7a:9c:67:6e:8e:e0:f4:ef:65:c9:
         41:8e:39:ef:24:94:3d:13:e7:6c:96:ef:6b:a6:4b:09:17:44:
         4e:42:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:17 2025 by rpki-client