Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          PD90ELiL6vAJN2OlscgHgnhWOCPXvFiUjEsko/3S0zU=
Subject key identifier:   93:8F:1A:C6:03:11:1B:9C:C2:62:AD:39:CA:BC:F7:90:19:EB:C6:22
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       5458422F237D3D116275CCD8D4BEDAC5AA853AA2
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:52:19 +0000
ROA not before:           Thu 13 Feb 2025 20:47:19 +0000
ROA not after:            Thu 12 Feb 2026 20:52:19 +0000
asID:                     263059
IP address blocks:        186.232.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:58:42:2f:23:7d:3d:11:62:75:cc:d8:d4:be:da:c5:aa:85:3a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:47:19 2025 GMT
            Not After : Feb 12 20:52:19 2026 GMT
        Subject: CN=938F1AC603111B9CC262AD39CABCF79019EBC622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:d4:fe:58:4c:9d:cd:1b:64:28:de:71:f9:
                    ee:a3:28:0e:fb:a9:5a:09:96:d9:23:6a:43:8c:9f:
                    07:b2:db:a5:06:52:f3:fc:d3:5b:20:05:79:46:d3:
                    c5:35:31:e0:20:6f:6f:6a:ce:37:22:62:15:f2:c5:
                    43:df:a9:f4:2a:1c:4a:21:97:e0:d5:28:8f:59:cf:
                    d7:f4:a6:89:18:87:0e:84:62:c4:31:b4:42:d0:7a:
                    f1:8e:60:48:49:a8:2d:f3:b0:bc:74:b8:b7:0a:a8:
                    41:1c:1b:07:3d:88:9c:31:a9:7b:74:9a:c5:6f:89:
                    0a:ae:d5:a9:39:cf:fe:49:da:54:b3:f0:cc:fa:30:
                    28:08:27:cb:3e:3b:a6:47:c6:d5:40:39:1a:8e:dc:
                    6b:44:87:1f:ad:a3:59:73:cf:75:e2:c4:4b:1a:8c:
                    26:45:49:8e:0a:e4:3b:8b:b3:87:e8:ff:3e:b0:05:
                    02:f8:1f:37:24:52:75:3e:da:c5:fd:9c:a5:bb:7d:
                    59:fa:00:1d:b2:84:dd:11:fa:58:8a:6f:1c:cb:59:
                    4d:55:a6:0c:f0:f9:ce:31:c5:04:06:0b:b1:37:91:
                    ac:df:7b:ed:03:e9:05:ee:00:ab:0d:a7:47:ab:24:
                    34:dc:9b:fa:d9:fd:0b:00:60:43:f5:04:91:3c:6e:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8F:1A:C6:03:11:1B:9C:C2:62:AD:39:CA:BC:F7:90:19:EB:C6:22
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:00:f5:26:8c:17:1d:64:cf:95:40:1f:97:84:a2:33:2e:
         25:fb:cc:f4:5c:d4:11:c1:32:c1:36:89:2c:50:cf:f6:39:a5:
         cf:bf:8e:cb:cf:37:1a:79:e9:e7:fb:d0:ae:f2:ca:cd:ce:10:
         f9:cd:0b:5a:7c:fd:e7:4c:e4:5f:fc:0a:00:d7:2b:39:9d:2c:
         e6:5d:4f:cc:32:12:a7:d7:85:1f:d8:94:da:ad:a8:95:41:41:
         9b:b7:65:17:c1:5a:14:87:68:a7:02:31:5d:d8:eb:cf:43:0b:
         1a:99:24:9b:5e:02:ea:b0:50:0d:17:06:34:d1:69:b7:e9:71:
         23:16:4f:3f:61:f1:a7:87:21:3a:51:2a:33:31:ff:34:ce:3a:
         94:ca:e4:71:4d:03:04:9d:ed:5e:8c:80:5b:14:09:7d:4b:08:
         76:09:d8:d4:2b:84:51:1f:9c:f7:f0:82:58:1a:a5:28:fc:32:
         f0:e4:c0:6e:97:96:c4:62:a0:45:57:31:c7:5d:26:eb:15:8a:
         84:e5:d7:ea:81:74:40:f8:00:96:fe:7b:b5:69:1e:da:78:4d:
         d8:0b:a6:2f:e3:96:a8:c8:82:55:df:96:aa:dd:d5:35:8b:66:
         c0:6c:85:f1:fb:e2:c7:88:87:da:87:a9:06:86:e1:2a:d2:15:
         bd:6d:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:17 2025 by rpki-client