Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32312d3231203d3e203237363933.roa
File:                     3138362e3233362e36342e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          Fu3BHOJTafEmUNshY8F6M8fKeGXkx9l6UktchJKiaVo=
Subject key identifier:   3C:89:0B:18:0E:DC:63:1A:39:30:20:D4:FB:75:98:E8:AD:21:92:B6
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       6ADCA13896236BE140CB50F09CA97F653A07B53A
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        186.236.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dc:a1:38:96:23:6b:e1:40:cb:50:f0:9c:a9:7f:65:3a:07:b5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=3C890B180EDC631A393020D4FB7598E8AD2192B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:56:33:9b:46:71:a0:1b:fa:85:74:99:38:
                    7a:96:1c:4b:74:01:ea:71:0d:7b:f3:38:81:bc:27:
                    ba:51:7f:a8:29:72:f1:87:ed:16:84:11:e9:9d:63:
                    53:d5:69:74:b4:44:0a:5d:4a:04:24:b2:7b:61:6b:
                    78:19:c4:a2:d4:92:a9:ee:21:d0:dc:0f:40:7d:aa:
                    f6:ab:39:9d:5f:8a:30:e0:fe:86:d3:40:79:48:3b:
                    69:62:94:fb:65:aa:83:36:6f:66:32:f6:3f:0a:85:
                    1d:b9:89:08:39:74:b1:37:41:d9:b9:e0:9b:70:a6:
                    14:12:22:82:68:7b:e2:07:63:5f:50:14:54:4f:c4:
                    ac:2a:4b:11:39:da:ee:94:04:a2:4c:fd:8b:45:29:
                    d0:f3:04:94:79:23:45:cf:f0:04:84:40:e4:33:a5:
                    f0:da:3f:87:1f:ea:80:45:77:c9:bf:41:4c:fe:46:
                    c1:1f:36:19:9f:9f:42:ad:2a:6c:6d:c9:a0:0c:e8:
                    44:eb:91:77:f6:3e:cf:e8:29:15:8a:db:1d:58:ca:
                    a3:5b:70:27:c7:ed:3f:cd:eb:92:8f:6e:8b:62:42:
                    64:a9:57:f8:7c:cb:f3:ef:a1:29:5d:9e:0c:98:17:
                    8b:d3:4e:1b:94:81:30:9b:80:ba:2a:ac:cc:fb:66:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:89:0B:18:0E:DC:63:1A:39:30:20:D4:FB:75:98:E8:AD:21:92:B6
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:07:ed:93:90:16:af:48:0b:28:4c:2c:b3:78:89:32:bd:
         1b:69:83:d2:b7:52:e4:3b:a0:65:da:26:f2:ed:25:0c:42:9f:
         9f:87:32:fa:e1:87:31:cb:ed:9a:d2:19:c1:ff:68:f3:39:84:
         81:71:2b:e7:bd:01:97:08:23:f3:e2:9a:c0:45:7a:f1:da:f9:
         bb:64:25:76:53:ce:96:a7:de:a4:ee:b7:12:a5:10:61:0a:5c:
         46:78:74:d4:f0:8e:23:ff:43:a4:7d:4c:ee:12:e0:fb:41:96:
         c5:8b:90:45:6f:17:21:91:0f:33:12:76:b1:ff:0a:a1:b9:a1:
         51:f5:2e:c2:99:98:ec:5b:76:dc:e7:3d:f6:b1:51:72:4e:93:
         5e:c8:b2:c4:bc:bb:b5:29:bf:62:67:1c:af:fb:a8:17:44:d8:
         7c:96:4a:89:76:b0:fc:fd:22:b7:f2:a6:38:56:1e:85:97:3e:
         0b:aa:63:39:5c:3a:5e:c6:48:c3:99:ce:96:8c:9a:4b:af:e0:
         b5:f1:9f:6c:93:5a:36:93:67:fc:9b:93:5e:4b:9c:7a:be:57:
         d3:6c:83:b6:02:40:28:b1:aa:6a:58:7d:cb:9e:00:65:28:f8:
         61:0d:b7:f9:7e:0f:ad:07:e8:60:8d:f7:5a:65:55:a9:2f:9b:
         54:e9:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:42 2025 by rpki-client