Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa
File:                     3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa (raw, json)
Hash identifier:          7PKk1yFLsWS9OmPkHVNginspa+romwuL2K4DR/CjVEw=
Subject key identifier:   57:43:52:7E:D8:61:46:93:48:FE:2B:70:91:4D:6B:15:09:03:D6:2F
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       0610557635E078E089901365591E5301CB4C41FC
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:32 +0000
ROA not before:           Thu 06 Mar 2025 08:15:32 +0000
ROA not after:            Thu 05 Mar 2026 08:20:32 +0000
asID:                     263146
IP address blocks:        187.86.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:10:55:76:35:e0:78:e0:89:90:13:65:59:1e:53:01:cb:4c:41:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:32 2025 GMT
            Not After : Mar  5 08:20:32 2026 GMT
        Subject: CN=5743527ED861469348FE2B70914D6B150903D62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:2e:57:c5:92:8e:c1:21:09:94:29:37:e4:
                    df:0a:57:b5:ce:a4:38:d6:5e:b8:37:0d:09:5a:b8:
                    71:ba:38:00:01:12:f4:46:4c:bb:6d:3a:3b:df:ea:
                    76:70:e0:65:e3:c8:55:c7:0c:1c:8c:06:6e:a8:91:
                    7d:79:85:a6:62:e4:b6:b2:9c:0f:3e:3c:9f:96:72:
                    40:76:50:61:06:3c:cc:2b:c7:04:2b:f4:cd:16:53:
                    4d:47:2c:dc:4a:88:8c:18:72:f4:9d:4a:50:8d:7a:
                    ed:56:c7:97:34:10:aa:64:c9:f5:a6:35:84:0b:36:
                    0f:f6:6e:c2:2e:cc:6c:28:99:fe:ea:6c:95:52:ce:
                    65:57:d5:06:ab:cd:2d:29:4e:df:ee:cb:59:ba:fe:
                    74:4b:86:56:8e:8e:e4:38:59:5b:77:79:1f:72:0b:
                    02:ea:82:e8:ec:0f:e9:15:0d:c6:9c:6f:04:47:d8:
                    83:31:98:55:25:85:a4:78:a5:83:13:80:60:df:e9:
                    25:8d:22:de:64:94:86:ff:40:b9:b2:88:41:95:bb:
                    f0:d9:1d:a6:98:08:b4:75:f7:a6:39:d1:99:61:b3:
                    15:54:9c:50:ce:f9:be:fc:f4:f2:c3:bc:97:4b:19:
                    f3:ed:f5:4a:70:f5:7a:eb:be:e5:3d:8a:34:a8:39:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:52:7E:D8:61:46:93:48:FE:2B:70:91:4D:6B:15:09:03:D6:2F
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:40:5b:cc:44:3e:a2:fd:ac:51:63:26:b5:ed:02:da:b4:
         a5:9b:23:56:37:f1:b1:b6:f3:8c:2e:2f:73:46:55:f3:d7:64:
         82:36:38:43:11:dd:5b:48:e8:be:e7:1c:ad:1c:28:73:a6:86:
         42:21:7e:60:78:28:40:36:f7:bf:5e:ab:33:4b:ed:17:5a:d9:
         21:57:b7:03:01:bd:62:27:af:85:43:13:f0:fd:cf:cb:79:b6:
         7c:e4:ea:83:9c:42:0e:a1:29:1c:a1:41:7c:2b:99:72:47:64:
         7f:01:05:57:39:eb:66:12:51:79:f0:9c:4b:6f:fe:7c:b1:93:
         ad:c8:7d:56:f5:9d:2f:9c:8d:10:d6:15:9c:a1:73:39:c5:dc:
         a5:c9:c0:36:d1:5c:e6:f7:ef:ce:19:b7:c7:66:54:72:87:91:
         a1:88:1f:bd:1e:00:45:4f:08:d3:a7:66:42:df:a1:b4:d1:26:
         f1:dd:ed:a5:65:09:9a:aa:e5:75:48:59:55:3c:30:9c:bb:0b:
         2d:a7:9e:7c:2d:98:8e:f1:52:04:3d:50:6d:e2:f1:39:96:87:
         17:8d:34:f6:b8:19:6a:17:1f:6d:d8:57:40:ce:a2:08:b7:31:
         77:d9:7f:f1:80:63:63:56:a1:48:96:98:5f:f7:b8:6e:f8:d6:
         66:c1:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:36:41 2025 by rpki-client