Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa
File:                     3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa (raw, json)
Hash identifier:          SWi5ydOvWwY276MOMMwGgNYEo4Q9AadTOgsfNI5U0Zg=
Subject key identifier:   AA:4D:E4:60:63:03:6B:7C:7E:22:73:F0:3E:42:6E:83:CC:1F:35:42
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       79EF5C0FC312A95B35AB6C190D5502D1B822B226
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:28 +0000
ROA not before:           Thu 06 Mar 2025 08:15:28 +0000
ROA not after:            Thu 05 Mar 2026 08:20:28 +0000
asID:                     263146
IP address blocks:        187.86.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 16:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:5c:0f:c3:12:a9:5b:35:ab:6c:19:0d:55:02:d1:b8:22:b2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:28 2025 GMT
            Not After : Mar  5 08:20:28 2026 GMT
        Subject: CN=AA4DE46063036B7C7E2273F03E426E83CC1F3542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:5b:bb:29:29:64:8b:7b:51:de:7a:b3:75:
                    17:ba:5e:bf:47:38:d5:8f:85:e0:0d:95:bf:b1:be:
                    74:6a:98:89:dc:48:74:aa:48:6b:c2:f2:99:6d:4c:
                    ec:74:68:a6:e0:21:52:f1:cd:b5:f9:b1:97:02:52:
                    55:dc:64:d3:fb:84:f2:7c:d4:ca:f9:a5:c0:ce:37:
                    b7:12:af:70:c7:5e:d0:4b:8c:05:95:b3:66:8c:fb:
                    c2:68:91:18:75:03:f1:79:2c:93:73:6f:7a:a0:e1:
                    fb:18:54:9f:d5:bf:e9:a8:d0:7f:9f:ed:a5:77:a6:
                    db:78:88:f3:77:d9:c5:84:2b:b7:6f:6b:2c:5b:c4:
                    ab:ec:cd:47:3e:b0:b6:4d:d4:25:b8:83:88:56:a2:
                    fb:89:3f:b1:d8:77:e0:55:76:5d:60:11:06:51:9a:
                    be:27:c8:75:09:13:4c:a6:61:cf:f8:57:df:91:6a:
                    7a:de:d4:65:4b:05:34:be:dc:e7:af:2d:ee:2e:a4:
                    41:34:df:e0:29:18:b4:78:2d:c9:aa:c2:59:5d:8f:
                    46:04:00:91:3e:a0:8c:21:ed:7f:4b:fb:5a:d9:ff:
                    32:74:d8:10:f0:76:8c:8f:90:50:12:49:41:af:69:
                    80:5a:be:7e:fa:13:4d:7e:5f:21:38:af:01:7a:96:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:E4:60:63:03:6B:7C:7E:22:73:F0:3E:42:6E:83:CC:1F:35:42
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:44:06:5f:a4:14:f9:be:44:cf:4a:d7:ff:26:28:4f:57:10:
         e0:88:84:5d:54:65:ff:f7:18:93:03:be:09:35:4c:8a:4c:7e:
         db:07:19:75:a9:86:13:b8:de:54:03:dd:78:68:57:1e:e0:45:
         10:ba:2a:8b:16:d6:b4:6a:71:b5:a3:70:4d:7b:78:f1:46:62:
         2f:d6:fa:1d:e8:05:ff:14:88:f0:da:b7:ac:93:90:df:0c:8c:
         c3:2d:0d:81:8a:50:a8:01:77:aa:82:6b:2f:b7:42:88:69:df:
         ca:62:c4:1a:75:8f:86:59:69:a8:81:09:41:73:ee:06:58:dd:
         e0:f7:36:c6:44:94:cf:dc:c8:21:60:05:2b:1c:99:93:c8:f0:
         2c:93:09:02:7e:bf:9a:e7:09:c3:9b:1c:bb:85:9f:f2:5a:a1:
         4a:cf:5b:69:c4:b2:9e:cd:69:76:d9:fb:7d:27:b9:81:66:e0:
         7d:49:7e:82:64:4d:86:3e:b5:25:0b:92:ce:0d:d0:7a:ad:20:
         6c:1a:b8:76:83:65:44:50:d1:c1:ce:1e:91:92:45:c0:c4:90:
         45:f5:0b:21:40:90:5c:cb:24:ec:19:18:c9:90:bf:22:82:8a:
         59:5f:de:b2:63:73:bd:07:49:8e:71:6d:27:6f:4c:5d:0c:45:
         54:41:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:47:39 2025 by rpki-client