Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa
File:                     3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa (raw, json)
Hash identifier:          D5bF3hOl4tjesq6PzxRlo9HBW6AKzw+8L6kutAgAUrk=
Subject key identifier:   86:84:AF:8C:87:FD:68:29:A1:1D:82:CE:70:99:86:1B:74:98:9C:0F
Certificate issuer:       /CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Certificate serial:       1174FD61270318D78732BADA255E759CD735A26C
Authority key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa
Signing time:             Thu 06 Mar 2025 00:10:36 +0000
ROA not before:           Thu 06 Mar 2025 00:05:36 +0000
ROA not after:            Thu 05 Mar 2026 00:10:36 +0000
asID:                     28219
IP address blocks:        186.236.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
                          rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 13:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:74:fd:61:27:03:18:d7:87:32:ba:da:25:5e:75:9c:d7:35:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
        Validity
            Not Before: Mar  6 00:05:36 2025 GMT
            Not After : Mar  5 00:10:36 2026 GMT
        Subject: CN=8684AF8C87FD6829A11D82CE7099861B74989C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:e1:bb:83:dc:37:35:50:a2:47:00:a3:7b:
                    70:e8:9d:aa:80:74:5b:84:28:ff:23:ec:f4:20:c6:
                    9b:96:71:55:7e:8d:79:9d:f7:f7:30:e6:cb:7a:81:
                    44:20:cc:2e:b2:a6:5e:52:16:81:2e:2b:44:05:48:
                    69:07:27:53:33:ee:da:49:61:a4:be:fe:8f:0b:7d:
                    a8:2a:91:39:19:a2:bb:b4:80:fd:31:4f:93:d1:0e:
                    36:bb:43:b9:12:bb:fb:1b:78:63:60:cf:64:b2:27:
                    27:f0:dc:7f:cf:01:2e:fa:af:a6:44:01:a3:a3:84:
                    16:51:e2:1e:b9:d4:46:1b:dc:52:ac:5a:ff:91:84:
                    b1:a8:53:81:90:f8:50:16:4d:35:4d:50:d2:e1:93:
                    4c:cd:b9:c9:90:9a:55:99:48:4d:2e:dc:09:f0:ff:
                    c6:aa:4b:72:bb:fb:88:1a:3b:16:de:af:89:a1:39:
                    ba:46:79:bb:68:75:fe:7d:91:ea:36:8d:45:c8:fa:
                    48:be:19:24:f5:1f:25:c0:41:36:e3:38:74:cf:7f:
                    d6:22:89:55:13:5e:5e:4e:82:2a:ad:06:ab:fe:89:
                    21:3b:f9:72:bb:8c:67:f9:c5:63:38:3d:97:6b:1b:
                    71:7c:c7:1a:6d:32:a8:19:a5:73:0d:3c:68:65:e6:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:AF:8C:87:FD:68:29:A1:1D:82:CE:70:99:86:1B:74:98:9C:0F
            X509v3 Authority Key Identifier:
                keyid:80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:10:f6:3b:a4:0d:18:ec:79:d0:0c:92:2b:0c:30:68:ce:28:
         b0:99:e0:48:cd:9b:b6:57:67:eb:21:e7:8d:08:e1:33:77:8c:
         d4:53:c9:0e:c2:8e:00:3a:90:fe:34:c6:e7:19:e7:5b:83:96:
         9c:b0:a6:b3:c7:a1:0c:8c:55:f5:76:af:4a:19:36:35:a1:1e:
         9d:6d:80:fd:f8:ce:1a:50:e9:ee:6f:70:e3:0e:53:f7:7e:36:
         e5:fb:2c:a4:f4:c7:5b:95:fe:73:4e:81:62:78:09:6b:96:ac:
         0a:6d:35:b9:80:6a:f6:de:3e:32:2a:20:de:e9:ff:e2:01:d3:
         24:38:29:3e:c3:53:32:3f:b0:9c:23:f1:be:0d:58:21:1f:ec:
         82:e6:39:58:75:f6:f5:17:1b:9b:54:de:c9:77:3f:e7:6e:aa:
         6d:62:bf:d2:72:95:1d:dc:d7:81:f2:79:be:09:a0:8f:14:8e:
         5c:5c:00:34:31:db:25:f9:97:4b:5b:fd:97:c4:d6:bf:52:95:
         a5:bd:f2:38:44:f3:24:34:f7:2f:77:b8:87:28:ee:bc:46:45:
         12:d1:40:0b:c9:1f:cf:8f:6d:19:0f:35:2c:87:ac:ca:77:99:
         e0:7e:b7:fe:f0:e1:ba:67:7f:d0:58:e8:7c:3d:86:51:81:a1:
         0d:5c:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:52 2025 by rpki-client