Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3138362e3139352e3232342e302f32302d3234203d3e203532383632.roa
File:                     3138362e3139352e3232342e302f32302d3234203d3e203532383632.roa (raw, json)
Hash identifier:          bbbv4yksboAcG3YzRM1cy3PbVJaKMVwKZgaUC6+tx9w=
Subject key identifier:   E0:3C:26:D6:BD:7E:B1:15:30:A8:24:D9:AE:22:DB:62:07:10:BE:7B
Certificate issuer:       /CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
Certificate serial:       1033ABE8DE4F47FE20C8015AC8154D6C7C1B15B8
Authority key identifier: 5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3138362e3139352e3232342e302f32302d3234203d3e203532383632.roa
Signing time:             Fri 16 May 2025 18:39:27 +0000
ROA not before:           Fri 16 May 2025 18:34:27 +0000
ROA not after:            Fri 15 May 2026 18:39:27 +0000
asID:                     52862
IP address blocks:        186.195.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 10:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:33:ab:e8:de:4f:47:fe:20:c8:01:5a:c8:15:4d:6c:7c:1b:15:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
        Validity
            Not Before: May 16 18:34:27 2025 GMT
            Not After : May 15 18:39:27 2026 GMT
        Subject: CN=E03C26D6BD7EB11530A824D9AE22DB620710BE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:32:b8:3e:52:98:8e:3d:cf:db:5f:91:a9:
                    ea:04:ce:9f:85:07:66:6a:62:fa:38:4d:03:3d:e6:
                    0d:04:a0:bb:8a:39:c6:50:61:03:5e:69:bd:bc:89:
                    69:a0:3f:6d:2b:24:92:e5:af:48:dc:b1:c9:50:70:
                    8a:02:55:77:b7:80:f8:e5:f8:d9:c8:d9:21:40:4d:
                    84:d8:57:4d:ac:00:bd:44:c1:08:35:43:ad:5a:68:
                    8c:b8:ea:6e:5f:b6:f7:62:98:7b:67:88:04:74:a5:
                    a0:20:be:73:a8:79:b2:de:3d:5a:27:05:38:03:a4:
                    8f:68:b5:33:25:7f:1f:1d:ad:1c:e6:71:1d:8e:2a:
                    de:da:7f:02:f1:5d:32:e8:60:f9:df:5e:7f:93:09:
                    9e:f2:18:ea:ed:a5:63:ea:e8:bd:f0:7e:23:ef:35:
                    52:ea:bd:9d:c2:8c:02:56:3d:ee:5e:32:f2:57:37:
                    d1:3f:47:93:d7:22:36:a0:64:bc:03:b8:5f:f6:d1:
                    fa:6d:6d:11:6d:d2:e3:ef:0f:d5:29:66:09:85:61:
                    7e:81:0c:be:87:49:24:19:47:92:fb:df:b4:b9:25:
                    da:c4:29:25:cc:02:98:b5:6a:15:44:1a:43:68:69:
                    97:e5:ce:05:8f:b3:d3:06:fe:a1:a7:bf:41:3f:f8:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3C:26:D6:BD:7E:B1:15:30:A8:24:D9:AE:22:DB:62:07:10:BE:7B
            X509v3 Authority Key Identifier:
                keyid:5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3138362e3139352e3232342e302f32302d3234203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:56:a9:0b:ae:32:31:80:e0:fa:20:df:ed:16:c2:b3:55:
         03:1b:f6:9f:8c:ec:1e:a1:5a:76:b5:d5:f8:a0:71:63:75:85:
         14:da:bb:1d:61:08:5e:81:5a:3a:f4:1a:9c:ed:30:9a:51:84:
         54:bd:bc:c3:71:5f:01:5b:77:fe:d8:eb:29:52:f8:e6:67:de:
         49:b5:86:48:20:f1:6b:4b:3a:d2:8a:b1:34:f6:c3:e4:ab:3b:
         90:4e:40:84:f6:3f:0e:ba:80:44:56:6c:29:b3:b0:d3:d6:f2:
         b1:51:a7:b4:f9:ff:2f:49:88:92:f3:f3:d7:92:12:02:90:82:
         fc:07:bd:6e:31:89:ed:5b:55:60:28:53:87:09:41:ce:4d:cd:
         04:92:5d:4b:cc:f2:06:4d:70:fd:6c:1e:55:46:a7:e9:c6:36:
         c9:be:3f:d0:de:ef:37:f6:ed:dc:b4:8b:35:4b:0d:2e:66:f6:
         de:eb:76:77:7a:84:0b:30:9e:60:4a:b8:a1:6f:02:34:65:fd:
         5c:8b:0a:6b:01:3d:f1:76:32:c8:61:ca:3a:97:df:a9:ff:99:
         ff:1a:d1:49:52:a9:7f:9c:57:74:83:92:5b:47:80:a1:e9:2b:
         7d:9a:25:f7:34:a0:7f:a4:b1:8d:34:48:7c:c4:28:0a:d7:6b:
         e2:f4:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:50:15 2025 by rpki-client