Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa
File:                     3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa (raw, json)
Hash identifier:          54rr5RCaisZosDUUzHYUTcqzx+/15zwbN9+6awS+NXc=
Subject key identifier:   15:BC:5B:A6:7B:A1:02:AF:92:31:59:A9:98:25:5F:A5:08:5A:64:49
Certificate issuer:       /CN=FE2FB4044730F5FD718399AEBDC9295665F44072
Certificate serial:       086C8EB2C805D065B5F93DC5231C040821785B18
Authority key identifier: FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa
Signing time:             Tue 18 Mar 2025 17:04:16 +0000
ROA not before:           Tue 18 Mar 2025 16:59:16 +0000
ROA not after:            Tue 17 Mar 2026 17:04:16 +0000
asID:                     267453
IP address blocks:        181.191.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6c:8e:b2:c8:05:d0:65:b5:f9:3d:c5:23:1c:04:08:21:78:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2FB4044730F5FD718399AEBDC9295665F44072
        Validity
            Not Before: Mar 18 16:59:16 2025 GMT
            Not After : Mar 17 17:04:16 2026 GMT
        Subject: CN=15BC5BA67BA102AF923159A998255FA5085A6449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:c2:e9:dd:c7:39:35:62:60:22:58:f9:34:
                    f2:09:5e:a6:77:33:0d:0f:f0:e5:f8:2b:e9:fa:a5:
                    db:c7:1a:d8:37:fd:ff:23:64:73:f7:ce:4b:ad:d6:
                    2f:5e:55:9e:3c:b0:e7:9d:71:8a:5d:94:65:5b:25:
                    db:58:47:de:50:35:9d:40:9a:97:5c:34:4d:60:52:
                    98:49:cf:2f:cd:92:22:75:40:84:ff:2e:c9:a1:4c:
                    79:07:3d:a5:64:08:bd:42:d1:d6:f9:e7:b5:2a:30:
                    e8:c9:a9:81:68:b9:59:9b:43:f7:2e:47:47:76:0d:
                    26:6c:21:20:c0:bc:d6:8e:ee:6d:f2:1c:01:13:e6:
                    33:96:54:81:7e:8d:1b:da:6b:25:1d:c5:67:2e:18:
                    51:f8:6e:e5:86:62:f6:32:3f:99:0c:d6:94:72:49:
                    b5:dd:fd:f3:90:af:76:33:36:af:05:fc:96:9a:17:
                    42:e4:8f:98:1e:fa:6f:fb:e1:a7:31:46:89:90:86:
                    98:72:aa:07:54:97:31:56:8f:6a:23:40:c3:d1:44:
                    bc:e0:bc:0a:b4:7d:2e:aa:a3:42:da:36:69:63:4e:
                    80:be:0c:89:4b:4f:55:4b:d1:17:41:aa:12:93:92:
                    98:3a:de:f4:6e:85:a7:ba:2d:3f:2b:06:33:92:21:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:5B:A6:7B:A1:02:AF:92:31:59:A9:98:25:5F:A5:08:5A:64:49
            X509v3 Authority Key Identifier:
                keyid:FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:99:5b:ff:56:11:80:3a:63:7a:60:0e:8c:15:4b:11:d2:04:
         3b:af:32:1e:6a:37:72:65:3e:5c:2e:a4:ad:59:fc:2d:fa:48:
         e1:1e:21:fa:4f:23:16:78:d9:1f:9b:86:ab:fd:3a:77:b5:52:
         47:cc:24:ee:d7:9e:f1:02:12:c6:99:f4:05:a6:dc:c3:01:74:
         19:52:16:e6:a2:bd:42:c6:1b:bb:d2:b4:3a:ea:1f:46:a9:c0:
         f8:a4:a8:26:1f:ae:2d:f9:a6:ce:10:91:74:c8:53:11:92:ac:
         82:07:d8:1c:5a:90:4d:90:4f:40:3b:e9:e1:24:9b:d4:16:2c:
         f3:68:e4:27:3a:19:a1:89:fd:2d:64:b6:e2:cd:d4:90:19:f2:
         b1:31:12:fb:54:cb:04:22:68:49:96:47:65:60:04:51:60:8c:
         eb:b5:6b:bb:3b:89:6d:d8:93:61:dd:6e:42:37:90:b9:fe:e4:
         5a:c0:dc:7b:69:0e:24:16:a6:58:2d:08:80:8a:73:d0:fa:e8:
         5c:2e:38:07:71:d6:4b:04:f0:87:0f:e8:a5:a9:5b:5b:77:37:
         04:d9:23:f4:03:2d:bc:03:86:5f:8c:b9:73:4e:61:97:fa:b2:
         7d:0d:67:c4:81:fc:6f:ee:f5:1c:ef:e8:5d:46:7e:65:bd:38:
         8e:34:5d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:33:09 2025 by rpki-client