Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa
File:                     3138362e3235302e38382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          K6UD6QNlfsj1jkp9NW/QzfzfDKQEVRQAZd2XExl828g=
Subject key identifier:   90:F1:62:A1:21:A2:0D:B0:B5:B5:4E:96:8F:CE:3A:A6:78:3E:A5:46
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       5328C1BB988860BC7B880D3CD36D98955BC55885
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa
Signing time:             Fri 08 Nov 2024 18:32:39 +0000
ROA not before:           Fri 08 Nov 2024 18:27:39 +0000
ROA not after:            Fri 07 Nov 2025 18:32:39 +0000
asID:                     28146
IP address blocks:        186.250.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:28:c1:bb:98:88:60:bc:7b:88:0d:3c:d3:6d:98:95:5b:c5:58:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:27:39 2024 GMT
            Not After : Nov  7 18:32:39 2025 GMT
        Subject: CN=90F162A121A20DB0B5B54E968FCE3AA6783EA546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:35:e0:55:b0:ab:b0:ef:fd:13:1a:c9:e4:
                    4a:48:4f:15:4b:bd:2f:7d:79:7a:11:47:a4:7a:c9:
                    a7:8b:37:98:38:66:73:c0:9e:2d:9e:6f:f5:7a:6c:
                    ae:93:90:d4:e7:94:4e:72:c4:60:5b:01:46:29:8e:
                    6a:76:e9:ca:07:9f:c2:ef:05:68:53:91:53:f0:cb:
                    78:46:96:36:c6:06:78:0c:2d:dd:94:b5:36:8b:6f:
                    04:7e:a1:0b:d0:aa:e7:eb:6f:ea:ce:09:40:65:eb:
                    66:76:8e:fb:24:d1:7e:f2:1f:cb:e2:62:4b:66:07:
                    01:37:92:9e:ac:5f:e2:8f:86:49:f8:de:e4:b4:e0:
                    73:1b:95:3a:ad:8d:47:4c:9a:f8:f8:70:0e:ac:ec:
                    07:c4:e1:09:c4:39:10:d9:b4:49:d3:5d:09:01:55:
                    aa:49:a3:9b:75:1f:11:6c:f2:e0:f8:8b:bd:62:6b:
                    59:26:27:01:0c:44:ae:4c:93:88:46:2d:37:f6:25:
                    38:5b:be:19:43:f3:36:cb:22:c6:18:a2:b1:5b:9f:
                    92:88:5e:c3:10:e5:19:c8:cf:5b:d7:0f:2e:95:76:
                    0c:92:f1:79:59:c6:fc:5c:ef:47:1f:b5:70:89:b1:
                    01:b0:fb:f2:28:91:9c:49:26:ce:a7:ad:f5:88:81:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:62:A1:21:A2:0D:B0:B5:B5:4E:96:8F:CE:3A:A6:78:3E:A5:46
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:c4:af:ac:31:36:90:7a:f7:02:0c:b1:1a:68:4b:5b:40:
         32:fe:cb:0b:e2:68:7f:f1:7f:7b:20:78:c4:2c:25:bc:1c:c4:
         37:5d:9f:53:c7:df:0c:d6:f0:66:13:26:28:1b:93:6f:36:63:
         75:91:8e:de:2d:72:a8:87:6c:ac:21:c5:dd:74:64:10:59:69:
         55:9d:74:54:c6:5d:08:77:c7:ad:18:1d:06:71:cb:a8:c7:50:
         fa:a3:c1:ee:c0:56:b3:52:43:5a:8c:77:35:6b:1c:80:94:d3:
         29:19:e2:d9:8b:f7:46:3a:40:72:0d:9c:a4:06:35:08:c9:db:
         c4:6f:60:5b:09:ee:01:0c:09:79:cb:6e:25:35:fd:3e:48:22:
         df:45:be:6c:65:27:11:3c:f4:53:a4:51:20:a6:c0:66:53:5c:
         56:19:78:5b:98:cc:aa:81:8b:87:e1:23:d9:d8:78:ce:d0:d5:
         0d:f5:9c:f4:02:6f:59:df:3f:83:4a:17:b3:d2:f3:a4:d8:db:
         ba:78:a9:13:72:7f:e1:76:06:20:7e:6a:58:8b:84:f6:0d:22:
         cf:7a:9d:0f:18:90:c0:46:81:70:44:2a:aa:0e:a9:63:05:02:
         b5:ee:ee:99:7d:6e:e8:bb:7e:14:87:a4:67:ca:f6:d0:d7:6b:
         f0:a2:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:57 2025 by rpki-client