Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa
File:                     3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa (raw, json)
Hash identifier:          HZaQGYZhuYbPmiSYTQlFoQ9P/XaoPw+zfSwUczQKaGk=
Subject key identifier:   76:48:83:98:09:66:9B:D5:E6:51:F4:35:B4:E2:0B:DD:56:FA:25:C6
Certificate issuer:       /CN=3CB1370100AB2291FE24983311386BE8544EB443
Certificate serial:       32A794BB3B34FE2FC412E1CBA13016A51A87ADD3
Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa
Signing time:             Wed 28 May 2025 18:46:38 +0000
ROA not before:           Wed 28 May 2025 18:41:38 +0000
ROA not after:            Wed 27 May 2026 18:46:38 +0000
asID:                     61583
IP address blocks:        186.237.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a7:94:bb:3b:34:fe:2f:c4:12:e1:cb:a1:30:16:a5:1a:87:ad:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443
        Validity
            Not Before: May 28 18:41:38 2025 GMT
            Not After : May 27 18:46:38 2026 GMT
        Subject: CN=7648839809669BD5E651F435B4E20BDD56FA25C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:63:57:d5:3d:26:9e:f1:7e:88:fe:b1:b6:
                    a8:fa:23:2d:d6:06:9b:e3:01:a9:03:ad:30:ee:05:
                    8d:93:e6:ef:64:1e:40:dd:cb:ea:3b:fd:c7:79:e5:
                    84:36:00:86:19:b6:a1:cb:1d:77:21:f2:bd:8a:0c:
                    c1:a7:a4:aa:b3:ec:7e:6a:f1:56:04:c0:45:cd:7a:
                    11:1b:8f:51:0d:ac:64:67:ea:1c:96:15:33:01:25:
                    25:fd:98:f8:c2:8a:f9:9d:ef:26:cb:d8:0c:29:b2:
                    ca:0e:dd:13:f8:cb:2f:0a:c8:ac:32:3a:47:20:45:
                    b9:7d:e1:7a:21:a9:4c:bf:46:77:19:e7:04:bb:60:
                    27:cd:42:ef:e4:ba:2d:80:69:38:de:d6:bd:49:45:
                    84:5e:47:9b:d7:f1:25:8b:3e:d4:49:71:5e:c0:dd:
                    65:69:6e:ef:eb:5d:19:a9:d7:4d:74:f4:6f:c7:66:
                    a9:e3:0f:b8:12:45:50:db:8e:36:8f:5f:0b:ef:25:
                    20:40:d0:95:aa:f7:cf:97:99:52:14:85:53:e4:61:
                    1b:e4:5e:47:56:e0:5c:16:d2:04:8c:59:47:f1:15:
                    3b:63:44:82:a0:33:00:95:73:69:07:8a:71:7d:13:
                    e0:43:03:0c:da:e9:43:a9:ec:6b:1d:7d:04:2e:f9:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:48:83:98:09:66:9B:D5:E6:51:F4:35:B4:E2:0B:DD:56:FA:25:C6
            X509v3 Authority Key Identifier:
                keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:1a:1f:e1:17:83:46:80:0d:ba:6d:12:63:f1:4c:27:52:
         73:0e:27:1a:28:b6:41:02:c7:a1:0f:87:66:0d:57:7b:ef:da:
         a0:71:aa:49:48:b4:f4:59:34:b7:d1:49:49:f8:1e:05:da:c9:
         b5:1c:8d:7e:34:c7:ff:dd:bd:8e:4d:a9:8c:1a:53:7b:6c:91:
         15:97:80:c4:7c:fc:16:46:77:a1:63:f5:ec:f9:15:a2:84:13:
         95:07:98:81:5d:5d:f5:93:94:31:dc:7a:44:e1:b7:1e:72:9b:
         d1:6e:74:6a:ae:c5:ee:ac:a3:6c:f4:94:ad:ba:b1:a0:27:39:
         18:26:83:b3:fc:97:b9:a6:ac:7e:bd:21:09:43:b5:93:e8:60:
         2e:b8:fb:9e:1f:80:0f:16:71:a3:a0:a6:e4:b9:33:3a:6a:0c:
         51:85:fe:2e:8a:11:65:2d:62:6e:44:5e:0d:cc:88:04:9f:8d:
         3e:d9:79:06:0a:c9:28:e5:8a:5e:56:f8:7f:87:92:2f:93:c4:
         31:80:b3:8c:67:5c:5d:19:57:eb:e9:d7:b5:47:06:23:8c:a3:
         bc:80:ec:db:72:e8:44:64:bc:77:22:2a:1a:f2:7d:f1:92:56:
         9e:e6:d6:43:d8:23:00:82:8b:30:3a:8a:9d:a1:fb:0e:2e:4a:
         7e:8f:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:19:08 2025 by rpki-client