Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38392e302f32342d3234203d3e20323730393236.roa
File:                     3138362e32362e38392e302f32342d3234203d3e20323730393236.roa (raw, json)
Hash identifier:          lTS5e0RbQx2mukhAeXzV+d8lE8O0hWH3l2oHpAEyzh0=
Subject key identifier:   6F:FD:EA:47:45:23:EC:DE:36:5F:83:FF:78:03:45:6C:90:13:83:62
Certificate issuer:       /CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
Certificate serial:       12192E3FDC8CB1B5C7FA5A4AC3614D09F3BC0AE4
Authority key identifier: 5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38392e302f32342d3234203d3e20323730393236.roa
Signing time:             Thu 06 Mar 2025 09:41:14 +0000
ROA not before:           Thu 06 Mar 2025 09:36:14 +0000
ROA not after:            Thu 05 Mar 2026 09:41:14 +0000
asID:                     270926
IP address blocks:        186.26.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl
                          rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:19:2e:3f:dc:8c:b1:b5:c7:fa:5a:4a:c3:61:4d:09:f3:bc:0a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Validity
            Not Before: Mar  6 09:36:14 2025 GMT
            Not After : Mar  5 09:41:14 2026 GMT
        Subject: CN=6FFDEA474523ECDE365F83FF7803456C90138362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:4a:e2:81:68:b8:86:f7:ac:36:d5:e7:31:
                    af:11:26:2b:15:07:39:27:60:2b:d2:22:88:2e:17:
                    c2:9f:69:c3:b4:d4:c4:07:2a:63:bd:f6:76:fe:dc:
                    47:14:97:28:e6:fd:a4:c7:66:dd:48:0e:ac:d1:00:
                    e6:57:e4:cb:ea:a8:5c:e0:81:13:cf:5b:8c:3a:7d:
                    a9:9c:3f:91:b9:97:9a:88:13:f9:e6:b2:59:ed:76:
                    42:ac:46:d9:ce:b6:73:32:ec:ff:1b:3f:d9:cd:c2:
                    28:0b:b4:db:1f:d3:b7:48:48:1e:5b:46:d3:c4:c2:
                    47:50:cf:7c:e5:24:cd:33:d7:90:45:ab:8a:82:aa:
                    b7:e7:d1:81:4b:c1:11:79:48:40:c8:be:5f:ff:92:
                    59:dc:21:39:11:07:b0:ec:fa:42:93:aa:db:c0:90:
                    7f:7f:14:17:c7:ea:74:cc:66:27:b5:c1:a8:2b:2b:
                    7e:bd:8b:41:e4:fe:72:c1:11:69:8c:8b:53:f0:99:
                    ab:be:2e:9e:1a:67:d9:f6:21:3d:1b:68:ab:4e:4d:
                    35:ec:96:cb:78:9a:79:db:97:9e:94:b0:e5:e3:0f:
                    0f:7f:b9:c4:27:6d:85:28:8e:85:d7:0f:59:5b:bf:
                    2e:8f:60:81:da:3d:53:c2:7f:85:98:7d:88:36:a3:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FD:EA:47:45:23:EC:DE:36:5F:83:FF:78:03:45:6C:90:13:83:62
            X509v3 Authority Key Identifier:
                keyid:5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38392e302f32342d3234203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:2c:76:c5:f6:d0:b6:90:af:6e:d7:b0:75:70:33:50:f6:
         55:a8:b6:39:23:f7:89:cf:54:27:a6:96:cf:0c:7a:78:ae:25:
         05:79:de:99:19:f1:83:42:ea:2a:2d:e3:3c:a4:d0:91:f1:b1:
         78:7b:56:26:3c:3e:c1:1c:0b:7c:12:31:83:65:9c:f1:27:b2:
         73:96:6a:21:f6:28:a8:bf:36:7b:72:3b:18:9d:66:b4:5d:74:
         8f:c2:99:88:d3:dd:ed:2f:e9:98:cd:75:f2:c8:0e:51:83:09:
         50:19:22:e2:9c:db:8a:47:61:fe:3f:76:33:ae:9c:4b:3a:e8:
         6a:a3:80:31:3f:49:8b:b8:af:30:17:a9:d4:ef:a5:c7:e3:68:
         49:ff:ca:84:92:c2:3c:75:c0:ff:36:61:1f:20:25:37:88:b0:
         8c:da:17:71:0f:8c:98:fb:24:f5:3b:2d:d6:d6:f9:a7:d4:22:
         15:40:c6:51:42:53:75:64:35:b1:a9:8a:7d:84:93:25:4f:fd:
         71:2d:e9:8f:35:fe:dd:a4:85:96:5e:c7:47:c3:34:e1:9e:c1:
         10:f4:2d:fe:4c:17:10:90:41:4f:1a:19:11:5e:4e:1f:a8:53:
         d5:d4:6b:13:93:b7:79:54:0c:72:76:38:ba:a1:13:15:ab:74:
         5f:19:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:39:58 2025 by rpki-client