Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=
Subject key identifier:   34:1F:1E:AC:56:8C:A8:E8:69:B2:81:FE:A3:9F:C4:FA:28:C9:7D:5C
Certificate issuer:       /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Certificate serial:       6F71367612792E147CB56283EB9B7CCA4EC0729B
Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 07 Mar 2025 00:33:41 +0000
ROA not before:           Fri 07 Mar 2025 00:28:41 +0000
ROA not after:            Fri 06 Mar 2026 00:33:41 +0000
asID:                     262754
IP address blocks:        186.219.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl
                          rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:71:36:76:12:79:2e:14:7c:b5:62:83:eb:9b:7c:ca:4e:c0:72:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
        Validity
            Not Before: Mar  7 00:28:41 2025 GMT
            Not After : Mar  6 00:33:41 2026 GMT
        Subject: CN=341F1EAC568CA8E869B281FEA39FC4FA28C97D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:ba:df:9e:c9:7b:5d:28:51:9c:56:89:45:
                    da:77:ec:41:a4:b1:ba:4a:56:e5:22:fe:5b:bd:34:
                    91:0c:c1:46:dd:2c:90:93:c0:13:aa:d5:ca:84:6e:
                    73:37:22:f7:cf:11:5c:62:b7:67:e0:22:fa:e3:9b:
                    40:63:ee:14:63:5e:7a:d4:a8:13:3d:04:19:4e:49:
                    b1:50:c9:9f:14:70:43:d3:d4:ea:05:8b:f3:4a:e1:
                    8b:62:df:db:fa:43:99:6d:0f:db:1e:4b:d2:84:67:
                    fb:28:75:24:25:56:a6:fb:ca:bd:a7:2e:c3:70:41:
                    3a:d1:32:4e:dc:be:64:8e:f1:8c:15:22:83:99:25:
                    d4:7a:62:cc:7c:d5:a7:38:ea:79:47:9e:f9:69:0f:
                    b3:1e:d0:df:8b:0e:27:20:d5:e4:ee:aa:17:91:ef:
                    8c:34:2a:0f:56:af:b3:48:ca:eb:a4:3d:95:95:89:
                    63:65:e1:48:0b:bb:a3:85:d8:79:d4:3d:85:38:e1:
                    46:d3:59:24:65:d4:9c:ca:5a:4c:47:38:d4:c4:ce:
                    e1:63:24:52:77:af:83:c0:20:a6:6b:eb:21:02:31:
                    f5:af:0d:8e:d7:ae:3b:1d:e2:68:8b:5c:c3:a5:14:
                    a5:71:02:8b:b7:95:4d:2a:cc:64:e0:84:88:15:9a:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1F:1E:AC:56:8C:A8:E8:69:B2:81:FE:A3:9F:C4:FA:28:C9:7D:5C
            X509v3 Authority Key Identifier:
                keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ec:3c:5d:3f:ba:9a:4d:40:31:35:90:63:f6:7e:bf:c2:23:
         69:d2:63:19:cb:e7:8c:71:9c:2b:82:a4:5b:73:c0:e2:cd:8b:
         cc:bd:80:f6:58:f5:75:f1:eb:2c:01:10:db:0e:cf:fb:cf:f0:
         13:78:7d:30:39:13:35:65:64:20:41:b6:46:26:07:ad:36:06:
         e1:c6:58:cf:a2:3e:5c:a5:2c:df:d1:72:9e:75:b3:40:0f:6b:
         2c:1c:bd:3a:f9:e9:81:58:83:1c:51:de:2f:6f:c8:8f:b6:1a:
         de:89:27:f2:42:79:cf:cb:1f:2f:45:da:71:e2:b6:98:50:6f:
         4d:7e:de:27:5c:f3:eb:a9:04:81:65:25:39:ca:9a:f5:c0:96:
         71:05:96:af:d9:19:d1:15:22:f7:e8:2f:99:60:29:e2:e1:2e:
         97:f2:51:0a:39:ac:29:51:48:05:98:d1:63:27:b0:64:8e:92:
         2e:ce:b6:c4:d9:f2:ab:3d:c7:6a:60:98:6d:a6:44:cb:49:55:
         de:21:c5:69:75:ee:1d:d8:85:50:31:99:07:db:bb:a8:ec:0d:
         d1:cd:67:ab:b1:aa:62:db:28:d0:a7:60:60:f8:6e:95:ab:77:
         a7:c2:1d:19:8c:7c:bb:4c:e5:38:15:54:44:9d:37:86:79:f1:
         ef:ca:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:38 2025 by rpki-client