Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa (raw, json)
Hash identifier:          PRy9+j3FSAK1AybKNhOPJ0qAGgfyLLHRqR8XKObcRno=
Subject key identifier:   A9:B9:6E:71:85:DB:FE:DA:ED:30:9F:30:D5:B4:7A:26:E0:2E:1A:E3
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       14A05264DB825816CF1B271F44F7B8ABC8C760F0
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa
Signing time:             Thu 06 Mar 2025 02:00:09 +0000
ROA not before:           Thu 06 Mar 2025 01:55:09 +0000
ROA not after:            Thu 05 Mar 2026 02:00:09 +0000
asID:                     263101
IP address blocks:        186.225.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:52:64:db:82:58:16:cf:1b:27:1f:44:f7:b8:ab:c8:c7:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Mar  6 01:55:09 2025 GMT
            Not After : Mar  5 02:00:09 2026 GMT
        Subject: CN=A9B96E7185DBFEDAED309F30D5B47A26E02E1AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:ec:53:b1:be:7f:ac:63:79:7c:99:3f:69:
                    18:de:1d:ce:32:61:d4:5b:90:82:51:bd:64:41:c9:
                    de:e4:4a:38:e3:e7:4b:18:fc:91:cb:60:3a:21:3a:
                    99:5b:bf:cd:05:17:80:24:5b:ef:cb:03:b6:69:0d:
                    fc:97:81:1b:48:b7:ac:dd:f0:ca:2a:f7:10:08:6b:
                    32:6e:30:94:08:ee:98:de:8a:48:ba:34:6a:1b:91:
                    4d:05:52:56:66:d2:40:bb:d2:1f:4b:e6:a3:5f:2c:
                    96:9c:f3:04:bb:fa:84:63:97:4a:60:6e:f9:ed:ac:
                    a8:f8:06:06:bc:1a:2d:9b:6f:71:fb:f4:e6:2c:f3:
                    70:24:7f:22:07:13:5c:fd:04:2e:c7:d0:64:b3:94:
                    30:e6:14:76:eb:da:60:4c:d7:b9:2b:89:9f:18:d4:
                    09:7c:b5:22:9f:fe:6e:3a:bc:90:7f:bc:6e:94:43:
                    68:d7:f2:60:59:99:e1:f4:66:15:7a:17:af:d6:93:
                    ed:7d:49:1b:be:e1:6a:43:c3:24:c9:31:97:c8:2c:
                    72:66:9a:73:81:c1:57:c6:e5:7e:79:00:ed:00:0f:
                    37:24:3f:20:dd:f4:5e:ee:a5:2f:e6:86:9f:a9:65:
                    ed:f6:2a:d9:41:3c:85:24:83:f7:42:93:eb:d2:34:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B9:6E:71:85:DB:FE:DA:ED:30:9F:30:D5:B4:7A:26:E0:2E:1A:E3
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:08:34:e6:46:d1:91:e2:2b:82:a0:19:7a:da:b4:d8:63:
         d8:a7:4d:70:2a:08:01:00:ca:5d:5b:3b:2b:ae:a6:e7:bc:e9:
         d2:34:6e:af:e4:54:af:5a:a1:64:46:06:cf:43:15:bc:88:4f:
         c6:29:83:19:35:5a:84:0c:9a:8c:71:98:ec:62:3a:da:39:6b:
         9b:3f:8f:2b:4d:94:a7:6d:4d:4f:bc:59:aa:5d:0b:e1:af:fa:
         fd:62:20:ff:90:5d:6f:3a:64:d0:43:02:71:4b:e8:05:8f:6b:
         59:6b:70:99:80:71:61:a9:79:9a:ad:b4:68:b0:a8:f8:37:92:
         58:20:7e:0c:29:a5:96:92:54:6e:5d:cc:f5:07:75:d0:09:b1:
         be:03:21:6e:49:77:fe:47:29:01:2d:b4:1c:ee:8f:06:27:1b:
         a6:cc:a8:77:58:19:11:5e:b6:93:3e:7b:6e:34:07:1a:e9:0d:
         83:d4:ab:6d:0c:1b:b0:f7:3f:74:9a:48:b9:99:d8:9d:94:50:
         b8:b4:0d:a5:3f:ae:1f:8e:78:5e:d5:80:1f:e3:28:78:76:63:
         c1:62:ac:4b:dd:99:a5:bd:e7:15:42:f2:43:79:d5:56:52:28:
         bc:80:0e:9f:bd:cd:ca:2f:b2:22:4b:52:67:f1:9a:71:b4:4e:
         cb:62:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:31:16 2025 by rpki-client