Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          JsT+fA6vkLjslVVLVgsEwQsbZPCOUsv+Hv8XXsb15NU=
Subject key identifier:   8E:C8:7B:5C:24:D1:E9:CA:62:C7:DD:AA:B2:6B:F2:D5:0D:E5:01:41
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       54D9F00E2E02B217651B775CD7C6E00918972E3F
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 06 Mar 2025 02:00:07 +0000
ROA not before:           Thu 06 Mar 2025 01:55:07 +0000
ROA not after:            Thu 05 Mar 2026 02:00:07 +0000
asID:                     263101
IP address blocks:        186.225.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d9:f0:0e:2e:02:b2:17:65:1b:77:5c:d7:c6:e0:09:18:97:2e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Mar  6 01:55:07 2025 GMT
            Not After : Mar  5 02:00:07 2026 GMT
        Subject: CN=8EC87B5C24D1E9CA62C7DDAAB26BF2D50DE50141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:e9:42:6d:e9:a7:3e:71:ae:0a:08:3c:d4:
                    33:ca:8f:1c:99:9b:0e:45:f3:4c:20:5b:30:30:b0:
                    08:c5:4d:41:a9:0c:fd:ee:36:51:92:45:f7:64:af:
                    6c:ef:b8:e7:c3:a8:3d:5c:a2:ec:d2:43:a9:27:59:
                    f9:f0:dc:4b:f3:f6:19:4a:b3:a6:de:f6:5d:b4:22:
                    1e:cf:87:69:f6:42:06:92:68:d4:bd:5f:72:a7:fa:
                    83:18:e0:ed:61:5e:57:8d:04:97:d9:0e:3d:fa:93:
                    8c:0c:b3:89:33:55:f9:45:5d:57:7f:d0:81:50:a9:
                    bc:1b:95:6a:4b:33:da:0e:8a:cb:14:36:1c:55:90:
                    1f:ee:2e:33:b7:73:1a:e0:ba:f5:7a:e8:be:ee:9b:
                    e2:00:ea:f2:3e:ed:c6:38:ae:d1:e3:73:c2:09:7d:
                    ac:35:70:93:36:e9:1a:a8:69:8a:da:66:80:a6:13:
                    63:21:e9:fd:b6:91:65:73:bf:e5:10:4c:f8:4d:42:
                    5b:fe:d0:34:01:1c:c8:f1:e2:72:50:8c:a8:b4:66:
                    69:81:d0:f0:be:94:f2:41:4c:e8:f3:f6:2f:64:6d:
                    4a:ec:73:5c:da:e8:39:04:45:7b:78:b5:70:ea:78:
                    1b:6d:22:60:6e:b8:2c:53:69:ad:4f:c3:fd:53:74:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:7B:5C:24:D1:E9:CA:62:C7:DD:AA:B2:6B:F2:D5:0D:E5:01:41
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:cc:7d:de:0b:28:4d:c8:7b:a3:7d:c1:15:db:f8:ca:e8:81:
         ef:3c:5e:0a:e7:a1:41:78:f8:90:e8:43:a0:61:6a:c2:7d:99:
         6a:29:56:62:c9:bf:3e:3d:2e:cc:dd:99:dd:a9:45:2f:a7:fd:
         ea:5b:2b:b0:94:a5:e8:ba:99:b8:44:b0:c6:71:ec:f9:a4:d5:
         d8:48:cb:ef:f1:b0:a9:b6:11:9d:e9:13:0f:58:6b:ca:03:b7:
         7c:3c:ce:e1:05:9a:ed:25:c4:6c:57:02:90:1b:2c:30:7e:43:
         78:64:0a:9c:b3:2e:93:3a:91:d7:33:b8:4c:34:49:92:dc:bf:
         36:77:35:2e:23:d1:32:9a:32:7b:bf:9a:42:22:09:c5:09:98:
         e7:cf:cc:f6:99:af:2b:c6:a9:a5:15:f3:a1:48:18:ac:42:fb:
         0a:d1:a4:17:e0:0b:45:ea:b3:dd:3a:99:1a:c0:55:5f:71:e8:
         c4:5c:f8:2f:a1:29:6f:96:09:06:41:5b:76:c0:b6:00:96:23:
         d6:1c:4b:3d:8b:cf:d8:b8:52:41:97:34:e8:83:2c:ed:2b:f8:
         3d:a0:35:61:32:d0:19:cc:e9:f9:ba:ad:45:b2:da:72:7b:1c:
         ac:d7:14:6f:a1:08:b4:e2:4d:c4:83:81:67:73:ec:97:2c:d7:
         27:fb:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:28:48 2025 by rpki-client