Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          jbdenlCqSe9zaTPh9AOeZ6XJOxRWmEZrPnuYUKkFsKA=
Subject key identifier:   3C:FA:A4:FC:66:DF:0F:A1:F7:F2:E4:33:12:56:2B:D2:62:3E:29:49
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       08727CDCA7664C58DB9372F2DCB94FFC3A084DE6
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:27:30 +0000
ROA not before:           Thu 02 Jan 2025 19:22:30 +0000
ROA not after:            Thu 01 Jan 2026 19:27:30 +0000
asID:                     264141
IP address blocks:        186.250.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:72:7c:dc:a7:66:4c:58:db:93:72:f2:dc:b9:4f:fc:3a:08:4d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:22:30 2025 GMT
            Not After : Jan  1 19:27:30 2026 GMT
        Subject: CN=3CFAA4FC66DF0FA1F7F2E43312562BD2623E2949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:b5:17:18:6a:69:41:2f:62:76:7a:ad:20:
                    ed:61:6d:0f:74:c2:b9:58:80:1a:1a:b1:06:2f:1b:
                    b9:0d:b9:11:d9:60:24:fd:fe:98:92:20:8e:12:53:
                    d6:3f:b6:f6:8d:96:bd:39:33:0a:a0:9f:df:89:6f:
                    b5:d8:8f:b1:9d:42:45:10:96:69:48:e4:e5:76:9e:
                    fa:fb:f2:1e:4b:aa:88:5a:a4:9e:21:60:4b:1b:95:
                    f7:20:48:87:cb:41:87:12:0f:5f:2a:49:4e:16:9b:
                    62:ad:98:ab:34:45:35:12:5a:c8:07:42:b7:d7:0e:
                    67:63:e1:c8:46:e1:28:2c:41:70:df:ce:0b:8b:63:
                    0c:e7:dd:97:0e:f7:46:be:66:96:98:2c:23:fc:2f:
                    80:d3:a1:cd:30:c7:96:38:3f:52:ad:d8:de:58:1a:
                    d7:e7:b9:87:ef:33:69:96:43:06:4d:b6:6e:d2:14:
                    22:91:3d:92:33:23:88:46:b6:7e:12:53:04:3f:dc:
                    5e:74:05:93:89:83:87:88:0e:1e:80:a0:78:14:d0:
                    2b:6a:3b:f9:ee:d9:28:31:92:43:5c:12:c0:49:8c:
                    82:06:65:0b:9c:4b:80:d6:c4:55:a9:d3:ce:a3:84:
                    2b:ad:c7:ed:52:60:4c:ba:67:a8:34:14:f7:20:7a:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FA:A4:FC:66:DF:0F:A1:F7:F2:E4:33:12:56:2B:D2:62:3E:29:49
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130322e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:21:65:9a:e4:f7:67:34:2e:af:33:e1:fe:c1:39:69:55:87:
         17:89:d0:20:29:24:b1:e5:fe:28:c5:34:dc:ae:9c:1d:15:a0:
         cb:8f:92:bb:34:ed:c3:48:56:c7:9a:bd:0c:67:ae:cf:e0:3d:
         33:51:cc:6f:a4:3b:25:27:74:1a:ad:01:14:5b:30:04:72:51:
         89:77:74:68:3b:e7:b6:e8:cc:52:1d:48:3d:dd:72:be:75:05:
         2a:53:80:8b:1a:87:62:e0:19:44:58:a5:9d:f3:b4:1c:04:ff:
         14:92:4e:2c:61:4a:1c:c8:9c:1c:a1:75:13:63:4a:8b:cb:3f:
         bc:a6:16:ae:07:0b:7b:d5:58:c4:83:3a:d9:b8:2f:6d:17:3e:
         1d:1f:6e:51:34:cb:c5:ed:07:75:92:8d:f2:dc:81:78:2f:56:
         3f:91:6e:0d:56:20:3a:3a:c9:55:aa:2a:b0:2b:49:e0:db:f3:
         10:a3:55:ad:c8:95:29:d7:ed:95:47:5d:3b:9c:d5:16:ad:79:
         b1:fc:c8:43:ed:ae:ba:95:02:93:6d:77:4e:ce:be:f9:b6:17:
         a9:69:65:fd:b7:3d:11:96:64:b1:79:61:df:bd:71:3d:38:86:
         40:14:67:10:bc:fd:50:c4:66:ea:b7:1d:da:4b:e8:65:f9:92:
         22:de:3e:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCHJ83KdmTFjbk3Ly3LlP/DoITeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTAxMDIxOTIyMzBaFw0yNjAxMDExOTI3MzBaMDMxMTAvBgNV
BAMTKDNDRkFBNEZDNjZERjBGQTFGN0YyRTQzMzEyNTYyQkQyNjIzRTI5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsb7UXGGppQS9idnqtIO1hbQ90
wrlYgBoasQYvG7kNuRHZYCT9/piSII4SU9Y/tvaNlr05Mwqgn9+Jb7XYj7GdQkUQ
lmlI5OV2nvr78h5LqohapJ4hYEsblfcgSIfLQYcSD18qSU4Wm2KtmKs0RTUSWsgH
QrfXDmdj4chG4SgsQXDfzguLYwzn3ZcO90a+ZpaYLCP8L4DToc0wx5Y4P1Kt2N5Y
GtfnuYfvM2mWQwZNtm7SFCKRPZIzI4hGtn4SUwQ/3F50BZOJg4eIDh6AoHgU0Ctq
O/nu2SgxkkNcEsBJjIIGZQucS4DWxFWp086jhCutx+1SYEy6Z6g0FPcgenzzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPPqk/GbfD6H38uQzElYr0mI+KUkwHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzEzODM2MmUzMjM1MzAyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr6ZjANBgkqhkiG9w0BAQsFAAOCAQEAVCFl
muT3ZzQurzPh/sE5aVWHF4nQICkkseX+KMU03K6cHRWgy4+SuzTtw0hWx5q9DGeu
z+A9M1HMb6Q7JSd0Gq0BFFswBHJRiXd0aDvntujMUh1IPd1yvnUFKlOAixqHYuAZ
RFilnfO0HAT/FJJOLGFKHMicHKF1E2NKi8s/vKYWrgcLe9VYxIM62bgvbRc+HR9u
UTTLxe0HdZKN8tyBeC9WP5FuDVYgOjrJVaoqsCtJ4NvzEKNVrciVKdftlUddO5zV
Fq15sfzIQ+2uupUCk213Ts6++bYXqWll/bc9EZZksXlh371xPTiGQBRnELz9UMRm
6rcd2kvoZfmSIt4+7Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:29:32 2025 by rpki-client