Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39392e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e39392e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          O1gmvx6zQPbkUDdUNT66Bn4nQb8ExBCNBbSL3iBtaCQ=
Subject key identifier:   47:EB:7D:D5:0D:B6:54:D6:44:5D:D0:B4:A6:6F:23:21:9E:31:E4:4E
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       60FA38BDFD05D0A816175982CC238461106E85BB
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39392e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:27:22 +0000
ROA not before:           Thu 02 Jan 2025 19:22:22 +0000
ROA not after:            Thu 01 Jan 2026 19:27:22 +0000
asID:                     264141
IP address blocks:        186.250.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fa:38:bd:fd:05:d0:a8:16:17:59:82:cc:23:84:61:10:6e:85:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:22:22 2025 GMT
            Not After : Jan  1 19:27:22 2026 GMT
        Subject: CN=47EB7DD50DB654D6445DD0B4A66F23219E31E44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:2a:21:87:41:e2:e4:af:b1:a3:da:2b:b4:
                    53:c6:86:b4:21:90:e7:49:ac:49:ac:7f:64:7d:ae:
                    f1:d0:05:39:24:38:13:65:f1:70:38:0d:79:af:e5:
                    97:0d:ac:a7:21:57:c2:48:bd:da:b7:f9:6d:7e:7c:
                    03:d8:24:28:f7:33:47:23:b3:80:2c:db:52:96:e3:
                    a9:06:f2:89:cc:ee:24:2e:59:36:0c:b5:f8:58:96:
                    a8:7e:48:9a:d0:0e:fb:97:8f:c2:07:df:bf:ff:f4:
                    52:dc:e4:4f:99:c7:64:95:48:f2:0d:4f:32:ec:7c:
                    ad:ee:a0:18:16:c2:36:5a:49:11:12:1b:a8:77:e8:
                    a6:e0:f8:c2:76:c7:e7:5d:a8:cf:da:f9:54:29:8b:
                    98:a4:bc:ac:cb:01:8e:7a:17:4f:6a:05:6e:c1:73:
                    cb:8a:83:c5:98:03:bd:3a:7a:dc:65:79:d3:d8:20:
                    c9:65:65:3f:cb:fc:9b:79:29:f7:f8:92:ad:af:aa:
                    a9:69:de:6e:97:40:60:48:c5:3e:ac:55:65:f6:9f:
                    07:be:b7:09:c0:62:69:8f:ca:ee:cc:77:a3:f7:29:
                    8e:44:77:00:fa:e8:7d:da:21:dd:f4:a8:e0:87:a2:
                    26:66:01:e6:1b:ab:11:84:19:17:44:b8:8c:aa:0b:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EB:7D:D5:0D:B6:54:D6:44:5D:D0:B4:A6:6F:23:21:9E:31:E4:4E
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39392e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:08:b7:90:f2:03:db:5f:71:f5:d4:66:d5:7c:d7:80:d9:5c:
         49:fa:9d:3b:bd:96:b1:75:b4:8d:f1:6f:99:21:dd:12:19:58:
         c3:4d:ca:80:87:51:46:3a:4d:d8:6f:4c:c8:3b:92:8a:13:e2:
         c6:bf:07:25:10:aa:32:e3:e2:7b:c2:a0:fe:bb:97:2f:3d:5b:
         e9:5b:85:ab:43:e4:94:a2:e4:7c:20:77:c5:78:7b:77:a7:9c:
         aa:53:a5:32:03:52:2e:5d:6a:67:6b:35:94:79:5d:81:46:47:
         e3:05:84:54:9e:b2:e6:99:df:53:80:0f:ae:5d:0b:d2:f9:56:
         cd:cb:bd:32:34:f8:12:2a:e1:8a:5e:94:99:29:ba:c4:d3:e2:
         dc:0e:02:57:f9:93:a4:f5:f7:40:00:1b:84:0e:b2:b9:53:5b:
         76:b8:ec:78:26:c4:b7:b1:dc:e1:46:36:c7:2c:18:6c:47:d3:
         a3:25:ad:f1:f0:34:d9:2a:70:9c:5f:6f:aa:99:1c:f4:31:3b:
         c8:b7:08:92:86:c8:2a:9c:22:24:0a:a4:a9:5e:0b:73:00:47:
         d2:27:40:1f:f8:43:50:6f:51:e7:c5:66:66:86:93:3e:0c:e3:
         7e:33:ab:76:8d:b4:3b:6a:9f:4a:f7:01:e8:ad:d7:57:3b:d4:
         8d:47:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:22 2025 by rpki-client