Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa
File:                     3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa (raw, json)
Hash identifier:          jvgvnr+5T/JysHN6zPmkeFCdio2K6Wx7fZp1CeRwkN8=
Subject key identifier:   55:29:CC:5B:37:70:B9:BD:C9:0E:F0:6C:58:29:07:8A:A0:AE:6E:93
Certificate issuer:       /CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
Certificate serial:       268B42805C15964528869871B1329E6E334999A0
Authority key identifier: E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa
Signing time:             Wed 19 Feb 2025 12:27:31 +0000
ROA not before:           Wed 19 Feb 2025 12:22:31 +0000
ROA not after:            Wed 18 Feb 2026 12:27:31 +0000
asID:                     262779
IP address blocks:        186.227.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 19:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8b:42:80:5c:15:96:45:28:86:98:71:b1:32:9e:6e:33:49:99:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
        Validity
            Not Before: Feb 19 12:22:31 2025 GMT
            Not After : Feb 18 12:27:31 2026 GMT
        Subject: CN=5529CC5B3770B9BDC90EF06C5829078AA0AE6E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:2b:1c:95:07:81:88:0a:79:c6:97:69:c3:
                    17:e5:77:49:7d:57:d5:55:b0:1b:b3:11:7b:e3:8b:
                    1d:89:b8:9b:75:41:24:51:75:5b:41:9d:8e:90:62:
                    98:24:16:24:f9:a3:89:7a:db:7e:11:ca:24:71:f4:
                    55:44:b1:b6:2b:0d:ce:63:75:56:2b:cb:b3:85:1e:
                    04:0e:6b:f6:23:5d:7f:46:07:fe:25:94:cd:7c:3e:
                    3e:1e:e2:cd:1f:9c:12:df:db:96:ed:fe:32:42:98:
                    6a:6b:7d:0c:58:4c:9d:65:54:36:f0:84:fe:a8:f9:
                    b0:44:47:9f:85:52:5b:b0:0c:c2:77:7f:ec:36:9a:
                    25:52:d3:45:df:3c:54:0c:e8:2f:e7:d4:e6:4e:d0:
                    d7:ac:c1:bb:72:81:b7:12:99:3c:de:d4:5a:61:3c:
                    85:25:f7:7a:5f:01:58:29:02:66:2b:d1:5b:8f:72:
                    94:97:a6:5a:15:74:c3:5a:4f:d9:36:dc:ad:7b:07:
                    e7:bb:16:d8:ff:f0:5f:45:d4:7d:bb:0a:65:c7:72:
                    7c:71:c1:d3:38:21:90:39:12:ad:46:d5:30:f4:b8:
                    ba:31:82:01:01:a7:e0:51:68:39:d7:5f:a2:0b:e3:
                    63:2c:0f:6d:ad:80:d7:6d:f0:65:99:c0:d5:c8:9b:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:29:CC:5B:37:70:B9:BD:C9:0E:F0:6C:58:29:07:8A:A0:AE:6E:93
            X509v3 Authority Key Identifier:
                keyid:E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:2b:73:d8:34:b6:b6:33:1e:08:80:52:8d:0e:ab:c5:fa:
         b3:4f:e6:97:0c:97:da:92:bd:02:2e:c4:2d:12:d5:78:f9:c1:
         75:a8:5c:dc:7d:4b:44:7b:1e:54:39:8a:cf:94:e2:47:1b:d1:
         80:bb:30:75:d2:00:a5:88:6f:77:ba:0b:55:18:27:45:da:48:
         62:24:0b:a2:a8:8c:9f:d1:eb:22:80:09:ff:ba:53:f0:3f:b8:
         cc:41:84:bb:a5:3b:ba:07:4d:65:4f:83:bc:d0:54:f4:e4:4b:
         75:be:3a:20:c8:56:13:33:33:fd:72:84:31:e6:10:97:e6:a1:
         d0:e8:ef:58:b8:78:66:1b:7c:4e:16:a3:bb:62:60:7c:a0:06:
         86:08:4b:a0:bc:5f:dc:e8:c2:7b:3e:02:42:bb:07:2d:23:e5:
         2d:06:4c:08:c5:10:3e:2d:75:cc:dd:b3:9c:29:e5:6e:c5:0c:
         65:94:a7:33:69:8d:09:41:ae:42:62:88:38:5d:e1:c6:ee:c5:
         73:04:b3:96:cb:92:b4:2a:87:c9:7c:23:c3:8c:1a:df:75:48:
         35:70:6b:b3:24:06:5a:99:5a:28:65:ca:b7:b1:ac:72:87:01:
         b4:dc:fb:fb:65:91:9f:b9:4b:39:9f:2e:c1:66:78:c5:3d:36:
         da:60:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:11:45 2025 by rpki-client