Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa (raw, json)
Hash identifier:          WPR2dbbRY78khKIeWTAHn+pf8lh92oFokNX4ZVIJdjg=
Subject key identifier:   BA:24:45:86:5A:44:5B:C4:32:5A:85:28:B8:06:BF:87:FC:71:1F:EB
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       6C7B6C07F2EFE0B9B6E18230ED621AC73735025B
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:26 +0000
ROA not before:           Tue 24 Dec 2024 13:44:26 +0000
ROA not after:            Tue 23 Dec 2025 13:49:26 +0000
asID:                     267513
IP address blocks:        186.227.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7b:6c:07:f2:ef:e0:b9:b6:e1:82:30:ed:62:1a:c7:37:35:02:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:26 2024 GMT
            Not After : Dec 23 13:49:26 2025 GMT
        Subject: CN=BA2445865A445BC4325A8528B806BF87FC711FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:5c:09:45:e6:a9:02:ac:ff:4e:9b:11:0c:
                    40:c6:99:ba:4a:5c:3c:b9:48:75:0b:07:05:dc:9b:
                    1d:d6:68:c4:c9:c7:51:f2:1e:06:6d:d5:5e:89:ae:
                    5f:90:ca:79:75:90:c3:77:90:3b:22:1a:74:c7:41:
                    b1:9a:21:df:94:98:70:0c:6c:09:6e:98:96:fe:9d:
                    a6:12:f6:56:d1:be:41:82:e2:f8:c5:ab:8d:31:e6:
                    18:80:dd:67:40:bd:8b:8a:a6:47:1d:7e:e7:39:e2:
                    3c:72:f3:dc:93:ec:b5:c3:77:45:ce:ba:7d:1f:0b:
                    23:56:52:af:90:6e:03:11:88:a7:a9:18:48:94:c8:
                    7b:a1:d8:fd:90:9d:57:2f:10:94:46:0a:21:31:4e:
                    10:1b:36:a6:3c:65:bf:9b:53:e7:be:b2:b5:cd:4a:
                    7e:29:05:ac:0a:d9:58:59:20:6c:08:95:00:3d:e2:
                    b5:3c:e6:4d:0e:c7:be:f9:fd:27:10:32:75:d3:bd:
                    3a:ea:f1:a6:d9:75:dd:85:7d:36:27:a5:9b:40:a2:
                    07:1c:2c:5f:28:17:84:c3:b7:0f:7b:2b:d5:19:71:
                    63:0c:46:2f:94:83:4c:6c:ae:c4:cb:a3:33:7d:a1:
                    51:c9:c7:f3:2e:12:7d:f7:e1:cd:a5:34:a4:e7:3c:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:45:86:5A:44:5B:C4:32:5A:85:28:B8:06:BF:87:FC:71:1F:EB
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:55:a3:36:cd:42:6d:79:95:e5:e6:69:fe:69:1c:df:4b:
         52:03:6b:2a:df:09:2b:5f:b1:61:27:3e:70:83:ec:a6:4c:18:
         59:87:10:71:39:bd:99:86:e0:a7:dc:7f:a2:0c:39:de:5b:e9:
         55:79:dd:24:0c:e6:e0:3a:69:85:00:a4:99:17:4b:38:73:2e:
         27:51:63:46:82:37:8e:fb:45:90:63:5c:4a:f9:b2:71:26:c0:
         b8:c3:51:45:de:cd:92:ef:e2:bb:23:ba:d8:a9:55:86:c4:47:
         d9:60:d3:57:c5:80:26:ba:42:10:ad:5b:61:68:bd:e7:a8:ea:
         69:61:cd:ed:d2:70:17:52:ee:0c:ff:39:76:02:7d:a7:3b:75:
         cc:c4:0d:c1:62:81:f2:ee:a2:b3:a4:f8:8e:8b:31:46:08:93:
         fe:ed:67:83:b0:c1:f8:47:c5:b8:e6:23:99:d1:f7:a0:cd:b2:
         16:bb:ba:5c:85:07:43:4e:96:6a:ad:89:02:eb:2b:03:19:7d:
         4c:59:e8:ca:e0:50:0c:a8:d3:3b:0b:1c:c9:82:5c:3f:6f:3e:
         60:84:1f:79:62:93:16:9d:02:fd:bc:eb:db:04:65:14:5c:f1:
         a2:4a:72:39:62:63:05:12:76:6c:d8:6a:b6:ea:99:d2:08:31:
         0f:06:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:30:37 2025 by rpki-client