Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37342e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3232372e37342e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          5/SBOsXTRnBFOYYQc3hUUhfFUkc1NcYeRnMwWLp3THE=
Subject key identifier:   C8:E9:95:A5:67:F9:52:F0:BD:E2:1D:01:C6:47:53:5F:44:04:FD:D6
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       46B21C0F4E74F90A499C41CAE8DA262DEE301717
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37342e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:28 +0000
ROA not before:           Tue 24 Dec 2024 13:44:28 +0000
ROA not after:            Tue 23 Dec 2025 13:49:28 +0000
asID:                     267513
IP address blocks:        186.227.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:1c:0f:4e:74:f9:0a:49:9c:41:ca:e8:da:26:2d:ee:30:17:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:28 2024 GMT
            Not After : Dec 23 13:49:28 2025 GMT
        Subject: CN=C8E995A567F952F0BDE21D01C647535F4404FDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:70:41:5e:b5:15:f8:71:94:c6:f4:37:a1:
                    ff:d7:48:c1:7d:91:a9:e2:32:fa:0e:96:59:3f:df:
                    0f:fe:71:ae:95:6f:e4:30:7f:bc:26:af:89:ea:b6:
                    09:c7:64:68:55:5d:cf:70:6c:ff:c9:52:9a:43:86:
                    25:77:fe:75:39:4e:b6:12:ec:17:09:57:9c:99:b6:
                    a2:ce:37:47:b6:6f:cd:6c:4c:9a:50:5d:d7:03:d6:
                    8c:c0:08:0d:4c:a2:07:89:42:55:f8:a4:44:c0:51:
                    46:09:be:ab:6b:45:73:e0:0b:40:50:48:65:ad:05:
                    da:7a:47:51:37:a9:03:ed:e2:ea:72:fd:db:08:97:
                    cd:d1:b4:4e:f1:18:f9:33:4c:84:bf:7f:87:16:04:
                    e7:60:f1:75:90:93:48:49:0e:da:53:49:57:b3:d1:
                    36:9e:b0:23:47:b2:c4:9f:21:ee:e5:3c:1c:ba:c5:
                    6f:85:17:4b:19:0a:dc:56:ac:4a:38:f8:53:4e:a3:
                    16:94:e6:d5:65:1a:a3:04:4d:9d:2a:16:66:b1:52:
                    9d:03:b4:c8:28:9c:a7:cc:e7:ea:a4:f9:5d:73:dd:
                    06:5b:fb:25:05:32:d5:80:b7:11:a3:ca:72:c9:80:
                    1f:35:1d:5d:56:5b:aa:8e:10:59:d5:9d:c7:bb:c1:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:95:A5:67:F9:52:F0:BD:E2:1D:01:C6:47:53:5F:44:04:FD:D6
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37342e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:b9:ca:06:a4:bc:b1:a4:d4:6a:73:bb:d9:3c:68:33:92:
         ff:08:c4:0e:62:b2:ad:06:d7:78:bc:54:ed:93:1b:44:53:e0:
         74:52:95:69:99:70:64:4c:0a:b4:99:d0:a6:51:32:08:58:77:
         64:97:ff:e3:16:4f:46:a1:7e:91:f7:74:20:ea:19:25:79:31:
         7e:f5:e1:f9:a9:6a:9b:3b:55:c8:89:8a:65:c8:a3:28:65:c9:
         34:bc:9a:d8:2b:70:cc:c0:17:a8:4e:20:8a:0b:2b:c2:e1:de:
         b4:c5:3f:35:c8:cf:b6:48:f9:b9:ee:46:f7:19:52:d0:85:34:
         37:ea:dd:45:53:02:eb:07:70:36:b3:ee:ab:ff:c2:24:22:da:
         63:f8:ed:d1:38:b7:bc:66:4a:eb:01:ea:aa:35:95:8f:ec:28:
         ec:61:47:f5:d4:5b:89:70:56:03:ea:be:fa:85:10:9c:95:1c:
         d7:d5:1b:0d:a4:20:58:29:db:64:61:b7:d1:ce:18:eb:e7:95:
         d6:17:e1:33:f7:33:04:0b:cd:2d:a0:7b:38:3f:14:e0:d8:4b:
         cb:65:4a:8b:60:0e:ba:43:54:31:c4:f5:d2:33:66:90:1a:e3:
         bf:e9:b6:7f:34:3e:09:bb:94:0f:fc:40:6b:ca:ba:e5:67:ad:
         b1:c4:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:30:38 2025 by rpki-client