Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235322e302f32322d3232203d3e20323637353133.roa
File:                     3138362e3235312e3235322e302f32322d3232203d3e20323637353133.roa (raw, json)
Hash identifier:          j/qECj2BcFvQLi4xgtDbgD9+5tVK/+yJaoHLaHI9fvE=
Subject key identifier:   1B:42:D6:AB:12:A4:52:CE:1C:54:C6:F2:82:D8:C2:54:5F:24:77:82
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       190F2D1061595B56892393BA1E82A6E2C433FEAF
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235322e302f32322d3232203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:26 +0000
ROA not before:           Tue 24 Dec 2024 13:44:26 +0000
ROA not after:            Tue 23 Dec 2025 13:49:26 +0000
asID:                     267513
IP address blocks:        186.251.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 00:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0f:2d:10:61:59:5b:56:89:23:93:ba:1e:82:a6:e2:c4:33:fe:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:26 2024 GMT
            Not After : Dec 23 13:49:26 2025 GMT
        Subject: CN=1B42D6AB12A452CE1C54C6F282D8C2545F247782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:1b:70:05:d2:fb:df:48:1d:90:1d:7b:60:
                    96:d8:e7:60:d7:cf:36:48:a1:23:02:1b:d4:b6:1b:
                    3c:0f:59:b5:7f:2d:3a:41:e5:1b:74:06:a2:90:00:
                    7c:ac:ae:42:6b:a9:ff:8b:ca:2b:6f:7e:b3:33:1e:
                    70:f9:c7:4e:68:9c:c0:3e:1c:2d:03:8f:7b:17:e4:
                    1a:52:b5:93:89:ad:c3:fc:d4:78:d1:da:70:b3:d1:
                    b4:f1:cd:60:3f:fc:9b:00:32:eb:ab:5f:4e:49:b0:
                    56:79:90:b3:e3:9a:93:46:4a:9d:bc:55:8c:0d:4b:
                    92:1d:54:b0:a5:83:f9:50:57:2e:54:59:5b:ab:de:
                    fd:7c:6a:25:c6:43:b0:20:f8:27:ce:df:f9:b7:85:
                    6f:ac:8e:fd:65:06:8e:05:53:9a:4d:ae:87:54:71:
                    8f:7c:78:97:5e:5e:57:b2:e7:87:8b:9b:e7:db:50:
                    2b:d1:38:cb:ef:d0:8b:c1:e2:5a:53:6e:af:18:89:
                    8c:c7:05:ef:db:89:87:c1:b2:74:88:fd:73:77:6b:
                    44:c4:11:c0:08:ef:31:01:2b:0c:56:96:6b:91:4b:
                    50:7e:6c:86:4c:f9:b6:89:dd:f2:7f:3a:d7:37:fb:
                    72:df:6b:d0:32:fd:63:1c:39:eb:1c:4f:72:21:f3:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:D6:AB:12:A4:52:CE:1C:54:C6:F2:82:D8:C2:54:5F:24:77:82
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235322e302f32322d3232203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:b8:83:fb:93:7d:d0:a4:a6:21:b2:89:b8:58:b4:c0:72:
         e9:57:dc:c4:12:79:c9:28:9b:74:b3:65:07:a5:8d:ef:78:9e:
         ef:82:80:4b:ef:d4:b7:c8:64:c8:2a:61:93:20:fe:b3:34:c3:
         f2:a1:33:46:c2:12:d7:d4:96:7e:6a:7d:47:24:90:fe:ca:25:
         c1:83:fe:00:04:70:e0:ee:ef:11:e9:9c:0b:84:0d:f4:0c:84:
         90:f3:d2:04:29:d3:81:08:6d:72:5a:d3:20:e9:f1:9a:6c:5e:
         1c:ad:5f:14:8c:55:83:cd:59:a0:ec:7b:d2:72:17:33:48:6f:
         4d:86:28:a8:fa:fe:89:c7:d5:43:e5:28:10:d8:c3:b2:39:17:
         78:7c:fe:cc:30:ee:aa:96:ee:18:5a:83:4d:10:d2:a8:f4:38:
         ad:80:a1:cf:6a:ff:cf:20:00:89:78:a1:55:f5:fe:73:3f:ad:
         b0:dc:43:58:29:50:02:dc:ae:a0:5b:83:1b:fe:5a:a9:69:69:
         f5:6f:e4:b4:a5:f9:60:5f:ff:7e:ff:16:46:e7:03:d3:81:7a:
         c5:c4:85:c4:92:38:26:d3:f2:45:06:01:3c:8b:95:5a:8e:80:
         4d:af:f1:6e:a4:2c:a6:be:f8:5c:8e:53:af:08:e0:fd:c1:5a:
         83:4d:f4:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGQ8tEGFZW1aJI5O6HoKm4sQz/q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNDEyMjQxMzQ0MjZaFw0yNTEyMjMxMzQ5MjZaMDMxMTAvBgNV
BAMTKDFCNDJENkFCMTJBNDUyQ0UxQzU0QzZGMjgyRDhDMjU0NUYyNDc3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSBtwBdL730gdkB17YJbY52DX
zzZIoSMCG9S2GzwPWbV/LTpB5Rt0BqKQAHysrkJrqf+LyitvfrMzHnD5x05onMA+
HC0Dj3sX5BpStZOJrcP81HjR2nCz0bTxzWA//JsAMuurX05JsFZ5kLPjmpNGSp28
VYwNS5IdVLClg/lQVy5UWVur3v18aiXGQ7Ag+CfO3/m3hW+sjv1lBo4FU5pNrodU
cY98eJdeXley54eLm+fbUCvROMvv0IvB4lpTbq8YiYzHBe/biYfBsnSI/XN3a0TE
EcAI7zEBKwxWlmuRS1B+bIZM+baJ3fJ/Otc3+3Lfa9Ay/WMcOescT3Ih88ddAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUG0LWqxKkUs4cVMbygtjCVF8kd4IwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzODM2MmUzMjM1MzEyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr7/DANBgkqhkiG9w0BAQsFAAOCAQEArQK4
g/uTfdCkpiGyibhYtMBy6VfcxBJ5ySibdLNlB6WN73ie74KAS+/Ut8hkyCphkyD+
szTD8qEzRsIS19SWfmp9RySQ/solwYP+AARw4O7vEemcC4QN9AyEkPPSBCnTgQht
clrTIOnxmmxeHK1fFIxVg81ZoOx70nIXM0hvTYYoqPr+icfVQ+UoENjDsjkXeHz+
zDDuqpbuGFqDTRDSqPQ4rYChz2r/zyAAiXihVfX+cz+tsNxDWClQAtyuoFuDG/5a
qWlp9W/ktKX5YF//fv8WRucD04F6xcSFxJI4JtPyRQYBPIuVWo6ATa/xbqQspr74
XI5Trwjg/cFag030mA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:26 2025 by rpki-client