Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235342e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3235342e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          hmLqNDXcARgsSErnGVN/1qMG05iDF8VwO3Bw7yL00q0=
Subject key identifier:   80:E9:54:EC:A3:16:A0:B4:4F:5D:A9:9C:FC:64:1D:4A:AA:70:88:78
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       460F992F3E2CB05C977E2C9F6A197360758D823D
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235342e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:26 +0000
ROA not before:           Tue 24 Dec 2024 13:44:26 +0000
ROA not after:            Tue 23 Dec 2025 13:49:26 +0000
asID:                     267513
IP address blocks:        186.251.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0f:99:2f:3e:2c:b0:5c:97:7e:2c:9f:6a:19:73:60:75:8d:82:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:26 2024 GMT
            Not After : Dec 23 13:49:26 2025 GMT
        Subject: CN=80E954ECA316A0B44F5DA99CFC641D4AAA708878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:2f:3d:17:38:f7:51:b7:e5:e6:47:48:c4:
                    17:1e:d6:3b:d1:da:ac:4f:99:d4:0d:c1:3c:19:86:
                    9c:fe:c2:ae:68:ef:60:ee:d7:4b:c8:e0:12:2e:b4:
                    cb:74:80:f6:39:b8:23:c5:6d:96:34:37:7b:14:e4:
                    67:2a:60:ee:f6:9b:94:3f:da:f6:68:2e:a6:e6:91:
                    0e:8b:38:d4:e7:16:44:36:fd:3e:a9:a6:54:cd:47:
                    5d:bd:f7:04:4c:d3:0c:5d:cf:3e:69:8d:3d:e3:1c:
                    2f:e2:03:6a:c9:68:94:c1:d0:a2:c9:0b:3f:24:85:
                    d8:0b:23:69:81:f9:b9:30:b6:99:d4:15:9e:67:47:
                    01:38:c2:0a:65:2a:b2:de:9c:f3:b9:ef:2d:b7:c7:
                    81:39:b1:18:8a:a4:56:8b:33:a2:9b:71:24:44:f1:
                    10:00:9e:e3:1e:cc:48:7d:79:f5:36:3a:97:c1:54:
                    93:e7:6d:1d:83:31:c6:e9:b0:28:12:e7:6f:09:c8:
                    76:1f:29:85:9b:4e:f5:38:54:66:29:48:4c:1b:bb:
                    56:4d:3d:f2:1d:79:38:de:66:53:ce:97:32:f9:09:
                    f4:fa:3f:72:08:0d:10:f3:d0:56:bd:cf:b7:07:47:
                    8e:78:9d:cf:f4:b1:de:a0:d7:66:e6:f8:d5:c9:73:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:54:EC:A3:16:A0:B4:4F:5D:A9:9C:FC:64:1D:4A:AA:70:88:78
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235342e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:af:a3:9b:e3:95:9c:69:46:d1:50:28:47:9f:20:11:a3:b7:
         5f:3a:6d:21:ba:d4:e3:99:9f:62:a5:60:0f:8c:5b:95:fb:58:
         90:4f:d6:86:b4:d1:77:60:3c:fe:f9:f4:d0:3b:b2:e3:ee:a4:
         02:a4:8c:d9:0f:e4:22:14:90:b6:87:04:2b:a6:d4:d7:b6:75:
         1b:a3:e3:50:f1:23:28:99:4a:96:3a:4d:10:02:bf:7a:3a:9b:
         9f:3b:23:94:02:cc:e0:c0:eb:56:7c:73:ff:11:52:61:86:a2:
         a1:96:35:0f:5c:56:f5:73:37:cf:dc:3f:97:bc:97:86:96:c7:
         0a:63:7a:ea:34:1c:c5:e2:63:ea:4c:80:3a:ac:fc:0a:f1:9b:
         51:ff:44:40:b7:23:2c:50:ee:56:9f:65:ac:dc:85:30:67:ac:
         f1:aa:87:6b:0d:95:9c:40:4e:9a:55:76:bb:b4:08:38:0e:41:
         59:83:16:a4:58:a9:97:d5:35:2f:73:46:09:71:51:3a:8d:cc:
         40:c4:cf:33:08:a8:97:27:49:a4:77:fd:65:0d:db:82:6a:94:
         f3:41:7d:a6:f2:3d:2b:ee:bb:c0:0c:7b:8d:a6:79:88:bc:75:
         96:7f:22:c1:aa:e8:ac:1b:b0:46:8c:3f:2a:8a:92:37:6f:eb:
         e4:66:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:32:57 2025 by rpki-client