Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
File:                     3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          1RVO1BwgXdSM2bftm7wMF4hlkwNFkTw5yTtBr+ti2xw=
Subject key identifier:   ED:FC:63:F3:F0:D6:16:54:67:8B:B3:AB:51:3B:0E:0F:73:5B:1A:91
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       3D76AF72D5C6DE77D281CBC25985E2EBFC5BD890
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262755
IP address blocks:        186.224.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:76:af:72:d5:c6:de:77:d2:81:cb:c2:59:85:e2:eb:fc:5b:d8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=EDFC63F3F0D61654678BB3AB513B0E0F735B1A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:9f:73:b7:64:16:4e:ad:9c:2a:6b:5c:ee:
                    f0:51:e6:7a:46:ad:05:63:f8:15:4d:cd:64:27:f2:
                    81:5e:c7:c2:42:1b:83:87:3f:83:0d:5c:2b:8a:f4:
                    39:a2:02:11:16:ab:ba:81:bd:f7:8e:b4:a4:eb:cc:
                    ff:94:a8:2f:5c:9e:c6:28:00:21:1a:10:d8:9c:63:
                    9e:26:b9:66:03:84:c9:da:0e:e0:de:80:ff:01:ce:
                    f5:66:4b:77:03:dd:b8:4a:33:07:86:7a:4b:89:72:
                    bf:c9:80:05:0a:14:52:b5:41:d2:9b:a2:19:fb:fa:
                    50:9a:2d:db:0b:53:38:0e:46:68:ea:ca:9a:ce:42:
                    07:04:ad:85:31:c0:37:0f:21:de:92:e9:1b:78:59:
                    33:63:b7:92:e3:f1:1b:96:15:b3:e4:99:17:9e:9a:
                    60:5e:c4:0c:15:cd:a8:6d:ef:d0:cc:f3:cf:85:0f:
                    68:92:6c:a2:74:37:3c:cc:3f:24:27:b4:39:57:98:
                    98:76:86:2d:c7:39:e2:0d:bc:97:d7:cf:5b:c4:7c:
                    41:cb:d3:90:9c:47:57:28:e1:c2:8a:56:29:da:19:
                    08:eb:a9:39:af:8c:dc:9f:30:b0:a1:d8:fa:5d:f6:
                    f5:a2:64:ae:04:5c:b0:37:7d:cc:95:b2:9f:23:ca:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:63:F3:F0:D6:16:54:67:8B:B3:AB:51:3B:0E:0F:73:5B:1A:91
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:49:26:9b:ba:a4:52:e3:e8:24:c8:bc:fc:1d:21:a3:bd:df:
         80:9e:eb:47:77:d4:25:a6:ec:cb:af:58:ce:bd:75:ad:08:87:
         c4:a6:8a:52:73:3c:01:38:23:78:46:b6:46:e5:7c:23:32:76:
         a6:f8:58:2b:91:f9:de:aa:b8:b0:62:af:80:2c:4f:29:8e:a9:
         db:a6:95:a8:95:bf:d0:ea:b7:db:c8:f1:3d:97:c6:15:e3:6f:
         56:73:4f:24:b3:1e:75:06:29:e2:c0:f6:ae:e7:ab:91:97:f5:
         c2:c5:fd:f8:98:67:e3:8d:2e:e0:8c:e1:83:cb:58:60:0d:eb:
         dc:1f:b7:1d:62:5f:af:fe:7f:fa:09:40:a5:7d:61:a1:e0:c2:
         2b:6e:eb:52:4f:ce:8d:29:7a:57:2b:9a:4b:3e:30:9d:1c:1e:
         36:32:0c:9f:7f:4e:82:fd:5a:37:93:35:2c:bd:43:47:60:b7:
         b7:fe:07:6f:1b:87:33:ba:b1:76:69:c9:c1:93:19:b3:75:6f:
         aa:e7:26:56:6f:a9:74:ef:72:b4:18:ae:71:83:df:b4:9e:37:
         7a:93:e7:74:f2:20:1e:2c:6d:b6:00:ef:26:37:da:c7:4d:3a:
         d6:b2:b9:7b:25:4d:f2:52:b7:1a:a6:9d:5d:9b:20:82:7a:6f:
         73:69:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:43:13 2025 by rpki-client