Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/3138362e3232362e3230382e302f32312d3231203d3e20323633303038.roa
File:                     3138362e3232362e3230382e302f32312d3231203d3e20323633303038.roa (raw, json)
Hash identifier:          b1qwhuJf6OnFpOkNr+bTxthLa2wKobSjqqHs0zOaYFk=
Subject key identifier:   F6:C7:B6:33:1F:9C:84:65:7D:93:16:89:C7:11:E4:AC:A4:93:A2:F9
Certificate issuer:       /CN=5B580CCE691441B11E4F2101E95A2D2B6FA6B679
Certificate serial:       7CDDA56F4C0D921EBFFACDB195A8D34E883E4757
Authority key identifier: 5B:58:0C:CE:69:14:41:B1:1E:4F:21:01:E9:5A:2D:2B:6F:A6:B6:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/3138362e3232362e3230382e302f32312d3231203d3e20323633303038.roa
Signing time:             Mon 16 Dec 2024 11:38:15 +0000
ROA not before:           Mon 16 Dec 2024 11:33:15 +0000
ROA not after:            Mon 15 Dec 2025 11:38:15 +0000
asID:                     263008
IP address blocks:        186.226.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.crl
                          rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:dd:a5:6f:4c:0d:92:1e:bf:fa:cd:b1:95:a8:d3:4e:88:3e:47:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B580CCE691441B11E4F2101E95A2D2B6FA6B679
        Validity
            Not Before: Dec 16 11:33:15 2024 GMT
            Not After : Dec 15 11:38:15 2025 GMT
        Subject: CN=F6C7B6331F9C84657D931689C711E4ACA493A2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:30:11:83:aa:4b:f5:2e:63:11:dc:d2:f4:
                    d9:24:5b:50:bb:ce:a4:a0:4f:73:5b:d7:cf:e7:af:
                    44:44:5a:1f:38:76:08:e3:dd:d9:ab:46:10:14:29:
                    8c:b1:a1:df:af:f1:9c:19:55:9f:e5:af:4e:2d:ad:
                    17:13:9d:1f:4e:76:60:c8:e5:ee:7c:d3:92:05:c7:
                    4f:dc:8c:28:be:55:2a:67:a1:bb:c2:d3:ba:c9:5d:
                    bb:d2:e0:ce:fe:54:06:da:05:07:bc:5d:06:6d:4f:
                    4e:60:05:ff:74:d8:ed:82:24:4d:24:bb:c9:cb:77:
                    c4:cf:5e:14:c0:76:f6:21:46:b7:96:63:c8:e8:1a:
                    1f:f4:3f:ef:19:10:30:8c:cf:5f:7e:5c:14:85:1a:
                    a5:60:34:74:e4:94:15:bb:dc:4c:b9:8e:9e:7c:31:
                    61:36:8b:1f:57:27:ac:3f:6c:2b:8c:a7:0a:b6:72:
                    ca:57:ec:99:71:5d:c9:34:ea:f7:bc:0e:bf:ee:02:
                    87:3a:98:98:15:a4:29:21:8a:51:0d:d3:79:83:b4:
                    ab:b3:3a:c0:7a:81:69:bd:a2:ba:fb:8d:ad:ce:f3:
                    b3:c3:ef:20:f6:b3:99:66:8d:f2:5b:3a:f4:fe:4f:
                    54:e5:76:73:31:65:27:fc:2f:2a:06:a4:1b:c0:18:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:B6:33:1F:9C:84:65:7D:93:16:89:C7:11:E4:AC:A4:93:A2:F9
            X509v3 Authority Key Identifier:
                keyid:5B:58:0C:CE:69:14:41:B1:1E:4F:21:01:E9:5A:2D:2B:6F:A6:B6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B580CCE691441B11E4F2101E95A2D2B6FA6B679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV6NpQbvS6tKLUQPv5GRkKobfxJ8Djudo5toeQJznwNx/0/3138362e3232362e3230382e302f32312d3231203d3e20323633303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:94:92:35:d0:ee:e9:60:e8:24:f4:20:2c:d7:59:54:8e:69:
         0e:cf:25:c7:74:d7:83:0d:83:06:d3:ed:f3:81:b5:ef:63:e3:
         05:1e:75:c5:23:60:f6:8f:5f:62:c3:e4:af:c3:4e:38:16:7d:
         15:54:dd:d0:f0:f1:77:e0:fb:49:cf:4f:8a:d2:7c:30:67:40:
         78:a5:91:0f:ce:f1:e7:a1:fe:2b:40:2a:42:c3:54:31:6d:6c:
         77:96:0b:64:eb:88:34:9e:a2:e4:11:73:83:a8:e9:99:f5:b7:
         f5:14:63:39:ce:9e:96:a3:82:49:aa:2c:5d:9f:fd:a4:ed:d1:
         44:0c:c3:e7:49:e1:bf:28:ed:7b:27:06:34:78:f3:51:df:ed:
         8d:b4:68:9d:a8:60:35:a9:f8:29:75:fd:f5:1a:2f:c6:f7:a8:
         73:6b:b6:3b:cb:a6:71:d1:38:93:01:96:dd:06:64:6d:57:b3:
         a6:c0:07:05:0d:e5:15:d0:13:b5:31:19:dc:6b:fc:0f:ff:3c:
         09:02:92:95:47:8a:69:31:c7:bf:a4:1b:15:6e:95:d7:d1:75:
         74:af:09:4a:e4:05:f9:92:be:5d:b5:de:a9:64:99:5a:76:98:
         be:06:15:b1:a3:d6:a4:69:f5:3a:20:a7:f0:20:80:7d:f0:33:
         4b:7f:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:54 2025 by rpki-client