Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          3StsKczt/UfxOpNfPOOnS9kOYhYaRu0pzgmOVeKkvAk=
Subject key identifier:   FD:2A:DA:4F:F1:0B:E8:3C:9C:0D:7A:50:75:32:A8:14:CE:F4:6E:36
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       6A20E04E3C3EF85B05FB8B34C85BD6951960C38D
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 05 Dec 2024 13:24:06 +0000
ROA not before:           Thu 05 Dec 2024 13:19:06 +0000
ROA not after:            Thu 04 Dec 2025 13:24:06 +0000
asID:                     262998
IP address blocks:        186.224.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:e0:4e:3c:3e:f8:5b:05:fb:8b:34:c8:5b:d6:95:19:60:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Dec  5 13:19:06 2024 GMT
            Not After : Dec  4 13:24:06 2025 GMT
        Subject: CN=FD2ADA4FF10BE83C9C0D7A507532A814CEF46E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:fe:8a:7b:bd:ad:be:0a:bd:bb:04:dc:66:
                    8d:cc:8f:e2:50:39:1e:88:fb:92:70:35:50:9f:8e:
                    83:4f:d7:85:3d:2c:1c:30:0f:1b:e1:ca:f6:b2:69:
                    b7:a1:84:3a:df:81:40:ff:36:19:f5:06:84:a4:8f:
                    37:3c:f1:57:58:ff:35:e9:0d:44:89:ff:47:3e:08:
                    a7:ea:7c:98:89:88:2b:bd:42:6e:ee:38:f9:14:13:
                    9a:2d:84:b1:a7:59:e9:3b:46:80:55:82:cf:8d:7d:
                    84:61:51:72:63:9e:d2:97:3b:1b:cf:53:b1:63:e8:
                    5a:f3:9b:ee:52:9c:70:1a:22:a8:04:a2:87:b0:47:
                    a8:49:af:28:92:7e:9a:b9:0e:0e:4f:73:a3:9d:d0:
                    38:2b:15:cb:6d:ad:96:82:37:ac:26:eb:38:a3:55:
                    02:e2:be:5c:73:21:27:9a:41:06:db:86:e6:47:de:
                    d1:fb:0e:af:28:f5:79:86:9b:12:68:a3:1b:b7:44:
                    59:6e:f0:18:db:d4:c7:70:07:a8:a1:02:cb:b5:f5:
                    0c:23:4a:b0:df:e4:5f:54:c8:0a:16:c5:01:69:6f:
                    43:67:4a:85:2d:7a:ea:b0:6b:95:9e:78:5e:62:5d:
                    6d:1f:d0:e1:d0:32:e8:26:82:4f:f3:44:85:b0:12:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2A:DA:4F:F1:0B:E8:3C:9C:0D:7A:50:75:32:A8:14:CE:F4:6E:36
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:c0:0e:ea:b4:38:d5:5e:4d:f4:cb:5c:77:d1:7d:41:a6:
         9a:ce:b9:7a:5c:91:e5:0f:f6:00:87:d7:21:f0:6f:ad:f6:c6:
         96:2e:b0:9f:8f:5c:8c:a4:bd:a1:bd:e9:fc:89:fa:ab:93:c9:
         69:ef:32:d8:b6:89:8d:92:c7:2f:82:56:d0:e1:86:68:a5:8a:
         92:48:6f:51:43:5a:e7:08:cc:e1:e2:8c:2a:eb:f3:43:35:8b:
         ee:5e:b0:f3:5b:0a:9f:0a:4e:b5:9f:89:b9:54:2a:da:18:d0:
         94:d1:f0:1b:9f:f5:08:b9:57:4c:62:3a:ea:3d:13:60:75:1e:
         a6:56:56:a8:96:24:2b:42:7b:98:c4:4a:99:4f:d7:82:5a:58:
         15:e4:cd:f8:c9:eb:f8:bc:bd:38:eb:27:6e:29:51:11:b8:bb:
         19:0b:02:ed:f5:47:eb:83:b1:96:19:6f:5b:e8:72:2d:ae:8f:
         2a:76:86:44:ed:4a:4e:f8:c7:f2:ee:7d:71:a1:a1:be:f3:94:
         8e:f5:a9:fe:ff:fc:a1:7b:fb:79:7e:2b:3e:f4:2e:7b:de:4d:
         03:f8:77:f9:ca:58:c9:08:c8:0b:f6:de:f6:7a:b2:f8:ba:f4:
         d0:0f:ad:23:99:5f:a6:b2:6d:05:c0:2d:bb:a7:72:9c:ee:ed:
         23:ad:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:25 2025 by rpki-client