Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          mFUm1wFbrB7vKcngHZCRhhCN5g1DTPFQpJqftmtVKgM=
Subject key identifier:   EE:6B:5A:1C:52:5E:3A:78:F4:C6:4A:E3:21:87:ED:C8:1B:3A:53:B5
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       6E26CDE75771D5AECB4306E925791839005D93DF
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 05 Dec 2024 13:24:25 +0000
ROA not before:           Thu 05 Dec 2024 13:19:25 +0000
ROA not after:            Thu 04 Dec 2025 13:24:25 +0000
asID:                     262998
IP address blocks:        186.224.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:26:cd:e7:57:71:d5:ae:cb:43:06:e9:25:79:18:39:00:5d:93:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Dec  5 13:19:25 2024 GMT
            Not After : Dec  4 13:24:25 2025 GMT
        Subject: CN=EE6B5A1C525E3A78F4C64AE32187EDC81B3A53B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:d0:68:f8:5a:67:04:8a:a4:5d:e0:d0:93:
                    33:63:29:5a:51:c5:1a:b0:c4:9b:c7:cf:8d:6d:25:
                    5d:60:a5:3d:98:96:ec:63:4e:85:b2:5c:22:30:5c:
                    05:77:b3:c9:9c:30:7d:29:a0:08:2a:63:5a:d0:98:
                    c8:4a:61:44:4c:99:31:ee:cc:27:52:4d:47:00:ab:
                    5a:ca:dc:ad:16:48:e3:09:e5:5b:0e:b1:c4:b1:99:
                    22:c6:dc:8d:e0:c9:f8:32:22:ff:86:e6:3b:bb:5b:
                    7b:fa:5c:be:a1:28:77:86:9f:09:0e:67:de:e5:b5:
                    8b:04:65:d9:2d:1d:8a:80:02:c4:f3:4a:2b:59:d5:
                    a5:f5:3d:1f:f0:b5:89:8b:a4:6b:40:e4:73:7c:b1:
                    c1:f4:4e:5b:d5:b1:49:69:57:b8:36:c6:24:be:e4:
                    cb:49:88:df:e8:e6:dd:77:e5:f1:4f:ac:7f:07:0d:
                    d0:35:d6:ea:83:09:f1:74:2c:1c:1b:2e:2c:69:f9:
                    2f:bb:f7:82:5a:8e:fd:23:75:95:b0:92:2c:41:83:
                    58:80:14:69:98:25:f0:0c:2a:f3:74:64:d7:14:47:
                    4f:8e:a1:20:31:dc:5b:71:2a:e1:bc:72:14:d6:63:
                    cb:2a:52:a1:0c:6a:eb:60:b8:65:1e:a3:34:b8:ef:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6B:5A:1C:52:5E:3A:78:F4:C6:4A:E3:21:87:ED:C8:1B:3A:53:B5
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:17:68:77:6c:28:b7:12:80:e5:47:9e:75:8a:8f:7d:7f:05:
         90:c9:b6:ba:08:a6:1f:b1:4a:a8:4b:16:64:b2:5a:07:ba:ca:
         32:60:ee:fc:da:c5:3f:6f:f5:68:d6:ed:e2:0a:d9:c4:c6:ce:
         a7:9d:cd:3e:22:da:23:8f:19:3f:25:da:1b:6f:26:f9:8e:a6:
         ae:5e:9c:c5:2f:fe:2f:34:d6:98:b4:c8:3a:99:e4:08:c1:f2:
         cf:85:15:32:3d:a2:bd:b5:2b:06:3c:aa:66:15:c7:bb:44:f3:
         96:c8:91:de:55:8d:e5:af:86:be:0d:02:16:f1:12:91:22:3d:
         f0:89:1f:ed:1c:91:ba:6a:4a:b9:0a:92:40:50:d8:4e:5b:fd:
         8c:1e:21:2f:5d:ca:76:54:3a:66:86:f1:0f:04:ff:2d:31:ea:
         ef:b1:16:b6:15:58:b6:a8:3c:ac:4e:2f:3b:7d:b6:e7:0a:cd:
         57:69:e7:21:c9:9c:56:51:93:43:a9:b0:e9:a6:23:06:7b:7c:
         5f:67:a8:1a:00:5c:f3:38:bb:5e:30:8b:79:75:3a:88:c8:4b:
         a2:2a:59:6c:68:7e:8c:c6:80:df:7f:55:b2:d8:78:60:34:cd:
         c9:a1:15:c1:1a:2e:49:1e:24:7b:c4:26:ef:7e:f2:fd:1e:b0:
         e4:e4:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:32:48 2025 by rpki-client