Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          jvOaxLjiqvOdI8K+lUyUL7YEETsfWoSFl0/uLR99Oe8=
Subject key identifier:   62:C6:F0:02:FA:36:F3:F7:BD:11:32:93:98:2C:AE:F9:C9:CC:6D:07
Certificate issuer:       /CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF
Certificate serial:       0F041BB0CFF7F9DC73859465D1B298B6240C154B
Authority key identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa
Signing time:             Sun 16 Mar 2025 23:07:54 +0000
ROA not before:           Sun 16 Mar 2025 23:02:54 +0000
ROA not after:            Sun 15 Mar 2026 23:07:54 +0000
asID:                     61784
IP address blocks:        138.186.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:04:1b:b0:cf:f7:f9:dc:73:85:94:65:d1:b2:98:b6:24:0c:15:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF
        Validity
            Not Before: Mar 16 23:02:54 2025 GMT
            Not After : Mar 15 23:07:54 2026 GMT
        Subject: CN=62C6F002FA36F3F7BD113293982CAEF9C9CC6D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:98:66:0a:92:1f:cd:b8:d8:49:9b:d6:f6:
                    77:43:85:50:c5:ee:24:43:b4:11:33:e5:c1:bd:d2:
                    2b:18:54:29:90:57:c7:2d:9d:3c:fe:66:0e:bf:91:
                    12:76:92:21:41:53:dc:e9:79:8b:01:f7:f6:a7:02:
                    85:21:53:6a:e2:77:1f:83:77:e2:48:f4:cd:c1:7a:
                    c8:87:42:7a:7e:f7:cf:42:d9:76:d3:2e:91:b9:dd:
                    15:36:0c:44:a6:49:9c:3d:60:d5:6d:15:7f:6c:8d:
                    03:b6:80:1d:bd:8c:70:18:7a:47:18:ee:cd:91:4f:
                    4b:15:69:60:8e:f4:ae:e8:4f:7b:84:18:58:9f:82:
                    c2:79:45:6f:f8:fe:0c:ec:b0:61:07:9a:59:36:78:
                    ac:33:3b:2a:25:0a:43:76:1d:7e:00:58:b7:88:60:
                    4b:86:41:fd:9b:63:47:c6:7b:29:46:5f:f9:8c:46:
                    f7:2f:35:f2:8e:e2:9f:0b:4e:03:e0:cc:8c:96:a4:
                    7b:da:f3:59:ee:62:6d:44:8b:fa:b4:be:46:a3:9a:
                    52:e7:32:17:dc:3c:ee:e9:cf:71:4d:34:da:cc:9b:
                    05:7d:f0:87:d0:bb:4f:b8:16:0b:93:a1:a2:74:54:
                    36:a6:90:fa:2c:0a:e4:e4:68:fc:dc:0f:38:d0:19:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:F0:02:FA:36:F3:F7:BD:11:32:93:98:2C:AE:F9:C9:CC:6D:07
            X509v3 Authority Key Identifier:
                keyid:8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:38:e4:45:45:e8:07:6e:93:a4:42:f1:fc:92:11:1c:b0:37:
         0e:16:15:13:f6:c5:cc:d9:fa:1c:a0:e1:9c:0a:22:ae:f2:77:
         68:06:e8:59:c6:f4:c4:d2:95:06:d5:38:5c:8f:4a:a2:d3:27:
         3e:cd:f8:c2:c5:06:b2:a1:64:7c:74:22:5a:c9:29:24:d4:1a:
         0d:f8:78:86:b7:d5:84:57:99:d3:85:92:d2:75:0e:d8:4c:f8:
         66:c3:49:34:a8:1d:ef:a7:3f:3b:7e:01:6f:1e:1f:7b:4e:d9:
         ed:36:5c:96:45:7c:40:80:44:87:2f:2e:c1:6a:27:0c:20:ab:
         e9:1a:79:cc:df:ab:d8:99:e5:bf:22:80:1a:60:e7:23:40:e6:
         0c:f6:dd:25:ca:28:c0:3f:65:9a:b7:2a:9b:f3:40:00:e8:13:
         22:14:bf:76:a1:1a:ca:07:57:57:d4:e8:bf:d1:4d:1a:e3:04:
         45:20:e4:e8:c7:80:eb:4f:81:af:ae:4b:0b:32:9f:6b:5d:37:
         d8:9b:98:f9:47:5b:15:4e:e7:e0:48:6a:e1:2e:00:5d:d8:bf:
         3f:70:df:fd:f2:2c:78:07:00:18:54:cc:44:a9:f7:0a:f0:0b:
         c5:f9:01:bf:17:34:35:7e:28:6f:63:37:d5:0f:46:01:59:41:
         74:8f:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:29:40 2025 by rpki-client