Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32342d3234203d3e20323632373239.roa
File:                     3138362e3139332e3133362e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          kvpUjzNAzjdMk609CG/k33FWctFDZMsZpi5bdDGUGs4=
Subject key identifier:   C3:D9:9A:6D:39:2A:37:44:B0:25:59:8E:79:DC:CE:21:72:4D:34:89
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       76FD238B84E6C075388D2F50874355F8247A9D00
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32342d3234203d3e20323632373239.roa
Signing time:             Fri 21 Mar 2025 20:14:35 +0000
ROA not before:           Fri 21 Mar 2025 20:09:35 +0000
ROA not after:            Fri 20 Mar 2026 20:14:35 +0000
asID:                     262729
IP address blocks:        186.193.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fd:23:8b:84:e6:c0:75:38:8d:2f:50:87:43:55:f8:24:7a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Mar 21 20:09:35 2025 GMT
            Not After : Mar 20 20:14:35 2026 GMT
        Subject: CN=C3D99A6D392A3744B025598E79DCCE21724D3489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:bb:24:ed:46:49:01:32:81:10:9a:9b:70:
                    7a:a2:08:fc:c7:78:fd:d6:94:12:82:63:c7:8d:6e:
                    72:2d:87:0a:38:87:0c:45:03:ee:25:51:40:7b:5d:
                    6c:fb:9b:9b:e7:b1:11:57:5e:8f:1f:5b:bc:07:12:
                    78:85:f9:24:1d:3b:49:86:53:cf:79:d2:63:44:f6:
                    c6:a9:9d:2f:da:db:15:d2:2e:70:aa:a8:4e:75:43:
                    c6:ff:d4:49:88:9b:30:a3:90:8d:c7:89:4a:5e:23:
                    02:c1:a8:87:0a:62:f9:79:42:71:31:29:84:38:fc:
                    9a:f6:1b:a6:c3:67:d0:11:db:4a:73:94:b4:d3:2c:
                    e1:89:a2:99:82:f6:43:4d:b4:5e:6d:76:a7:0c:d0:
                    97:ed:b9:ba:9a:6b:d1:b7:68:a2:f9:0b:b0:7c:63:
                    df:ec:8f:e4:eb:f9:cc:fe:94:0c:ed:54:e9:4f:04:
                    a3:cd:8a:2c:ef:1f:aa:92:93:64:d1:c1:56:b1:53:
                    16:e5:56:b6:5d:74:54:23:56:17:73:e9:7b:cb:3f:
                    7e:bb:8c:48:8d:94:ec:37:35:bd:99:5b:28:04:38:
                    e6:7b:f6:63:35:72:48:09:4c:d6:5c:a9:bc:21:cb:
                    6a:55:5d:f7:e0:41:23:f8:a4:6b:8a:21:14:0e:7b:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D9:9A:6D:39:2A:37:44:B0:25:59:8E:79:DC:CE:21:72:4D:34:89
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:f4:c4:68:9c:71:3e:82:e7:28:fc:47:63:c2:1b:47:0d:
         44:d0:11:7b:4a:3e:67:f3:eb:40:60:0e:e4:ca:40:51:d4:e9:
         5d:45:74:cd:6d:aa:b3:82:46:7d:fe:43:7e:d1:fb:67:ec:f4:
         95:4c:08:5f:b1:af:dd:de:c3:51:41:61:ac:b9:ce:e2:c7:aa:
         ec:36:41:6e:ca:cb:3e:4a:c6:08:40:0e:7e:40:02:33:40:0b:
         8e:77:17:04:0d:f0:b0:7a:10:04:ba:c8:9c:fc:2a:a7:f3:82:
         25:b7:d7:3c:07:39:5e:b0:3d:42:46:28:f3:5f:0f:a5:49:bb:
         5e:eb:b5:17:bd:2e:77:b3:f5:eb:c7:74:5d:99:0f:e9:21:12:
         66:1b:89:4a:2b:ae:1e:7f:f8:a4:fa:f7:44:01:3b:b2:49:0d:
         b8:eb:55:21:9b:51:89:b8:6f:1d:78:2d:f1:d9:8a:1e:70:cb:
         65:14:bc:a2:ec:83:b3:16:41:47:1d:14:26:c4:b2:17:fc:d6:
         05:4b:f0:5f:98:28:60:0e:62:4e:b1:ac:b9:c1:d0:a9:72:97:
         96:94:58:e9:ee:98:3d:29:0e:6b:3b:d7:b9:53:9b:0b:4a:3b:
         13:18:84:91:e1:03:33:01:44:60:18:2e:f7:2d:58:d9:95:23:
         b0:c4:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:50:52 2025 by rpki-client