Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          Q/2mxN8oYd+0n1Kdy0il6qxbTC2jwXNS8Sp4vm8nSgs=
Subject key identifier:   5E:F7:B1:D9:7B:80:AD:42:CE:F8:C7:D0:A8:88:D4:1E:42:A2:91:5C
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       7A651D5EEE865A26385FF40D4F6E003099B8185C
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:27 +0000
ROA not before:           Mon 15 Jul 2024 13:37:27 +0000
ROA not after:            Mon 14 Jul 2025 13:42:27 +0000
asID:                     262729
IP address blocks:        186.193.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:65:1d:5e:ee:86:5a:26:38:5f:f4:0d:4f:6e:00:30:99:b8:18:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:27 2024 GMT
            Not After : Jul 14 13:42:27 2025 GMT
        Subject: CN=5EF7B1D97B80AD42CEF8C7D0A888D41E42A2915C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:29:bb:d7:14:e0:84:2a:7e:b9:74:53:6d:
                    1e:5c:f3:5a:63:a8:31:38:93:cf:80:d0:79:92:7c:
                    a2:3c:aa:b5:d1:e7:85:6d:94:ad:f7:5a:29:4f:ce:
                    11:da:a4:b6:9f:f2:cd:e4:7b:ef:22:fc:be:64:58:
                    bc:5a:5a:c9:1e:22:29:1c:74:9e:b0:f8:88:5a:e7:
                    9f:c2:b3:09:fe:17:4e:59:0f:67:6e:36:76:89:a3:
                    39:f8:6d:fd:5e:6a:a3:a6:96:3a:bd:ce:a8:b8:1a:
                    82:bc:6a:90:43:95:8b:e2:5c:b3:0e:cb:45:3b:f4:
                    e2:27:0f:6c:f6:1f:75:b4:e5:ba:07:3d:84:41:0e:
                    68:60:5a:de:9a:e6:b0:11:84:fb:1e:d7:68:e9:2d:
                    46:75:b4:4d:94:28:72:03:96:25:6e:ce:9d:7e:0a:
                    43:41:a1:c5:e5:17:d0:9d:af:39:65:96:5e:6f:92:
                    f4:d1:82:82:92:45:bc:88:63:cf:a1:e9:20:9e:76:
                    cc:6e:77:0b:54:af:22:cc:6a:80:48:a6:ff:96:29:
                    99:5a:23:f4:19:c4:d1:72:79:fa:04:af:8a:4f:d9:
                    12:eb:44:7a:eb:6b:86:71:7c:90:d6:1e:72:a0:c6:
                    80:23:9a:3f:a9:51:c7:8c:29:a9:f2:2b:7f:31:cd:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:B1:D9:7B:80:AD:42:CE:F8:C7:D0:A8:88:D4:1E:42:A2:91:5C
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:d9:b3:26:c7:38:31:ec:28:58:12:7d:69:9b:d7:cd:96:
         c0:a2:c2:51:de:25:11:f3:8b:c2:09:f2:81:43:e2:9b:2c:7a:
         21:5f:8b:5e:8c:55:6b:bb:02:0b:63:0b:99:08:d7:a6:71:81:
         4e:50:97:20:3f:df:3f:f7:16:f6:67:b4:1b:32:a2:b4:d2:f9:
         df:c7:c3:85:92:76:99:3f:34:6b:07:da:cc:cc:32:70:17:e0:
         f7:30:99:44:a7:4a:ee:41:31:5b:38:05:8b:83:ce:d7:57:1d:
         99:e2:fa:37:2f:e4:56:b8:27:4b:4f:e2:af:00:9e:61:e8:2f:
         9f:31:cd:8a:60:8f:e0:21:42:76:8f:12:d7:0b:a0:c1:b6:6e:
         fb:c9:bb:91:8c:e5:97:17:f5:91:4b:ea:0f:37:51:7b:0f:74:
         89:ee:3f:68:38:bb:bd:07:14:84:4f:6f:f8:95:33:c6:00:c8:
         92:f8:a7:ae:d5:24:fd:4c:c2:7a:7c:87:35:b6:a8:5e:dd:13:
         a0:f5:0b:f7:28:c6:3b:e2:82:8a:af:c0:66:94:3a:fc:55:f7:
         08:fd:bb:18:ab:17:41:da:21:b9:2e:77:81:3b:d5:ec:be:0d:
         c0:87:f2:64:8e:99:9d:7c:01:2a:f6:25:9e:12:aa:c4:dc:87:
         ac:6d:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:13 2025 by rpki-client