Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232322e302f32332d3233203d3e20323733333039.roa
File:                     3138362e3232362e3232322e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          E7Nrn83z7yugL62FFyh10N5DeMYLm0H0lCDSvuflVUw=
Subject key identifier:   77:F6:F4:FC:22:C4:BA:99:B2:54:A1:E6:A4:86:D9:6E:14:6B:E0:86
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       3A6D1FAE1B3CAF13DB20EB8E11D8395A439FE2D9
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232322e302f32332d3233203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:37 +0000
ROA not before:           Wed 09 Apr 2025 13:48:37 +0000
ROA not after:            Wed 08 Apr 2026 13:53:37 +0000
asID:                     273309
IP address blocks:        186.226.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6d:1f:ae:1b:3c:af:13:db:20:eb:8e:11:d8:39:5a:43:9f:e2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:37 2025 GMT
            Not After : Apr  8 13:53:37 2026 GMT
        Subject: CN=77F6F4FC22C4BA99B254A1E6A486D96E146BE086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:98:d8:eb:b4:48:09:e0:0b:85:29:96:13:
                    fe:fe:6e:71:67:9a:dd:29:2e:eb:a0:79:7e:ba:2c:
                    4a:19:cb:21:6d:7a:fa:b1:4a:9f:cf:f7:89:75:15:
                    86:50:3a:a8:0a:b4:05:89:36:7d:f2:26:d7:4c:f2:
                    d5:e7:74:10:45:a5:45:cf:0f:de:7d:b7:24:36:7b:
                    86:5e:c3:24:4b:57:91:ec:db:6d:a6:40:34:7d:56:
                    1c:41:1e:01:57:2a:6f:0b:8b:b8:4e:ac:f7:93:41:
                    de:eb:5d:30:cf:0b:33:f8:8a:7f:8c:e7:18:68:85:
                    da:85:52:94:5f:40:64:4c:ee:f0:de:4a:cc:48:3d:
                    17:14:08:ab:ab:3a:97:f0:52:53:2b:2f:39:b4:50:
                    11:1d:31:ec:37:bd:f4:25:50:d6:97:f9:de:c3:6c:
                    ef:87:00:04:6e:e1:d4:2b:9b:f1:1f:f5:cf:c1:60:
                    db:a8:76:a2:0d:9b:a4:f7:7b:4d:21:2a:aa:f8:a6:
                    0b:5b:32:a3:46:a5:2b:44:82:05:b3:b9:f7:34:44:
                    ec:63:5c:ac:81:d7:70:1e:c9:07:13:db:cf:0b:1b:
                    00:57:fe:16:c7:2a:89:1f:36:e5:43:3b:7c:87:c1:
                    5f:81:ff:98:5d:5c:fe:b9:d9:73:42:94:1e:f9:bc:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F6:F4:FC:22:C4:BA:99:B2:54:A1:E6:A4:86:D9:6E:14:6B:E0:86
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232322e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:68:cc:0b:f3:71:88:08:0a:08:d6:f6:96:cb:84:23:af:
         ca:84:ad:43:a0:e5:0d:bb:4e:2d:b3:36:6a:81:20:e2:10:9b:
         e6:66:a8:04:ba:5d:72:00:6d:c1:7c:5c:13:2e:23:f9:32:e6:
         2d:ff:e2:a7:5c:7c:6c:8d:d9:ae:43:f5:c6:2d:44:47:31:40:
         07:be:a7:d4:c5:1f:cc:c8:8f:4d:ea:89:47:8f:b1:b1:74:0f:
         e4:86:d0:12:b6:c4:f0:7f:5f:33:22:2f:a2:91:e3:6c:09:5e:
         cf:8c:5f:16:19:0a:b9:ee:e1:55:b0:9c:d4:a9:0a:4b:52:b5:
         9e:e6:2e:ba:96:28:40:c6:c9:76:88:fa:6c:f5:c7:04:f2:45:
         72:1a:69:01:ae:b6:21:73:66:f9:e6:9f:cc:c5:ad:e9:3f:9b:
         3d:69:df:15:f6:7a:84:8a:41:02:32:43:54:66:15:6e:85:45:
         24:d4:e3:38:44:5b:13:23:c6:47:b7:d9:54:74:3c:3a:46:8f:
         60:e7:1d:b5:47:e0:70:7c:59:2b:84:3c:6f:7f:4e:b3:8b:6b:
         a7:cc:e6:5c:7e:b7:f3:a1:d1:26:01:98:22:3c:8a:84:0f:85:
         4c:35:4c:3e:bb:fa:41:48:3b:85:cc:73:29:c9:17:db:e8:77:
         7f:a7:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:43:30 2025 by rpki-client