Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138362e3231392e33322e302f32302d3332203d3e203232333831.roa
File:                     3138362e3231392e33322e302f32302d3332203d3e203232333831.roa (raw, json)
Hash identifier:          nb8zowfP60kB7CwjX8qE9sVhk6/I2/UjbxiyHhEegTc=
Subject key identifier:   67:03:7A:F3:92:5A:D1:5D:3C:1F:B5:79:AB:37:1A:15:5D:E0:0D:34
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       38F9A19BCC2A986382DB28E8DD4B4C9AA010E875
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138362e3231392e33322e302f32302d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 20:01:47 +0000
ROA not before:           Fri 07 Mar 2025 19:56:47 +0000
ROA not after:            Fri 06 Mar 2026 20:01:47 +0000
asID:                     22381
IP address blocks:        186.219.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f9:a1:9b:cc:2a:98:63:82:db:28:e8:dd:4b:4c:9a:a0:10:e8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:56:47 2025 GMT
            Not After : Mar  6 20:01:47 2026 GMT
        Subject: CN=67037AF3925AD15D3C1FB579AB371A155DE00D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:0d:73:08:7d:91:7e:65:d0:35:33:44:e1:
                    e1:d0:33:79:5c:37:8c:88:58:43:3a:28:e0:73:10:
                    2a:72:c8:5e:7e:21:5b:06:d6:ff:03:5b:e8:12:1a:
                    20:8e:7c:b0:a7:6d:d7:96:32:74:39:4c:22:76:9f:
                    8f:c9:66:3c:ab:19:ba:35:cc:50:8d:a5:20:18:c6:
                    86:44:e6:df:60:09:87:26:2e:66:d4:67:e8:d2:c7:
                    19:54:5e:95:42:73:85:a1:27:8f:97:e1:ca:75:f7:
                    53:c6:9b:64:c2:91:40:66:af:e7:2a:62:41:2a:81:
                    79:e6:56:c0:93:60:56:42:d0:78:dc:b5:ae:65:1e:
                    23:89:24:9f:cb:1b:f6:c2:a1:7f:30:42:d2:8b:9a:
                    23:77:ed:34:ed:15:1e:f5:e7:52:ac:47:b7:2f:fe:
                    b6:b5:ff:01:71:fd:0a:c2:63:96:03:6a:b6:45:47:
                    c0:48:a1:48:29:52:8c:f5:ec:ff:d6:3c:c7:c4:07:
                    bf:f0:d9:d7:8e:b1:b8:a1:34:aa:66:52:bb:9d:72:
                    ab:8e:50:0f:db:33:d0:27:33:25:c4:f9:dc:27:69:
                    fd:cb:f3:d5:7a:4f:05:2e:86:88:0a:9e:be:15:94:
                    cc:75:4d:f8:60:9d:33:5f:c2:18:d7:94:98:5f:85:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:7A:F3:92:5A:D1:5D:3C:1F:B5:79:AB:37:1A:15:5D:E0:0D:34
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138362e3231392e33322e302f32302d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:f7:d8:1b:02:7f:56:e3:3a:d1:10:df:02:bd:31:49:43:
         49:07:a6:b3:1b:cd:00:da:e5:ec:83:ae:f2:c1:7e:45:96:d2:
         6f:25:9c:c6:1b:8b:8b:19:0c:90:4d:cc:78:db:52:b1:87:6a:
         de:8a:4d:43:9c:4d:00:22:4b:0f:16:d7:84:64:3d:53:b4:8e:
         8f:f5:5b:17:e0:2a:09:d6:f4:ed:30:8a:3f:87:04:48:6f:39:
         a7:a8:30:c2:58:fd:c7:80:c9:a6:a1:ab:22:27:56:ae:ac:f3:
         22:2d:04:f7:e8:a4:06:84:99:22:70:e3:d7:f6:c3:35:79:d9:
         02:b9:a4:c3:58:40:31:a7:e4:91:79:db:17:a4:cd:c7:ae:28:
         b5:1d:a3:89:6e:2f:c8:ea:80:2e:14:43:bc:cd:9e:f7:bd:4d:
         21:c1:71:67:65:de:a7:6d:18:42:0e:e9:d2:db:4a:b8:58:eb:
         42:d7:33:4d:76:0d:0c:76:07:3f:2d:2a:11:5e:5d:f7:55:85:
         a5:84:85:35:64:d3:d7:6b:0a:12:5e:1c:5a:01:49:3c:19:59:
         44:ab:b7:d3:0c:37:52:9b:a2:3a:84:14:f3:61:2a:c5:15:bb:
         7c:32:2c:b7:49:b8:3f:32:b7:3b:58:53:d8:82:b0:c0:8d:fc:
         09:2b:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:13 2025 by rpki-client