Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3234203d3e20323633393832.roa
File:                     3138362e3233332e34382e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier:          l2Ygfg5UO3bk/y47XX3B259NdaSvR1j6/KPTNsly9V8=
Subject key identifier:   19:36:CB:E6:FE:C0:7B:CF:4C:93:40:1D:0B:CB:C7:1A:65:30:47:08
Certificate issuer:       /CN=0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE
Certificate serial:       0737932CFBF4442A6389EFF8380A145A73272AAC
Authority key identifier: 0C:D7:FB:62:FC:CB:72:E4:D7:72:B4:9E:C2:BC:28:34:62:4D:1C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3234203d3e20323633393832.roa
Signing time:             Mon 24 Mar 2025 12:27:51 +0000
ROA not before:           Mon 24 Mar 2025 12:22:51 +0000
ROA not after:            Mon 23 Mar 2026 12:27:51 +0000
asID:                     263982
IP address blocks:        186.233.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.crl
                          rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:37:93:2c:fb:f4:44:2a:63:89:ef:f8:38:0a:14:5a:73:27:2a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE
        Validity
            Not Before: Mar 24 12:22:51 2025 GMT
            Not After : Mar 23 12:27:51 2026 GMT
        Subject: CN=1936CBE6FEC07BCF4C93401D0BCBC71A65304708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:6c:19:44:1f:4b:25:e8:df:10:68:74:35:
                    1c:5b:64:1c:ac:d7:5e:d2:71:ea:eb:50:0c:46:1e:
                    3d:cd:8b:97:32:62:55:2c:b8:6b:8b:e6:4d:67:14:
                    d6:f4:47:c1:ab:6c:58:8c:22:c7:2f:7f:3b:64:a3:
                    80:78:88:d8:16:bb:e2:b9:e3:3d:bf:e7:7b:9d:ff:
                    62:eb:3b:c3:f4:5d:81:e3:5f:1b:97:04:ac:54:56:
                    b9:fd:be:12:18:ab:63:c5:29:ed:79:81:07:d4:e2:
                    27:fe:6f:1b:a9:6b:34:e7:8b:1d:9c:81:22:61:60:
                    37:2d:b4:fc:7e:17:19:02:89:7d:ba:78:55:58:2c:
                    12:ff:f9:40:85:b1:46:e6:04:4a:78:23:dd:7b:28:
                    94:72:4b:66:5f:1e:68:12:69:a6:df:78:c3:b9:3a:
                    b5:16:bb:27:b5:52:29:b4:9f:95:14:4e:c6:17:b0:
                    d1:44:33:ee:d8:e4:b2:51:6e:5e:b5:1d:3b:74:02:
                    85:b6:03:c0:2b:42:fe:fa:79:65:52:a7:a8:8b:f2:
                    c4:75:87:04:d1:7d:87:a9:18:c9:c4:99:44:60:23:
                    67:91:24:40:a7:eb:5b:e4:79:9c:8a:78:21:6f:5c:
                    0c:77:9f:77:e0:df:50:4c:2d:5d:3b:78:ab:4c:4e:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:CB:E6:FE:C0:7B:CF:4C:93:40:1D:0B:CB:C7:1A:65:30:47:08
            X509v3 Authority Key Identifier:
                keyid:0C:D7:FB:62:FC:CB:72:E4:D7:72:B4:9E:C2:BC:28:34:62:4D:1C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CD7FB62FCCB72E4D772B49EC2BC2834624D1CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3234203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e4:b5:0c:84:52:88:79:10:ac:67:3a:9d:bd:6c:49:3a:99:d8:
         71:2b:cc:21:95:3c:39:88:12:92:2a:f2:35:ab:e2:af:71:c4:
         ba:ed:93:34:67:09:17:c6:33:5b:19:3d:7d:f6:3c:75:9c:df:
         dc:bd:95:f7:3c:b8:15:f4:9e:1d:d5:38:13:f3:f7:d5:d0:33:
         98:b7:9b:04:fd:ac:0d:44:63:f1:c9:83:38:55:ea:cc:77:be:
         99:6c:ea:71:21:df:eb:b7:d1:05:f5:70:39:d8:e6:e6:ff:2d:
         4e:5d:b6:5b:d4:76:39:47:4b:30:34:0f:71:d5:14:4b:e9:b8:
         8d:a3:a7:77:59:87:e0:93:5f:cb:4d:83:ea:b6:de:81:65:32:
         d2:b6:c8:2f:bc:8c:8b:fd:4f:3e:93:d7:2b:2a:f3:51:b3:9c:
         4a:5e:5e:7d:5a:f3:8f:77:6d:a5:7b:25:ba:a5:43:fe:5f:9d:
         d1:75:58:40:8b:b2:c0:54:1e:a9:e6:e8:68:e6:34:5d:d9:38:
         ad:82:67:2d:f3:bc:ae:a0:b1:08:b1:92:de:e8:10:88:d4:39:
         50:e7:17:25:6e:54:b5:fb:0b:2d:ef:af:c7:07:23:a9:3b:19:
         3f:a9:28:e6:1f:eb:08:89:39:58:b7:6b:88:4c:bc:b0:d2:96:
         41:2e:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:09:59 2025 by rpki-client