Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa
File:                     3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa (raw, json)
Hash identifier:          wCYXy5tMxplHXIpSoRPS+MVoZb/wb+AjxxFG+7lRQDo=
Subject key identifier:   0B:BC:00:73:7E:15:3F:89:2F:A0:4E:F3:3F:90:F5:AF:D5:68:A0:C7
Certificate issuer:       /CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
Certificate serial:       20A2D774CE58AD38BBF646D55E64637058B31182
Authority key identifier: 00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa
Signing time:             Thu 06 Mar 2025 07:00:12 +0000
ROA not before:           Thu 06 Mar 2025 06:55:12 +0000
ROA not after:            Thu 05 Mar 2026 07:00:12 +0000
asID:                     52951
IP address blocks:        186.250.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl
                          rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:d7:74:ce:58:ad:38:bb:f6:46:d5:5e:64:63:70:58:b3:11:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
        Validity
            Not Before: Mar  6 06:55:12 2025 GMT
            Not After : Mar  5 07:00:12 2026 GMT
        Subject: CN=0BBC00737E153F892FA04EF33F90F5AFD568A0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:57:c0:46:9f:44:4c:bf:95:84:48:ad:a1:
                    a1:62:a8:f2:12:30:1c:df:59:fc:1a:2f:e0:f7:61:
                    57:4b:b0:97:54:1d:e3:d6:e9:1c:83:98:16:b3:d7:
                    7e:ab:6a:07:57:9d:d8:7f:2b:16:1e:f5:a7:0a:7e:
                    62:b7:08:0a:23:ed:c5:02:e1:bb:bb:a5:74:ee:c6:
                    69:b4:35:d6:6f:dd:61:60:e5:77:59:f6:73:a9:c7:
                    1c:cc:e1:5d:54:7e:b1:76:f9:d6:23:f3:f0:a8:23:
                    75:e7:f1:b4:b7:27:39:f9:4a:a2:ef:b8:f1:e5:51:
                    7a:a0:82:1a:4c:26:e4:04:43:0c:ab:65:ca:b5:3d:
                    c6:d3:6f:99:d1:49:9c:20:13:c7:64:c0:0f:d3:d8:
                    3b:48:e1:20:36:b1:3b:e2:bd:18:31:9e:a4:f2:26:
                    8b:67:fe:f7:27:14:5d:17:33:cb:f8:66:b4:34:51:
                    db:43:3f:51:7b:10:08:1b:d0:85:b7:df:d1:38:f5:
                    2c:c8:a8:d3:29:92:6f:ff:66:ce:b7:fc:0f:2b:9b:
                    5f:bc:f5:1b:bb:6e:06:03:3a:9c:3c:69:56:82:5e:
                    43:f1:ae:c3:b6:cd:79:7b:4b:07:9d:36:26:dc:60:
                    99:5f:9a:97:ae:83:eb:1d:21:12:3d:db:64:cd:e1:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BC:00:73:7E:15:3F:89:2F:A0:4E:F3:3F:90:F5:AF:D5:68:A0:C7
            X509v3 Authority Key Identifier:
                keyid:00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3138362e3235302e3134302e302f32322d3332203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:25:66:e9:76:18:e1:a4:b9:28:a0:ab:5e:70:55:fd:d8:2e:
         1e:6b:9c:d5:64:62:d7:d1:e1:5c:2f:59:07:7d:d1:65:89:2f:
         be:7d:b3:2d:2f:5c:6b:5f:02:e0:7f:7a:74:82:b6:60:13:7d:
         eb:ac:bc:21:ba:4c:9c:4c:98:d6:1e:ee:a4:03:31:e8:4a:b4:
         83:66:c9:73:60:00:2f:1d:ed:df:dc:58:a3:8b:e7:f5:0c:9e:
         2a:ed:81:6b:70:14:b0:d6:2d:ae:ca:dc:1c:9f:27:de:48:d7:
         52:a3:2a:9f:83:d6:ee:34:32:3f:68:da:0a:eb:c5:f9:48:34:
         79:b2:d0:3a:e0:8d:c6:59:4b:fe:e1:14:cf:3c:ee:ec:07:6d:
         67:c5:87:25:14:95:35:04:0d:47:7e:6e:58:10:09:cb:16:e8:
         24:48:33:2a:27:cc:95:e7:40:63:b5:7b:f9:d8:55:82:97:b8:
         52:c6:05:75:64:57:4d:6e:b7:25:4e:56:0e:da:4d:3b:e7:24:
         10:ee:4b:a5:74:7c:dd:5d:f9:32:74:68:65:eb:69:7e:c0:4d:
         2f:47:58:5b:43:b0:09:21:cd:27:8f:d8:e6:8c:f6:e5:cf:b9:
         1d:57:61:31:07:eb:37:0e:3f:23:a8:d4:7c:e5:9d:55:2d:bf:
         3a:60:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:24:20 2025 by rpki-client