Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
File:                     3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (raw, json)
Hash identifier:          hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=
Subject key identifier:   2C:CB:61:8C:F7:C9:96:C7:47:FC:C9:C2:6F:1E:04:27:00:81:AC:7E
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       5C47808F04EA4992D6F074FE22BA4F60BDE8E38A
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
Signing time:             Fri 20 Dec 2024 14:59:05 +0000
ROA not before:           Fri 20 Dec 2024 14:54:05 +0000
ROA not after:            Fri 19 Dec 2025 14:59:05 +0000
asID:                     53158
IP address blocks:        186.209.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 00:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:80:8f:04:ea:49:92:d6:f0:74:fe:22:ba:4f:60:bd:e8:e3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Dec 20 14:54:05 2024 GMT
            Not After : Dec 19 14:59:05 2025 GMT
        Subject: CN=2CCB618CF7C996C747FCC9C26F1E04270081AC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:11:32:7c:26:b6:29:d6:28:e6:02:a3:46:
                    eb:77:8d:aa:86:22:ba:2f:c6:de:79:fb:13:16:44:
                    3d:96:86:fb:90:80:74:9e:27:b2:97:16:f8:ce:e2:
                    22:84:4e:b1:4f:41:39:0d:a3:b1:c3:16:ba:97:d5:
                    fa:82:8a:59:55:bd:9c:67:6a:26:0a:81:44:d1:fb:
                    60:0f:6f:7a:5a:39:66:9a:c6:f0:66:d2:50:b7:72:
                    b0:76:be:9d:f7:02:c9:46:f4:0e:13:04:82:d7:da:
                    ad:c7:71:53:97:d5:75:c0:4b:d6:1b:e9:a3:cb:0a:
                    cb:a8:7c:16:c7:27:09:8d:5d:21:af:ee:5f:40:dd:
                    4a:00:f1:c6:0e:61:d9:45:7d:cd:15:99:cd:e0:34:
                    65:7c:e8:30:18:ee:c0:f5:1a:be:70:74:67:af:68:
                    57:37:4d:2b:57:43:16:7c:b6:c2:0b:e0:58:a1:08:
                    75:f4:06:f6:2e:bf:06:e1:24:25:d4:f5:00:4f:30:
                    56:7b:d0:b4:92:a5:d6:1a:00:e2:56:3e:ff:ab:95:
                    3d:64:90:6e:8c:9e:88:4b:cc:d6:05:fc:7c:87:20:
                    40:c2:1a:91:62:4e:c0:d9:ea:60:bd:f6:b4:07:ff:
                    84:e9:09:6c:5b:9c:55:ec:02:21:09:c6:1d:e5:b1:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CB:61:8C:F7:C9:96:C7:47:FC:C9:C2:6F:1E:04:27:00:81:AC:7E
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:a0:64:f1:cd:09:db:ac:81:63:89:47:45:d8:42:74:de:
         ef:c3:2c:8b:02:4b:3d:88:88:24:12:e8:ce:32:af:6e:11:aa:
         a5:37:7c:87:06:56:b6:ae:d2:9e:d9:b8:1e:9a:48:bd:1d:8b:
         72:a3:55:c7:b4:60:1a:bc:de:07:d8:f2:6f:d0:11:e3:98:a6:
         e6:1c:79:30:27:ab:1b:ca:46:84:66:ad:b7:f4:fc:cf:07:0c:
         18:87:dd:e1:55:c8:24:d6:a2:b5:34:9b:7e:c2:a4:d7:5a:7d:
         d7:58:95:18:11:83:8a:96:f7:3e:30:d6:3f:df:43:85:f3:25:
         9a:a8:a6:6b:b2:71:03:20:1f:bb:e5:38:94:18:36:ad:00:e8:
         cf:96:ab:1e:bb:ce:31:09:cc:59:e8:b2:4c:1a:b5:1f:d1:62:
         86:40:75:0f:7b:59:4f:8d:c3:9c:7a:7d:a9:94:02:0b:62:c8:
         65:b2:a4:79:73:8b:17:31:cf:29:69:d2:db:f4:24:90:b2:a7:
         75:27:20:24:56:70:f7:ff:ab:bb:04:62:4a:6c:cb:f6:40:e2:
         87:5d:9c:72:94:de:6d:12:e4:6e:3e:40:a4:0d:13:e3:5b:e7:
         19:6e:36:7e:fb:ee:44:16:0b:5f:77:67:2b:ea:d9:6f:47:1a:
         46:92:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:31:37 2025 by rpki-client