Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa
File:                     3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa (raw, json)
Hash identifier:          em/OiGz9JuiNf1P6tS+Yizeu69SpATqfC8rDqeVxlGs=
Subject key identifier:   DC:36:98:AF:8C:FC:F7:7F:61:1A:AB:ED:EA:78:72:E4:90:6B:E6:C0
Certificate issuer:       /CN=9F2D5768FE59056E586124EFA58C5F96D60C7722
Certificate serial:       3ED3313A87C372F9CFA73719C3D5FC44042BE618
Authority key identifier: 9F:2D:57:68:FE:59:05:6E:58:61:24:EF:A5:8C:5F:96:D6:0C:77:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa
Signing time:             Tue 08 Apr 2025 19:36:31 +0000
ROA not before:           Tue 08 Apr 2025 19:31:31 +0000
ROA not after:            Tue 07 Apr 2026 19:36:31 +0000
asID:                     263570
IP address blocks:        186.249.248.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.crl
                          rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 02:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:31:3a:87:c3:72:f9:cf:a7:37:19:c3:d5:fc:44:04:2b:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2D5768FE59056E586124EFA58C5F96D60C7722
        Validity
            Not Before: Apr  8 19:31:31 2025 GMT
            Not After : Apr  7 19:36:31 2026 GMT
        Subject: CN=DC3698AF8CFCF77F611AABEDEA7872E4906BE6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:6d:d9:48:4b:68:0f:5a:d1:fa:c6:79:1d:
                    f1:6f:59:e1:c4:4e:69:79:68:e5:a4:d2:8e:35:0f:
                    ed:79:a0:71:db:5f:ca:c2:4b:21:3c:01:e3:1d:81:
                    30:ff:17:c8:14:53:48:65:1a:05:d6:d0:cb:9e:3d:
                    09:42:9a:b3:f9:86:8b:35:ad:70:5c:71:b8:d5:f3:
                    4b:a9:65:cd:d5:0e:f8:2b:53:47:de:34:5a:83:cb:
                    b2:4a:c3:d3:e9:85:20:07:49:cc:b8:2e:f2:83:e0:
                    cb:64:86:bf:e3:89:bf:53:ec:11:11:e7:b3:bd:63:
                    86:2d:29:8f:db:e4:36:ee:7e:e7:9b:60:d5:40:98:
                    ce:8e:11:6b:a3:26:44:86:42:15:f6:c4:6c:94:5b:
                    a2:bc:4a:d9:d6:6b:61:86:05:e0:ef:16:1f:6a:d8:
                    b0:2e:f4:5a:65:c3:74:0c:d1:42:ad:19:1c:4a:f4:
                    89:d9:45:27:bf:bb:62:12:19:2f:43:f6:47:31:d5:
                    ec:be:7f:db:1c:32:28:c6:dd:ad:f9:87:e6:43:a3:
                    c9:55:36:c3:90:61:34:8c:07:68:9b:43:43:d2:f3:
                    d6:3b:d2:9b:ff:fc:c7:c6:98:4f:58:02:d1:5d:e1:
                    e0:9d:d6:24:87:39:59:8c:d7:53:f8:c1:c8:e1:3e:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:98:AF:8C:FC:F7:7F:61:1A:AB:ED:EA:78:72:E4:90:6B:E6:C0
            X509v3 Authority Key Identifier:
                keyid:9F:2D:57:68:FE:59:05:6E:58:61:24:EF:A5:8C:5F:96:D6:0C:77:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:15:04:60:5b:3f:8e:3c:05:4a:2c:b2:ec:ad:c1:54:39:
         4f:0b:75:64:4c:5d:24:ba:2a:35:5c:06:d7:ae:00:be:b2:69:
         e4:ea:8f:c0:94:b6:c5:8c:61:63:b0:c2:40:bf:81:d4:74:af:
         41:e1:33:69:62:88:74:15:41:da:4d:d4:ac:f4:21:cd:77:65:
         74:57:d7:25:9d:c1:c8:58:4c:c6:c0:b7:59:68:0c:7e:b2:80:
         82:38:45:e9:1f:2b:65:12:92:77:85:9b:09:7c:b9:f0:d2:02:
         47:c2:aa:89:24:b6:72:b6:8e:1d:29:91:62:70:b9:a6:fb:7b:
         0d:40:5f:25:5f:72:37:91:e3:84:4f:5f:6d:a9:8f:e4:93:9a:
         2e:1e:44:30:d0:78:a6:ca:66:66:aa:a2:3d:58:8a:97:77:31:
         5f:6f:3a:da:08:5e:ed:b1:5f:54:89:24:1a:38:b9:40:d7:f7:
         08:03:97:99:9d:b0:6f:5e:b3:f1:f8:33:fb:8d:37:cf:ae:a3:
         d0:9d:d3:ce:13:c1:f6:73:87:d0:0c:b7:ea:bd:e3:6d:1b:c0:
         ba:69:69:ca:9a:b2:cb:58:d6:75:c6:2d:a9:5e:e7:54:67:31:
         3f:40:a8:e8:0b:93:11:52:ad:9a:70:0a:78:cf:04:7e:85:f0:
         61:a1:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:23:31 2025 by rpki-client