Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa
File:                     3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa (raw, json)
Hash identifier:          0k91huq3qtESiaBqBav+78qSL9Ra2qND2IacErLOUgA=
Subject key identifier:   D1:D2:93:DC:BA:6D:07:BF:98:91:49:0F:E6:E8:46:86:28:63:B7:80
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       550A1FD964BF8D1C8EADA689852D3AF5CBB74BB1
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa
Signing time:             Thu 06 Mar 2025 01:43:43 +0000
ROA not before:           Thu 06 Mar 2025 01:38:43 +0000
ROA not after:            Thu 05 Mar 2026 01:43:43 +0000
asID:                     52531
IP address blocks:        186.225.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 00:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0a:1f:d9:64:bf:8d:1c:8e:ad:a6:89:85:2d:3a:f5:cb:b7:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Mar  6 01:38:43 2025 GMT
            Not After : Mar  5 01:43:43 2026 GMT
        Subject: CN=D1D293DCBA6D07BF9891490FE6E846862863B780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:ea:06:e4:40:00:82:3e:bb:a8:3c:f5:09:
                    ec:86:63:e0:23:9f:7c:f6:3f:9f:c9:c2:50:35:dc:
                    f7:85:0f:b9:43:7e:d3:75:1c:d6:8d:b8:ef:3e:b5:
                    b7:6a:30:9f:2d:ec:fa:7f:c3:03:ed:9c:4d:bb:6c:
                    56:c5:20:40:19:79:1f:ef:e3:85:fc:47:cb:2d:a8:
                    b4:e1:46:94:e6:c4:b7:76:46:b1:9d:7e:11:c1:38:
                    fc:60:38:81:bc:36:cf:84:41:e3:6a:97:13:38:4f:
                    ef:f3:04:95:56:3d:a9:34:5b:33:f4:e6:44:39:ba:
                    f9:dc:ab:16:46:7c:dd:35:64:45:0d:a8:2b:80:0b:
                    12:c2:b0:83:77:89:90:a1:c0:62:a6:0b:fa:4f:62:
                    64:ac:25:5d:95:89:8a:c9:e9:5a:ba:cb:aa:2a:47:
                    b1:85:70:ba:8c:59:56:6f:8f:32:f4:4d:66:80:95:
                    79:6e:c4:09:91:68:52:e4:1b:fe:be:37:e9:5b:62:
                    7b:53:1c:f7:ca:70:62:64:2c:a1:6a:7b:ba:81:ed:
                    cf:33:9e:a8:03:0e:f0:16:d7:47:23:ab:61:6c:df:
                    20:3a:23:d6:3b:bf:3d:fe:0b:c8:69:52:c8:9b:28:
                    83:e5:3c:d7:a0:3a:e8:01:4c:d3:07:b2:29:b1:11:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D2:93:DC:BA:6D:07:BF:98:91:49:0F:E6:E8:46:86:28:63:B7:80
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:d3:7b:89:eb:9b:fe:bd:44:ec:d3:36:06:43:d5:3a:2f:
         b7:51:0d:d7:c4:33:d6:e0:b1:3b:9f:73:88:2e:ac:29:4b:99:
         fb:63:69:34:20:a2:bf:8e:a0:ec:2e:ad:16:4b:8a:c2:d7:90:
         75:6b:6c:58:2b:2e:91:13:ea:7b:30:16:95:4d:d7:ed:36:c2:
         0e:70:13:f4:15:3f:b0:44:68:fb:c1:b4:68:c2:18:a6:25:85:
         e4:e8:de:67:14:b4:57:37:c5:45:5b:c3:74:ce:ab:40:7d:4a:
         52:23:26:08:4d:8c:66:e8:79:3b:26:f2:79:17:69:e4:e0:1d:
         f3:a1:47:a3:49:4c:bb:fd:42:85:13:13:68:1c:6a:ec:34:97:
         c0:8f:b7:62:0f:eb:9e:72:96:19:54:4f:51:94:8d:31:44:2b:
         5d:4d:18:c5:58:84:c3:55:48:6e:42:6a:55:cf:25:1a:41:b1:
         19:2b:a7:2b:cf:3e:c3:1e:db:e0:62:b0:43:10:72:dd:77:21:
         d8:42:2f:9b:82:07:78:1d:17:0c:cb:54:c0:68:08:46:1b:14:
         ee:ff:e9:8b:08:f6:fc:93:a8:37:6a:d3:42:0b:79:13:d8:9c:
         12:48:71:45:57:0b:08:33:42:b2:a5:e5:d4:c9:ad:c1:6a:ff:
         c0:7b:d2:26
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVQof2WS/jRyOraaJhS069cu3S7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNTAzMDYwMTM4NDNaFw0yNjAzMDUwMTQzNDNaMDMxMTAvBgNV
BAMTKEQxRDI5M0RDQkE2RDA3QkY5ODkxNDkwRkU2RTg0Njg2Mjg2M0I3ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/eoG5EAAgj67qDz1CeyGY+Aj
n3z2P5/JwlA13PeFD7lDftN1HNaNuO8+tbdqMJ8t7Pp/wwPtnE27bFbFIEAZeR/v
44X8R8stqLThRpTmxLd2RrGdfhHBOPxgOIG8Ns+EQeNqlxM4T+/zBJVWPak0WzP0
5kQ5uvncqxZGfN01ZEUNqCuACxLCsIN3iZChwGKmC/pPYmSsJV2ViYrJ6Vq6y6oq
R7GFcLqMWVZvjzL0TWaAlXluxAmRaFLkG/6+N+lbYntTHPfKcGJkLKFqe7qB7c8z
nqgDDvAW10cjq2Fs3yA6I9Y7vz3+C8hpUsibKIPlPNegOugBTNMHsimxEQa1AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU0dKT3LptB7+YkUkP5uhGhihjt4AwHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
ODM2MmUzMjMyMzUyZTMyMzEzNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzIz
NTMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAO64dgwDQYJKoZIhvcNAQELBQADggEBABjG03uJ65v+
vUTs0zYGQ9U6L7dRDdfEM9bgsTufc4gurClLmftjaTQgor+OoOwurRZLisLXkHVr
bFgrLpET6nswFpVN1+02wg5wE/QVP7BEaPvBtGjCGKYlheTo3mcUtFc3xUVbw3TO
q0B9SlIjJghNjGboeTsm8nkXaeTgHfOhR6NJTLv9QoUTE2gcauw0l8CPt2IP655y
lhlUT1GUjTFEK11NGMVYhMNVSG5CalXPJRpBsRkrpyvPPsMe2+BisEMQct13IdhC
L5uCB3gdFwzLVMBoCEYbFO7/6YsI9vyTqDdq00ILeRPYnBJIcUVXCwgzQrKl5dTJ
rcFq/8B70iY=
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:23:54 2025 by rpki-client