Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          Ot1EWApvBmh4FPs84Z1lY3kwhdYkbmmnY60dPj9p9ec=
Subject key identifier:   FB:7E:10:DE:D7:56:F0:98:80:47:CE:C2:C0:00:DE:63:BA:8E:63:1F
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       1ACD3B0E6D51C6BB7B9718AFB81AD026D1AF0E91
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa
Signing time:             Thu 06 Mar 2025 17:11:10 +0000
ROA not before:           Thu 06 Mar 2025 17:06:10 +0000
ROA not after:            Thu 05 Mar 2026 17:11:10 +0000
asID:                     262772
IP address blocks:        186.232.178.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 23:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:3b:0e:6d:51:c6:bb:7b:97:18:af:b8:1a:d0:26:d1:af:0e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Mar  6 17:06:10 2025 GMT
            Not After : Mar  5 17:11:10 2026 GMT
        Subject: CN=FB7E10DED756F0988047CEC2C000DE63BA8E631F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:8e:85:40:2a:3d:20:66:3e:e7:86:3d:e8:
                    dd:39:e0:be:d3:d0:9a:6f:6c:39:28:13:80:30:8c:
                    3e:68:a2:a1:e7:0b:c8:03:c8:27:73:f8:f5:f4:cf:
                    c2:fd:1a:00:ab:83:58:04:fb:5f:91:54:e7:d7:14:
                    5c:ae:96:0a:6a:69:f6:2f:d5:0d:11:5e:3d:6a:2a:
                    92:2e:df:a7:5a:70:0c:e6:f7:70:d6:13:7c:f0:2e:
                    34:7b:d9:62:91:42:eb:09:3d:25:04:7b:75:c4:7a:
                    7d:53:97:9b:e3:19:40:6c:d2:0a:e5:b9:0a:26:1f:
                    b9:35:59:3c:96:64:94:7a:62:16:59:18:4d:15:2f:
                    24:cc:fa:02:00:8a:c3:6c:a7:fc:43:91:37:4e:50:
                    bc:b6:e0:a0:46:96:37:22:02:77:ca:ba:d4:97:90:
                    3f:aa:a9:de:32:ad:f3:ac:95:69:26:8c:ca:f5:96:
                    13:93:5b:de:3b:d9:7f:46:d7:7d:34:77:aa:aa:3e:
                    db:52:e2:e3:ef:44:19:1f:b5:55:ed:70:84:85:a8:
                    b0:76:6c:2b:d6:4f:29:e5:c4:c5:85:91:c0:32:bc:
                    7f:be:a1:59:bc:0c:2c:28:1c:7c:55:c1:0e:4a:58:
                    2e:1a:bc:d0:59:09:9c:4e:72:d7:d1:fd:89:60:76:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:10:DE:D7:56:F0:98:80:47:CE:C2:C0:00:DE:63:BA:8E:63:1F
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bc:b5:07:74:00:0a:ea:72:37:51:3a:4c:05:1d:8e:a7:ce:
         b8:81:ed:2b:b9:ba:19:27:de:bb:4a:e2:39:43:0a:d7:2d:53:
         45:3c:b1:30:4c:3d:1b:c5:9c:2a:0c:7b:be:cd:46:9e:14:bf:
         ed:b5:69:8b:cf:e9:36:5c:9b:4a:3b:6e:6d:07:cb:df:71:84:
         78:0f:3d:0a:49:dd:83:e8:44:fd:6c:65:3e:29:ec:84:63:1c:
         ce:1c:c6:90:44:6c:5f:6d:17:40:b8:36:3e:75:fd:f1:83:5d:
         03:5c:d2:27:45:1f:be:c9:cc:0e:d9:56:35:ad:67:2c:5b:ad:
         b8:49:f6:a3:0c:ab:78:c3:27:1a:d6:5c:16:76:21:34:5d:eb:
         00:72:dc:f0:40:eb:36:a2:fd:cc:31:50:3b:a1:97:f2:cb:8f:
         bf:24:a4:ef:6e:20:fc:61:d3:6d:86:fd:5e:e7:3e:d2:36:b7:
         61:93:66:47:df:b3:80:a3:90:c0:db:a9:f4:6d:e1:73:23:3d:
         09:b7:52:8c:46:48:93:41:eb:07:25:47:48:f0:fd:21:c4:c0:
         eb:82:c4:16:9a:e6:36:87:25:1d:11:58:75:0c:0f:72:e1:c0:
         e0:a8:02:dc:c8:56:84:4f:92:de:16:bb:28:a7:ee:ba:d5:c2:
         3c:74:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:26 2025 by rpki-client