Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          AvLx4DnTG/ZoNK6CiULcWNZpyG/6SyHL+7ux6mO+cJo=
Subject key identifier:   1D:12:0D:2F:74:18:E9:94:16:01:CE:2D:69:74:86:9B:4E:FF:21:09
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       4C33F1566E8A7B09D4D1EFC4C2EC2E8310D6D13A
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:37:54 +0000
ROA not before:           Sat 26 Apr 2025 11:32:54 +0000
ROA not after:            Sat 25 Apr 2026 11:37:54 +0000
asID:                     262708
IP address blocks:        186.193.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 16:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:33:f1:56:6e:8a:7b:09:d4:d1:ef:c4:c2:ec:2e:83:10:d6:d1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:32:54 2025 GMT
            Not After : Apr 25 11:37:54 2026 GMT
        Subject: CN=1D120D2F7418E9941601CE2D6974869B4EFF2109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:60:54:5e:22:8b:63:c2:a9:10:fc:e1:3e:2b:
                    85:58:b6:28:3e:b4:fe:4c:4f:8f:c0:55:d4:5a:9b:
                    46:cc:ce:b2:68:7e:2b:f6:d9:e7:b1:4d:2c:38:3a:
                    42:6b:c1:34:95:22:15:a1:da:f4:2e:6d:e0:c0:aa:
                    e1:d6:40:5c:15:e5:80:e6:3b:3d:4e:54:64:16:2e:
                    02:b3:41:cd:f6:0a:2f:eb:ae:b4:d6:81:85:31:37:
                    79:a9:e7:ab:6f:9c:48:cb:7f:7f:db:b9:2a:04:32:
                    5d:0d:2f:14:9e:46:19:ee:f6:5c:36:0b:df:d5:f7:
                    c4:83:48:8b:12:b3:0f:d2:35:4b:be:1d:9a:2c:83:
                    e3:ad:73:9f:f2:7d:90:7b:d6:54:d7:d0:78:c0:f2:
                    f5:70:1a:6e:04:79:ca:24:c6:40:a6:47:e3:d8:97:
                    f5:72:05:43:2a:85:60:63:fa:35:d9:17:2a:00:97:
                    6e:a1:a8:81:78:a3:3f:c2:6b:59:d1:df:a2:e6:7e:
                    96:4b:9c:56:6d:a1:9d:14:0c:a1:6c:de:48:10:94:
                    5d:82:98:54:1d:fd:5f:2d:3f:7e:54:11:e6:3b:47:
                    d4:df:f0:bb:65:5f:b0:bf:11:a8:4b:ce:7e:1a:81:
                    31:1e:02:c0:06:1c:7c:08:fe:cc:27:6b:a1:c5:4b:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:12:0D:2F:74:18:E9:94:16:01:CE:2D:69:74:86:9B:4E:FF:21:09
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:56:e2:5a:73:a4:b6:b7:4c:bd:c8:57:8f:55:b0:22:6c:6b:
         5c:2e:1c:96:d0:44:8d:4d:a9:ee:16:5a:cf:97:3e:e8:a5:bf:
         a0:a4:d7:be:8a:df:e5:07:8c:c0:35:10:93:66:5c:f6:f2:5c:
         b2:f9:08:47:42:a7:7b:29:04:d8:71:e8:74:5f:10:63:e0:8c:
         86:24:c4:52:ab:88:7f:c7:cc:2b:94:b3:b4:4f:03:5e:3a:37:
         7f:68:9e:96:7d:c1:e0:af:47:33:93:f0:e4:72:b1:3d:e3:87:
         4a:01:fd:79:32:6f:d1:18:47:86:92:b6:c0:76:5e:a7:7e:ba:
         78:f2:24:71:5b:5b:a8:68:91:a4:74:1c:4a:a2:34:18:80:63:
         dc:42:5d:4a:fe:36:94:02:cc:47:71:4e:e6:a3:79:c4:c5:23:
         45:ac:c7:26:29:24:14:04:bd:7b:04:7f:fd:e4:f9:58:cc:f3:
         64:41:ed:44:50:03:76:0f:ff:6b:1a:d1:53:8a:92:33:6f:ff:
         b3:05:6c:0e:bd:a2:0b:b0:f2:36:2e:c8:d2:f2:92:b1:4b:e6:
         dc:d4:87:9d:5a:22:45:b8:45:3a:ee:d3:fe:39:aa:d3:e1:fc:
         cb:68:c8:f5:32:8b:84:6d:df:67:b2:0e:88:a3:08:06:ea:dc:
         2a:26:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:40:18 2025 by rpki-client