Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32312d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32312d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          KsUBDK0b1+cv6wy9eYhg2E1WwSNtksMP5e4ahI9neIw=
Subject key identifier:   93:70:24:E6:D1:1C:49:C2:05:41:67:79:EF:9E:D5:E9:4E:D2:E2:7B
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       18526754AD3966D146F6CFD203E782839AFFA544
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32312d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:39:12 +0000
ROA not before:           Sat 26 Apr 2025 11:34:12 +0000
ROA not after:            Sat 25 Apr 2026 11:39:12 +0000
asID:                     262708
IP address blocks:        186.193.32.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 22:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:52:67:54:ad:39:66:d1:46:f6:cf:d2:03:e7:82:83:9a:ff:a5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:34:12 2025 GMT
            Not After : Apr 25 11:39:12 2026 GMT
        Subject: CN=937024E6D11C49C205416779EF9ED5E94ED2E27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:26:8b:7d:22:30:8d:11:1c:69:07:c1:9e:
                    0e:c7:1e:2f:eb:06:14:ea:e4:cc:ba:d6:ae:6a:92:
                    86:e4:b3:a6:0b:9c:0e:51:98:52:b3:bc:2a:61:0a:
                    23:54:60:85:3d:b8:33:5e:05:0b:6d:aa:fd:4e:23:
                    e1:39:ca:0c:6e:db:85:14:01:c5:a8:3d:b4:1b:55:
                    e9:56:30:b0:73:3d:ad:04:b6:e6:62:51:03:3c:92:
                    98:b0:d1:16:5e:4b:0f:38:53:2d:bb:e0:68:68:91:
                    46:a4:0a:b4:2c:f5:5d:eb:4a:ed:78:75:96:2e:32:
                    2e:a4:3a:fd:0b:dd:0d:d1:a5:31:4e:b1:a7:72:a4:
                    10:da:1c:ab:09:e4:b2:d3:d0:24:4e:55:6f:25:f8:
                    8b:aa:6c:b8:57:0d:17:4f:28:a4:8e:89:b1:bd:49:
                    f0:74:1b:0e:56:6a:46:f3:e9:38:94:49:eb:6d:2a:
                    ea:14:f4:c5:af:a1:0d:be:b5:31:4a:ea:d8:5a:fa:
                    e5:62:6b:04:e1:14:ef:35:9b:9c:bc:9d:a4:90:a4:
                    fa:e9:3f:eb:37:21:fa:d4:65:65:28:2b:f1:e4:68:
                    3a:e4:26:2d:4b:b5:1d:12:89:99:5b:44:6b:d9:45:
                    03:51:04:9f:c0:cf:b2:e7:91:fb:51:ec:72:01:83:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:70:24:E6:D1:1C:49:C2:05:41:67:79:EF:9E:D5:E9:4E:D2:E2:7B
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32312d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:36:da:6e:84:4c:4c:2f:1e:4e:d1:55:86:d1:02:b7:f7:b7:
         61:8a:8b:b9:45:57:01:96:7d:f1:0f:d4:a5:f3:d4:79:16:5d:
         9e:72:54:1f:d9:6a:9f:ce:cb:1e:40:00:a7:32:3a:08:49:b2:
         ce:cd:5c:b3:3f:90:00:7c:c9:2d:85:22:04:07:f9:1f:77:18:
         35:bb:d6:37:f1:59:6b:b8:99:d7:87:9b:45:79:2c:51:c8:a4:
         c2:34:fa:32:f7:12:52:47:50:76:c0:54:ab:db:1a:33:f2:7a:
         de:9a:69:0c:32:5a:cd:49:0b:b7:47:4f:d1:e9:1e:dc:2f:5e:
         06:bb:40:e0:ec:a2:cf:74:ba:ec:6e:45:78:05:a0:af:d2:84:
         96:8e:b8:12:04:f0:83:27:bb:ac:1e:cb:f2:a9:ca:c8:81:da:
         f0:11:27:7b:25:77:18:bf:6f:8d:9f:41:11:6c:42:40:c3:05:
         83:61:18:2d:7a:56:e5:e8:af:fe:43:c6:d9:08:af:6e:73:27:
         e2:bd:96:7a:40:10:2d:2f:f5:ee:9f:13:75:f6:49:bc:5c:ef:
         27:80:2e:00:fb:97:c6:a1:7a:01:59:d8:b1:d8:bd:56:a7:37:
         71:80:7d:6f:db:77:a6:7a:75:4f:41:45:86:d8:b1:43:4c:59:
         ed:56:66:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGFJnVK05ZtFG9s/SA+eCg5r/pUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3NjU0M0MxRTlBQkNBMDFFN0UxRDQ5RDdGQ0Q4OTBF
RDJBM0ZFNDAeFw0yNTA0MjYxMTM0MTJaFw0yNjA0MjUxMTM5MTJaMDMxMTAvBgNV
BAMTKDkzNzAyNEU2RDExQzQ5QzIwNTQxNjc3OUVGOUVENUU5NEVEMkUyN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS2iaLfSIwjREcaQfBng7HHi/r
BhTq5My61q5qkobks6YLnA5RmFKzvCphCiNUYIU9uDNeBQttqv1OI+E5ygxu24UU
AcWoPbQbVelWMLBzPa0EtuZiUQM8kpiw0RZeSw84Uy274GhokUakCrQs9V3rSu14
dZYuMi6kOv0L3Q3RpTFOsadypBDaHKsJ5LLT0CROVW8l+IuqbLhXDRdPKKSOibG9
SfB0Gw5Wakbz6TiUSettKuoU9MWvoQ2+tTFK6tha+uViawThFO81m5y8naSQpPrp
P+s3IfrUZWUoK/HkaDrkJi1LtR0SiZlbRGvZRQNRBJ/Az7LnkftR7HIBgyk5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk3Ak5tEcScIFQWd5757V6U7S4nswHwYDVR0j
BBgwFoAUJnZUPB6avKAefh1J1/zYkO0qP+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC8yNjc2NTQzQzFFOUFCQ0EwMUU3RTFENDlEN0ZDRDg5MEVEMkEzRkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NzY1NDNDMUU5QUJDQTAx
RTdFMUQ0OUQ3RkNEODkwRUQyQTNGRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTMzMzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO6wSAwDQYJKoZIhvcNAQELBQADggEBAEU22m6E
TEwvHk7RVYbRArf3t2GKi7lFVwGWffEP1KXz1HkWXZ5yVB/Zap/Oyx5AAKcyOghJ
ss7NXLM/kAB8yS2FIgQH+R93GDW71jfxWWu4mdeHm0V5LFHIpMI0+jL3ElJHUHbA
VKvbGjPyet6aaQwyWs1JC7dHT9HpHtwvXga7QODsos90uuxuRXgFoK/ShJaOuBIE
8IMnu6wey/KpysiB2vARJ3sldxi/b42fQRFsQkDDBYNhGC16VuXor/5DxtkIr25z
J+K9lnpAEC0v9e6fE3X2Sbxc7yeALgD7l8ahegFZ2LHYvVanN3GAfW/bd6Z6dU9B
RYbYsUNMWe1WZu8=
-----END CERTIFICATE-----
Generated at Fri May 2 16:14:40 2025 by rpki-client