Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          Av/Da63Oq6c/JEY8+4ZJSZOwvEDi8Ul8H/VzC65fN8Y=
Subject key identifier:   1F:CF:EC:24:4A:D0:92:CD:AA:C5:30:59:75:4E:19:21:69:F9:C3:CD
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       4D75B99A49A3A083A9B66D35B1D737C3827114AD
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:39:45 +0000
ROA not before:           Sat 26 Apr 2025 11:34:45 +0000
ROA not after:            Sat 25 Apr 2026 11:39:45 +0000
asID:                     262708
IP address blocks:        186.193.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:75:b9:9a:49:a3:a0:83:a9:b6:6d:35:b1:d7:37:c3:82:71:14:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:34:45 2025 GMT
            Not After : Apr 25 11:39:45 2026 GMT
        Subject: CN=1FCFEC244AD092CDAAC53059754E192169F9C3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:6e:aa:da:02:f2:45:00:3a:55:06:42:6b:
                    50:4f:2b:76:8f:d6:20:c8:7f:9a:dd:5f:4c:50:62:
                    92:34:31:05:9b:4f:b7:62:1a:77:d2:00:ec:0b:05:
                    e3:52:6a:24:47:63:a4:07:8a:01:1d:19:9a:0d:f6:
                    d3:68:7b:db:81:af:2e:54:50:17:d3:95:26:22:da:
                    42:54:e1:b8:31:ff:66:2f:0b:87:18:5d:d6:c1:12:
                    4c:8e:22:08:c6:fc:01:9d:7a:7a:66:65:af:0e:02:
                    4a:4b:a6:e7:d6:f4:59:17:30:45:11:44:12:8a:9a:
                    52:f5:11:6a:88:af:e7:a5:04:c2:60:80:33:2b:66:
                    e6:97:85:3d:73:af:b6:5c:91:b7:2e:d2:52:45:f2:
                    54:4a:e4:e8:7d:cd:5d:d2:95:35:1f:1e:0b:72:92:
                    f2:dc:77:70:0e:ca:06:82:52:86:ee:4d:72:d2:b6:
                    e6:87:8a:e8:be:6e:a9:69:2d:48:9a:aa:71:30:7c:
                    28:a9:b9:20:9a:57:a5:53:0a:46:79:12:63:3d:8e:
                    a6:61:58:fd:bf:0f:84:2c:17:98:69:94:0d:21:dd:
                    b4:84:f1:b7:90:45:5f:d9:4c:d8:78:26:78:92:7d:
                    e1:de:9a:e5:24:e3:b2:06:0d:4c:82:f4:39:b0:53:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:EC:24:4A:D0:92:CD:AA:C5:30:59:75:4E:19:21:69:F9:C3:CD
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:be:b0:03:e0:6e:28:5c:82:11:5d:e4:0c:8a:eb:49:f5:
         36:6b:56:c4:7d:93:aa:ab:b4:05:0d:03:c6:74:ed:cf:c2:f3:
         24:c5:31:79:19:dd:7a:17:20:7c:a9:72:64:e5:8c:87:de:c4:
         8c:c1:d2:a0:e6:0b:93:d7:9a:55:27:94:47:b3:09:16:85:ff:
         43:83:36:57:0b:a7:5b:fa:5e:f7:4d:35:a2:77:ff:6b:87:e1:
         8e:e8:6c:3d:19:b5:c1:24:27:59:c4:22:1d:c1:0a:af:d8:e9:
         d2:fa:06:08:c1:64:70:7a:2e:ab:a4:f6:1a:cc:a5:0a:f3:89:
         73:0d:c4:17:11:50:b5:bc:f5:31:c4:20:b3:a8:4c:79:41:65:
         78:98:e9:8a:6c:10:d5:cd:b7:b1:24:6e:09:76:85:5b:86:60:
         9f:ec:18:65:9d:a4:ae:f1:18:b9:4b:20:94:ef:ad:33:06:62:
         07:14:0c:a7:55:97:06:7a:2f:55:61:12:fb:40:e0:7e:fd:32:
         07:56:65:e0:cb:36:ea:27:68:14:41:98:22:b3:32:37:24:67:
         cb:7e:8a:50:0f:86:ef:12:a5:86:6f:01:fe:f3:e3:12:8d:b3:
         e4:2e:c8:f4:74:1b:7c:5d:82:26:29:98:60:11:45:f4:04:03:
         0f:35:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:23:52 2025 by rpki-client