Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32322d3332203d3e20323632373038.roa
File:                     3138362e3139332e33362e302f32322d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          Jg9Cwkazwmqbzu0IVmCGwt4Tn1UONqksbS6Zaw4I1Rc=
Subject key identifier:   EE:55:6C:ED:BF:AB:49:81:D0:20:12:CC:27:9B:26:11:62:88:6D:88
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       7E8676603B470C3E7CED1BA076B860952A04F264
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32322d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:40:34 +0000
ROA not before:           Sat 26 Apr 2025 11:35:34 +0000
ROA not after:            Sat 25 Apr 2026 11:40:34 +0000
asID:                     262708
IP address blocks:        186.193.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 16:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:76:60:3b:47:0c:3e:7c:ed:1b:a0:76:b8:60:95:2a:04:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:35:34 2025 GMT
            Not After : Apr 25 11:40:34 2026 GMT
        Subject: CN=EE556CEDBFAB4981D02012CC279B261162886D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:98:65:6a:b5:1b:e0:d0:bd:33:6d:fd:1e:
                    96:dd:79:c8:51:98:64:d0:26:31:31:51:c8:42:50:
                    1c:78:a2:96:ec:44:0e:01:3b:d9:bb:94:f6:7a:12:
                    2e:5c:55:60:95:63:53:f9:e0:c0:04:8e:46:60:00:
                    1d:bd:f3:57:d7:76:51:16:cf:71:46:84:86:7b:b2:
                    60:a3:3b:7a:f1:c6:7a:19:33:c1:d9:0f:a6:96:2a:
                    b0:cc:01:dd:37:8c:81:bf:b9:fa:e2:f7:03:04:fa:
                    83:a0:13:39:a4:9a:3f:fb:1b:cb:44:10:c2:2f:16:
                    36:33:eb:32:5d:1f:e4:c4:0d:1d:df:b4:00:1d:f7:
                    42:97:49:db:67:2a:91:1f:52:ac:73:20:bc:d6:11:
                    33:38:a4:d8:04:73:bd:80:91:d8:68:3b:29:87:29:
                    2f:28:b4:c9:60:21:93:c6:9d:c3:79:c7:0c:6e:2d:
                    d3:c0:29:38:c0:c5:ae:28:9c:d7:17:e9:26:91:7b:
                    ae:8e:ee:cf:5e:19:1e:3b:6e:a2:49:08:69:2b:b1:
                    88:85:f2:40:91:f8:0a:c3:5e:f3:a2:3d:71:96:2b:
                    59:2c:09:23:70:43:2f:e4:c4:86:ba:92:77:09:27:
                    47:d0:5a:3b:fc:ec:9e:f8:9f:d4:fb:36:cf:a9:15:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:6C:ED:BF:AB:49:81:D0:20:12:CC:27:9B:26:11:62:88:6D:88
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32322d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:71:6b:51:3d:0e:a2:37:08:24:b2:ff:4e:43:2d:c3:e7:
         ac:aa:bc:0f:fa:93:a4:8e:ea:3f:83:1b:c3:ff:bd:06:c4:92:
         f1:69:a5:95:6a:8d:ea:08:bc:f7:87:7f:ec:1f:39:aa:45:17:
         fa:1e:dc:2f:ad:01:af:82:4e:2f:a6:16:fa:e7:0c:dc:06:c8:
         53:4b:4c:a4:c6:2b:fe:11:9d:91:45:89:84:ab:61:21:19:01:
         10:bb:7c:17:cd:4a:19:6f:de:4d:4a:24:3a:f8:d9:3b:88:a2:
         35:07:f0:7b:ec:e6:68:08:11:38:83:4b:cb:03:f1:1a:e5:46:
         a3:9d:db:fe:7b:cf:20:d8:e9:36:38:cd:72:03:a4:c1:40:7a:
         8d:a2:99:41:40:38:49:98:66:bd:0b:07:7e:67:6a:04:ab:58:
         bb:2b:25:7e:1b:f6:59:ba:8c:6f:f5:2d:df:c5:9c:be:40:1f:
         19:71:60:fd:d0:a5:d3:15:d1:d1:1c:75:78:22:fe:b9:fb:b0:
         01:1e:e5:fe:7e:6e:a3:af:ab:2f:a5:e8:f4:bc:29:b5:d6:5b:
         d3:44:c9:b6:1b:0c:5d:24:92:7a:a7:64:e7:0f:67:66:12:39:
         42:f3:a8:43:97:98:21:d3:63:ed:57:f4:62:33:6b:63:7c:9f:
         60:1e:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:15:55 2025 by rpki-client