Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          UjywYxLo3HjxGXjZDdQ4Lx2TtXFXr1lPhdwQS9hKUt8=
Subject key identifier:   9E:97:E6:12:E0:98:0A:98:F1:C2:CE:BC:0D:1D:BA:DD:93:A2:EF:E6
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       19DACF6C3BDA1E922D8F97B6562D41111897024F
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:44:04 +0000
ROA not before:           Sat 26 Apr 2025 11:39:04 +0000
ROA not after:            Sat 25 Apr 2026 11:44:04 +0000
asID:                     262708
IP address blocks:        186.193.36.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 16:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:da:cf:6c:3b:da:1e:92:2d:8f:97:b6:56:2d:41:11:18:97:02:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:39:04 2025 GMT
            Not After : Apr 25 11:44:04 2026 GMT
        Subject: CN=9E97E612E0980A98F1C2CEBC0D1DBADD93A2EFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:0f:67:df:1c:b6:ec:71:25:78:3e:31:9d:
                    25:2c:d1:04:8b:8d:d5:7d:ed:69:28:05:c3:dd:97:
                    c8:f7:5d:ee:89:5c:21:a9:a3:49:25:14:19:13:e5:
                    39:2b:62:8c:bd:3d:98:97:88:58:66:f4:7d:1d:14:
                    e2:b6:e1:1a:f5:1b:24:2f:71:b2:87:6b:f4:bf:71:
                    0f:80:7a:ae:ea:bb:29:c6:60:ab:e3:86:77:2f:84:
                    1c:7d:b2:6d:3d:42:6c:38:99:a3:b0:73:0b:53:73:
                    c6:f8:f7:73:96:87:94:e9:2f:01:98:cf:eb:04:43:
                    44:53:59:14:0c:0d:8d:d6:33:9e:7f:1b:c7:4b:23:
                    01:b4:23:c5:7d:0c:62:67:13:03:61:64:d2:33:89:
                    b0:bc:ce:98:b9:f6:6c:b7:5f:aa:1a:f9:03:3c:69:
                    fa:76:56:88:fc:8d:60:34:31:e9:e5:13:2a:cd:d0:
                    45:7b:a3:71:fa:27:b9:90:bf:67:ff:b0:7f:35:14:
                    1b:69:ae:1f:da:4e:d7:2e:37:dd:94:30:32:4e:b6:
                    0e:dc:6d:e7:ef:89:76:d4:83:f9:0b:d4:bc:67:06:
                    46:7f:b5:d4:19:2d:29:e1:66:04:0a:a7:5e:c2:3f:
                    9e:0d:94:8d:73:fd:59:67:31:d1:eb:cb:dc:28:55:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:E6:12:E0:98:0A:98:F1:C2:CE:BC:0D:1D:BA:DD:93:A2:EF:E6
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:16:b9:1c:e1:fa:87:8b:1d:45:43:d4:01:17:c0:bc:af:
         4d:e7:47:2d:12:1d:e6:a6:35:5c:2e:49:cc:91:61:09:d7:56:
         3a:a7:f8:53:4a:61:55:a9:cc:dd:84:8a:6c:29:f2:e2:48:d2:
         da:b2:92:d8:db:5e:a0:76:97:10:54:14:58:18:b3:e7:5f:67:
         61:2c:35:9f:ce:71:9e:40:40:ff:74:1b:01:5d:7b:8d:3a:d8:
         e1:77:24:c0:98:a7:02:bf:cb:e6:ad:86:fc:05:74:92:1f:6b:
         0f:53:c3:3a:25:7d:d0:a3:c1:a1:12:de:80:89:9b:87:91:bc:
         3f:62:03:18:49:d2:a2:fa:64:73:19:48:8a:98:7e:d4:21:3f:
         3a:98:06:b3:68:3c:b7:a6:2a:44:fa:2f:11:97:c2:8e:30:e2:
         90:6f:26:09:83:ce:6f:22:f6:b3:f4:a3:f4:13:81:bf:cb:3f:
         26:99:0d:a6:32:ef:17:2a:05:58:83:a2:a4:34:5f:0b:8c:75:
         33:6f:c0:48:c1:38:45:d8:1b:34:2f:c5:c5:14:d0:c5:9a:02:
         30:0c:3b:be:2b:10:7f:a1:4f:22:0e:7a:23:18:b9:98:fa:92:
         50:ec:e5:a4:6d:9f:70:57:b6:16:7f:59:d1:4e:21:18:73:fd:
         8c:5c:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:35:02 2025 by rpki-client