Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          yQAtuRJoaLO0BDEi2khNSOk1AE1scElp1r7U4KEDqNw=
Subject key identifier:   89:47:98:E6:6F:46:B9:8E:84:A0:BA:70:D0:7E:5E:2F:F8:2C:F6:DE
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       5D188BF1D6EAA99F55877279B419FC183E41197D
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:44:31 +0000
ROA not before:           Sat 26 Apr 2025 11:39:31 +0000
ROA not after:            Sat 25 Apr 2026 11:44:31 +0000
asID:                     262708
IP address blocks:        186.193.38.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 10:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:18:8b:f1:d6:ea:a9:9f:55:87:72:79:b4:19:fc:18:3e:41:19:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:39:31 2025 GMT
            Not After : Apr 25 11:44:31 2026 GMT
        Subject: CN=894798E66F46B98E84A0BA70D07E5E2FF82CF6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:c6:52:31:e9:38:57:22:5d:24:29:bd:9f:
                    3b:8c:ee:bf:d4:a2:5b:7b:f4:4a:53:f2:9f:03:21:
                    84:4c:5b:1c:1d:39:18:2e:33:25:30:c0:b2:7b:d0:
                    5e:b5:47:44:f6:49:9f:c7:62:03:cb:bc:8d:85:9d:
                    e1:59:e4:84:27:ae:8e:32:62:63:0a:5d:c5:e4:39:
                    8e:69:28:61:a1:cb:43:7c:3b:ed:9d:ad:dc:a3:d8:
                    9d:07:a4:18:36:dc:b6:bc:e7:f5:32:52:ff:d6:59:
                    38:4d:d3:81:86:cc:15:a4:ee:15:9d:d6:21:03:00:
                    8a:b1:25:c9:bd:19:ed:ea:3a:9a:3e:f1:21:14:95:
                    2a:2c:ed:a9:bd:6d:98:09:e3:03:7e:67:55:f4:16:
                    b3:77:78:30:35:e6:cb:ef:cc:f9:45:4e:75:4b:1f:
                    d1:db:f4:fe:2c:87:21:8f:c3:50:a9:60:2d:fd:8c:
                    87:84:90:70:b0:4b:58:bc:9a:18:d6:9c:b9:d4:3c:
                    43:d2:64:cf:81:68:8c:41:67:65:7d:ee:39:75:86:
                    c9:e3:bb:21:b8:21:d2:ea:5c:ef:96:74:1f:13:0d:
                    b4:5a:b4:ee:d4:d4:64:d9:96:87:aa:3a:79:2d:83:
                    ae:3e:ef:43:ca:9e:58:fa:2e:bd:95:cd:32:5d:2b:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:47:98:E6:6F:46:B9:8E:84:A0:BA:70:D0:7E:5E:2F:F8:2C:F6:DE
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:32:97:f8:25:02:2d:fc:a2:c9:f9:33:d1:42:e8:f3:61:a5:
         28:60:75:28:c5:06:24:9d:d9:b0:11:6d:43:5a:59:15:21:49:
         75:7e:53:f3:44:c3:34:86:9f:64:e4:a5:ad:75:78:eb:3b:ee:
         e8:c4:ae:d5:e0:cb:e5:9f:71:d5:c8:60:8a:d6:45:3d:1b:d4:
         c6:27:37:2d:d7:17:29:6a:89:fb:4a:f6:cb:16:64:1a:d4:4b:
         0a:ff:a0:28:4e:4f:76:d8:a5:fe:95:76:9b:ee:c1:70:80:b0:
         f6:5a:e7:fc:42:f3:8f:d0:5b:cf:45:e8:21:c9:92:74:4e:cf:
         1a:d2:ee:50:40:3c:25:e5:e2:62:ad:09:39:4e:94:b1:42:0e:
         49:51:b1:e6:72:39:30:0f:b9:19:4b:ce:32:6b:17:71:52:06:
         2e:7d:8f:d2:0a:79:e2:3a:76:cd:f0:de:6e:c4:47:fb:97:b8:
         a6:72:a4:03:06:e5:93:2c:11:0c:7f:98:05:65:ef:d8:d6:b6:
         8d:51:c2:95:14:5c:11:a7:f9:1c:5e:a2:a7:29:8a:ca:83:ce:
         72:27:6e:94:0d:09:04:bc:15:d9:cd:02:4a:fd:93:e7:ee:0a:
         9e:11:8a:f2:7b:a5:89:ca:2f:81:1a:a2:23:5b:0a:65:c9:de:
         6a:2b:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:34:57 2025 by rpki-client