Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa
File:                     3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          p2ZKBK2RslFHotS2rI2264Fl7U/uUXDvWg+NbiqAYWQ=
Subject key identifier:   72:5C:4A:42:AA:64:58:9B:30:50:30:D0:96:35:D7:B8:CC:C9:C7:8F
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       3C5361553FC4DC8CEDC6AAB4EB666A325AA6B681
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:39:30 +0000
ROA not before:           Sat 26 Apr 2025 11:34:30 +0000
ROA not after:            Sat 25 Apr 2026 11:39:30 +0000
asID:                     262708
IP address blocks:        186.193.40.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 22:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:53:61:55:3f:c4:dc:8c:ed:c6:aa:b4:eb:66:6a:32:5a:a6:b6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:34:30 2025 GMT
            Not After : Apr 25 11:39:30 2026 GMT
        Subject: CN=725C4A42AA64589B305030D09635D7B8CCC9C78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:6c:ce:92:55:6e:4f:4a:25:4a:7f:71:9f:
                    92:d4:fc:1c:6f:99:07:44:c3:55:f4:19:ae:3d:0d:
                    64:8a:19:76:a0:a9:75:33:45:b8:8a:ce:1e:1f:76:
                    13:01:b9:0f:7c:09:7c:31:9e:63:8c:c2:4b:d2:98:
                    a9:1a:36:a2:09:9d:60:98:33:d8:b6:c0:7b:2a:13:
                    d1:1a:ab:42:c2:36:26:6a:74:d6:4d:cc:fb:4b:c6:
                    3b:bf:a4:ff:55:81:6f:c3:37:f2:9d:17:2c:f0:c5:
                    b4:5c:9f:62:a5:32:87:9f:05:80:64:dd:51:99:52:
                    29:90:ec:59:6f:d7:c3:ab:52:57:fa:43:55:84:f1:
                    7d:d9:5e:49:6e:75:9e:01:1a:ec:28:4c:ef:4f:48:
                    88:51:c6:d1:c7:d7:97:c0:d8:d7:5c:d9:a3:17:66:
                    71:c1:9c:07:22:8e:1a:dd:ba:90:46:47:ce:ed:fe:
                    a9:88:ad:cb:32:ca:06:41:72:f9:ce:6d:57:d4:e5:
                    3d:bb:9b:8d:57:d4:b0:33:8f:59:7d:86:a9:34:95:
                    a1:40:48:ef:9c:2e:79:97:e9:af:18:b5:70:9c:37:
                    a7:27:ae:5e:c3:fe:f5:39:5e:2e:1d:96:a3:12:d2:
                    a0:3c:c0:bc:5b:3b:5c:c5:41:8c:4b:40:95:2b:4f:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:4A:42:AA:64:58:9B:30:50:30:D0:96:35:D7:B8:CC:C9:C7:8F
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:1c:c1:e3:b1:df:f8:ad:29:90:ae:ae:be:1d:b8:6f:40:
         da:58:9d:9a:8c:df:01:31:22:0e:20:a2:3f:65:40:ca:e3:6d:
         31:a8:e8:09:e1:f8:8c:d1:a0:8c:93:47:e9:89:05:23:04:dc:
         35:1d:70:d7:c0:14:53:af:69:cc:0a:9e:08:85:34:b0:cf:52:
         5e:75:15:05:a0:d5:01:1c:3c:4c:30:d3:33:72:85:4b:3d:45:
         be:20:7c:ec:92:c4:77:ce:8e:59:df:1f:4e:32:9c:5a:3f:bb:
         02:f5:92:bf:d2:5a:22:22:e0:57:16:22:dd:d5:ae:08:24:56:
         bb:40:09:06:c6:df:20:97:7c:02:e1:77:d5:a1:9a:69:b4:61:
         91:f7:b7:7a:5c:65:c0:9a:18:e4:10:61:28:5f:31:e8:12:37:
         75:e7:9f:43:1d:d1:8d:32:a4:fc:00:c2:02:25:76:ef:0b:1a:
         a0:af:00:c5:b0:62:f6:ce:58:0c:49:2e:00:a0:3d:cb:bc:4d:
         c4:3f:3c:9c:1a:ae:18:a9:bd:df:e4:b6:b0:e9:e4:44:92:17:
         ef:ce:17:dc:fb:10:61:76:eb:56:ac:17:09:ea:6e:19:16:72:
         d9:4b:e2:8c:a2:b7:ac:80:5e:c9:ec:09:3e:81:2c:12:0c:28:
         4f:e5:b3:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPFNhVT/E3Iztxqq062ZqMlqmtoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3NjU0M0MxRTlBQkNBMDFFN0UxRDQ5RDdGQ0Q4OTBF
RDJBM0ZFNDAeFw0yNTA0MjYxMTM0MzBaFw0yNjA0MjUxMTM5MzBaMDMxMTAvBgNV
BAMTKDcyNUM0QTQyQUE2NDU4OUIzMDUwMzBEMDk2MzVEN0I4Q0NDOUM3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpK2zOklVuT0olSn9xn5LU/Bxv
mQdEw1X0Ga49DWSKGXagqXUzRbiKzh4fdhMBuQ98CXwxnmOMwkvSmKkaNqIJnWCY
M9i2wHsqE9Eaq0LCNiZqdNZNzPtLxju/pP9VgW/DN/KdFyzwxbRcn2KlMoefBYBk
3VGZUimQ7Flv18OrUlf6Q1WE8X3ZXkludZ4BGuwoTO9PSIhRxtHH15fA2Ndc2aMX
ZnHBnAcijhrdupBGR87t/qmIrcsyygZBcvnObVfU5T27m41X1LAzj1l9hqk0laFA
SO+cLnmX6a8YtXCcN6cnrl7D/vU5Xi4dlqMS0qA8wLxbO1zFQYxLQJUrT6n3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUclxKQqpkWJswUDDQljXXuMzJx48wHwYDVR0j
BBgwFoAUJnZUPB6avKAefh1J1/zYkO0qP+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC8yNjc2NTQzQzFFOUFCQ0EwMUU3RTFENDlEN0ZDRDg5MEVEMkEzRkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NzY1NDNDMUU5QUJDQTAx
RTdFMUQ0OUQ3RkNEODkwRUQyQTNGRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO6wSgwDQYJKoZIhvcNAQELBQADggEBACowHMHj
sd/4rSmQrq6+HbhvQNpYnZqM3wExIg4goj9lQMrjbTGo6Anh+IzRoIyTR+mJBSME
3DUdcNfAFFOvacwKngiFNLDPUl51FQWg1QEcPEww0zNyhUs9Rb4gfOySxHfOjlnf
H04ynFo/uwL1kr/SWiIi4FcWIt3VrggkVrtACQbG3yCXfALhd9Whmmm0YZH3t3pc
ZcCaGOQQYShfMegSN3Xnn0Md0Y0ypPwAwgIldu8LGqCvAMWwYvbOWAxJLgCgPcu8
TcQ/PJwarhipvd/ktrDp5ESSF+/OF9z7EGF261asFwnqbhkWctlL4oyit6yAXsns
CT6BLBIMKE/ls+w=
-----END CERTIFICATE-----
Generated at Fri May 2 14:25:13 2025 by rpki-client