Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e34302e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          RR5NjQVcQgDDBxNRBS+1UTwnftDQQAXxL97yAKc0StU=
Subject key identifier:   A3:3F:FF:57:B8:45:06:33:E5:ED:3D:8D:4D:FA:F5:6F:99:1F:99:DD
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       25E8C68072905A66AA033821FC81CF522158FEED
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32332d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:42:23 +0000
ROA not before:           Sat 26 Apr 2025 11:37:23 +0000
ROA not after:            Sat 25 Apr 2026 11:42:23 +0000
asID:                     262708
IP address blocks:        186.193.40.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 16:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e8:c6:80:72:90:5a:66:aa:03:38:21:fc:81:cf:52:21:58:fe:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:37:23 2025 GMT
            Not After : Apr 25 11:42:23 2026 GMT
        Subject: CN=A33FFF57B8450633E5ED3D8D4DFAF56F991F99DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:06:eb:d2:4e:1d:11:c4:87:aa:f0:f0:15:
                    e3:6a:69:55:f9:86:32:27:59:47:2b:e1:0e:ad:99:
                    61:0e:e6:e0:59:5f:06:a5:95:25:09:87:57:83:9d:
                    43:92:d7:bf:2e:14:5c:54:f9:f6:f6:bb:f1:f0:e6:
                    6d:c2:53:2f:4f:09:40:b2:7f:28:35:66:49:a6:22:
                    03:7b:88:dd:f3:d9:72:95:4b:21:33:4b:3d:5a:f4:
                    19:42:4d:7b:52:9d:2f:02:f3:c9:46:bf:72:29:8b:
                    11:84:d3:75:22:82:d4:2c:0d:b6:cf:f0:63:ba:e4:
                    36:81:fe:7f:84:00:b2:1b:72:e9:13:83:4d:0d:af:
                    13:3f:34:4a:f4:46:5e:59:99:70:8b:e6:39:ee:f0:
                    aa:65:2a:e4:d1:65:4e:cc:73:55:bb:52:a9:65:56:
                    a1:8a:0e:ac:2a:27:fb:0a:b0:5f:fb:2e:e6:32:b4:
                    9d:a6:43:dc:05:d3:01:1c:ff:0c:74:26:2f:5b:6b:
                    d4:b8:b7:9e:88:34:03:d2:43:73:6f:e8:d7:57:f8:
                    c7:5d:3c:ed:8f:80:85:54:ee:75:fd:c5:2d:0e:e0:
                    72:a5:d1:98:b0:7d:89:a8:33:16:7a:f3:14:43:50:
                    ae:fc:fb:aa:5f:ea:cf:01:83:eb:92:76:fe:af:c4:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:FF:57:B8:45:06:33:E5:ED:3D:8D:4D:FA:F5:6F:99:1F:99:DD
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:33:cd:04:33:6c:e0:a8:9e:15:94:12:97:d2:d6:09:86:
         fe:1e:f2:b0:33:f1:33:20:1e:51:04:37:55:6f:cf:58:c1:6b:
         76:56:6c:43:5b:9a:d7:66:87:ce:65:c2:a6:70:81:16:97:5a:
         ef:3b:2b:6e:41:df:b3:61:c7:9e:7e:f8:4b:47:85:ad:b9:30:
         c2:20:fa:38:24:c6:1c:87:7a:e0:a1:d7:96:6b:4b:83:e5:fb:
         c6:51:1f:5a:6b:54:b5:46:a9:83:b4:bd:a8:24:df:a4:71:9f:
         d1:67:c5:16:c0:51:8b:40:3b:2d:95:4d:75:4a:57:05:f8:56:
         8c:77:44:57:48:ea:aa:14:e7:37:22:a6:e1:3f:8f:cd:8c:5a:
         04:09:f6:82:f0:8c:72:8e:2d:c5:35:50:74:65:fa:7d:54:05:
         6f:bb:d5:14:9f:83:09:06:78:f6:74:7a:b9:90:df:b3:8e:dc:
         a8:92:80:c6:0a:ac:c4:7d:bd:0f:ea:54:9f:5b:8b:35:d2:4d:
         08:61:86:69:2e:83:17:de:5e:2c:f6:12:be:0c:64:6d:74:e3:
         9a:85:e3:b6:8d:ef:35:46:eb:71:74:cb:02:3e:11:78:ab:e8:
         73:71:8b:b8:8a:1c:4d:50:57:9c:66:e5:d1:7f:2b:b1:f9:cf:
         cb:7a:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:43:45 2025 by rpki-client