Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          s0dDz4zl8oTRpPlpPC7eME5YePQwcJJbDV2cuOd7Jyk=
Subject key identifier:   00:A3:99:04:94:38:A3:54:BC:FA:4B:27:CD:BF:70:BB:64:47:F1:3B
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       0D5677C702164D3B451A80C039943AA0646D1B22
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:42:33 +0000
ROA not before:           Sat 26 Apr 2025 11:37:33 +0000
ROA not after:            Sat 25 Apr 2026 11:42:33 +0000
asID:                     262708
IP address blocks:        186.193.42.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 16:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:56:77:c7:02:16:4d:3b:45:1a:80:c0:39:94:3a:a0:64:6d:1b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:37:33 2025 GMT
            Not After : Apr 25 11:42:33 2026 GMT
        Subject: CN=00A399049438A354BCFA4B27CDBF70BB6447F13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:4c:3d:8c:94:01:20:ec:34:08:01:e8:42:
                    da:91:e2:ac:58:4f:2e:d5:8e:b7:14:3c:8f:da:85:
                    c8:d9:16:1b:ab:19:b7:c8:04:7f:e6:dc:f7:2f:b4:
                    2a:7d:80:65:72:d0:bc:98:dc:c4:29:9b:3d:14:b9:
                    2b:23:00:bf:80:c9:2f:40:67:15:1e:6e:74:52:d4:
                    55:0c:58:02:1b:6f:82:92:f3:a7:76:7c:4a:a4:9c:
                    85:6f:f5:9b:cf:cd:4f:b4:77:74:b9:b1:d4:ee:8f:
                    b1:89:fd:74:0f:24:e9:03:bc:3b:1d:80:d1:5e:d9:
                    47:08:b4:b3:fd:c0:7f:40:82:e9:11:58:c4:84:9f:
                    c1:62:10:f8:d6:50:8b:8b:4d:06:ed:85:42:c0:4a:
                    d2:b3:c2:7a:bc:80:3b:fc:9b:eb:79:9a:43:1d:74:
                    73:0f:3a:57:a9:7f:8d:ad:17:a3:50:9f:db:91:f9:
                    3c:2a:b9:92:0b:ff:b1:b7:56:0f:e3:19:43:ff:9d:
                    75:49:65:fc:e3:b5:5c:ce:1d:44:40:00:fa:24:f8:
                    9d:e8:69:3d:23:74:e6:e0:47:ee:bc:91:84:f6:64:
                    fe:3d:21:64:80:c1:78:ae:85:d0:ec:be:5a:28:af:
                    6a:5c:30:62:74:50:b5:5c:25:db:79:f7:b4:2b:88:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A3:99:04:94:38:A3:54:BC:FA:4B:27:CD:BF:70:BB:64:47:F1:3B
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:72:23:ef:f8:01:0c:a7:8e:83:ed:fd:16:ce:00:c8:03:3b:
         0b:04:ed:63:6c:76:65:fa:cf:8f:3e:8d:86:d7:c8:e6:87:e3:
         1b:83:9c:8b:0e:fb:31:7b:c1:bd:ac:04:ff:d1:c1:fe:e1:a5:
         8c:52:c5:05:83:d6:54:0a:79:04:4f:ca:20:0e:53:73:08:df:
         85:28:fa:b9:2a:1a:10:a7:21:b4:66:2b:b2:47:98:82:57:85:
         28:17:ce:19:e6:0f:7f:f6:ea:a0:b9:10:3b:94:7a:d2:3d:bc:
         ee:56:09:fe:55:67:5c:ed:fc:d0:e5:d4:c1:fc:1c:fe:df:8e:
         54:32:45:0a:2b:1a:c8:f9:d4:d4:b2:0b:59:d1:84:1d:92:46:
         05:85:db:04:56:7e:30:2f:6b:74:ec:6e:25:77:97:39:8a:0f:
         e6:53:a6:07:57:77:15:77:01:59:6a:50:cf:81:fa:b2:52:a5:
         f6:df:30:6b:38:8d:29:57:7b:3c:9a:99:f9:d6:05:f0:9f:28:
         3d:42:bf:85:56:80:be:52:da:02:e0:6d:e6:24:fc:54:91:b2:
         40:3c:e3:49:e3:24:70:e2:a7:f0:b8:0b:71:4d:c8:0d:bb:40:
         a3:95:0f:bf:7a:c4:5f:9d:86:a3:a5:37:ee:6e:58:0e:cd:53:
         38:4d:2a:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDVZ3xwIWTTtFGoDAOZQ6oGRtGyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3NjU0M0MxRTlBQkNBMDFFN0UxRDQ5RDdGQ0Q4OTBF
RDJBM0ZFNDAeFw0yNTA0MjYxMTM3MzNaFw0yNjA0MjUxMTQyMzNaMDMxMTAvBgNV
BAMTKDAwQTM5OTA0OTQzOEEzNTRCQ0ZBNEIyN0NEQkY3MEJCNjQ0N0YxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG6Uw9jJQBIOw0CAHoQtqR4qxY
Ty7VjrcUPI/ahcjZFhurGbfIBH/m3PcvtCp9gGVy0LyY3MQpmz0UuSsjAL+AyS9A
ZxUebnRS1FUMWAIbb4KS86d2fEqknIVv9ZvPzU+0d3S5sdTuj7GJ/XQPJOkDvDsd
gNFe2UcItLP9wH9AgukRWMSEn8FiEPjWUIuLTQbthULAStKzwnq8gDv8m+t5mkMd
dHMPOlepf42tF6NQn9uR+TwquZIL/7G3Vg/jGUP/nXVJZfzjtVzOHURAAPok+J3o
aT0jdObgR+68kYT2ZP49IWSAwXiuhdDsvloor2pcMGJ0ULVcJdt597QriDxxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAKOZBJQ4o1S8+ksnzb9wu2RH8TswHwYDVR0j
BBgwFoAUJnZUPB6avKAefh1J1/zYkO0qP+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC8yNjc2NTQzQzFFOUFCQ0EwMUU3RTFENDlEN0ZDRDg5MEVEMkEzRkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NzY1NDNDMUU5QUJDQTAx
RTdFMUQ0OUQ3RkNEODkwRUQyQTNGRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzIyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6wSowDQYJKoZIhvcNAQELBQADggEBAOByI+/4
AQynjoPt/RbOAMgDOwsE7WNsdmX6z48+jYbXyOaH4xuDnIsO+zF7wb2sBP/Rwf7h
pYxSxQWD1lQKeQRPyiAOU3MI34Uo+rkqGhCnIbRmK7JHmIJXhSgXzhnmD3/26qC5
EDuUetI9vO5WCf5VZ1zt/NDl1MH8HP7fjlQyRQorGsj51NSyC1nRhB2SRgWF2wRW
fjAva3TsbiV3lzmKD+ZTpgdXdxV3AVlqUM+B+rJSpfbfMGs4jSlXezyamfnWBfCf
KD1Cv4VWgL5S2gLgbeYk/FSRskA840njJHDip/C4C3FNyA27QKOVD796xF+dhqOl
N+5uWA7NUzhNKo8=
-----END CERTIFICATE-----
Generated at Sat May 3 00:40:39 2025 by rpki-client