Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e34362e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          nHlC5EZQY3sgv0rgROGx6Iq0SzVDnwOOLPGdw1VLtiI=
Subject key identifier:   0E:FB:50:FF:59:B9:C6:4E:C6:19:D1:07:5E:16:58:A8:D3:B9:20:75
Certificate issuer:       /CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
Certificate serial:       1EBA4F5EB5E4DBA78DCB5EFD5A6EA6F41953B495
Authority key identifier: 26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32332d3332203d3e20323632373038.roa
Signing time:             Sat 26 Apr 2025 11:42:58 +0000
ROA not before:           Sat 26 Apr 2025 11:37:58 +0000
ROA not after:            Sat 25 Apr 2026 11:42:58 +0000
asID:                     262708
IP address blocks:        186.193.46.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 10:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ba:4f:5e:b5:e4:db:a7:8d:cb:5e:fd:5a:6e:a6:f4:19:53:b4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4
        Validity
            Not Before: Apr 26 11:37:58 2025 GMT
            Not After : Apr 25 11:42:58 2026 GMT
        Subject: CN=0EFB50FF59B9C64EC619D1075E1658A8D3B92075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:72:95:da:a1:3b:09:b6:10:05:8e:de:e5:
                    d8:6d:9e:2d:d8:65:44:c9:3a:89:de:1f:44:86:05:
                    0e:dd:45:9e:70:b6:2d:f3:7b:51:32:bb:52:1d:1b:
                    ca:31:67:f1:c5:db:0e:9c:31:1f:71:de:9b:29:a8:
                    c4:51:c0:ce:11:a0:80:93:a4:7e:26:cc:80:b0:06:
                    f5:07:86:d7:02:f2:b7:60:f0:27:60:f7:66:52:d0:
                    85:94:99:f8:1f:51:78:2c:c3:67:24:e2:3a:bf:55:
                    df:89:c5:65:4d:00:09:9c:93:fc:03:b0:c5:bc:c5:
                    fc:ca:66:e3:78:8f:5a:53:f6:ca:c0:bf:2f:a1:2e:
                    f0:58:87:ca:9a:c3:57:0c:96:fe:62:a3:6e:9c:b8:
                    ed:65:db:33:7b:a2:00:7d:a1:9e:6d:67:84:3f:b9:
                    38:70:b0:a1:38:8c:44:67:62:d0:ab:85:42:fe:f8:
                    53:96:39:be:d1:68:33:8e:55:9f:92:a8:40:00:49:
                    d9:9b:1c:5d:9b:e2:26:85:dd:db:8d:29:5c:ae:3a:
                    5a:c4:31:66:22:dd:ba:9a:a1:02:9d:e1:07:89:5c:
                    6c:6d:93:ce:e8:54:ed:4b:82:54:17:0c:48:05:8a:
                    7e:ea:90:83:d6:bd:51:c9:8f:d9:46:2e:4c:34:6a:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FB:50:FF:59:B9:C6:4E:C6:19:D1:07:5E:16:58:A8:D3:B9:20:75
            X509v3 Authority Key Identifier:
                keyid:26:76:54:3C:1E:9A:BC:A0:1E:7E:1D:49:D7:FC:D8:90:ED:2A:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2676543C1E9ABCA01E7E1D49D7FCD890ED2A3FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:30:5c:56:cf:6f:34:53:62:f9:73:de:f3:40:3b:a1:a8:97:
         5e:21:4a:2b:2f:0c:54:5e:26:8e:96:0d:04:eb:62:88:b7:fd:
         d6:d9:51:7c:0e:d7:38:21:14:64:a5:7a:26:70:8a:3b:d2:dd:
         40:6f:91:aa:76:9a:84:b9:70:12:1c:e0:d8:f2:ba:a5:14:25:
         31:3a:01:b6:b1:55:33:53:7c:6e:2b:83:79:ea:c2:66:f1:81:
         e9:6b:9f:d7:c5:8f:e6:ca:f4:69:76:75:67:86:5a:b6:a6:40:
         2b:3e:71:5e:9e:09:e6:1d:d7:47:32:cc:66:36:db:a6:c7:53:
         d7:0f:40:fa:49:26:06:66:c9:d0:08:37:db:d2:0f:10:77:26:
         11:1d:27:d7:fa:58:7d:bb:6f:66:5f:2d:15:29:4a:e7:57:8d:
         60:64:20:8d:22:1b:34:96:41:d3:b0:1f:bc:8b:f1:8c:cd:5e:
         4f:e1:f6:ed:11:ef:30:fa:46:60:95:78:d5:04:f4:0b:4f:e4:
         90:0c:06:66:b3:f6:a0:3e:02:51:4a:2e:9e:68:52:36:3d:ea:
         a3:f0:08:80:4e:a5:04:25:a8:4a:84:fa:b6:63:cb:f4:b1:0c:
         81:56:6b:dd:d0:3f:ec:45:94:bc:19:90:26:91:7e:9d:75:39:
         8d:d1:9d:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHrpPXrXk26eNy179Wm6m9BlTtJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3NjU0M0MxRTlBQkNBMDFFN0UxRDQ5RDdGQ0Q4OTBF
RDJBM0ZFNDAeFw0yNTA0MjYxMTM3NThaFw0yNjA0MjUxMTQyNThaMDMxMTAvBgNV
BAMTKDBFRkI1MEZGNTlCOUM2NEVDNjE5RDEwNzVFMTY1OEE4RDNCOTIwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnQnKV2qE7CbYQBY7e5dhtni3Y
ZUTJOoneH0SGBQ7dRZ5wti3ze1Eyu1IdG8oxZ/HF2w6cMR9x3pspqMRRwM4RoICT
pH4mzICwBvUHhtcC8rdg8Cdg92ZS0IWUmfgfUXgsw2ck4jq/Vd+JxWVNAAmck/wD
sMW8xfzKZuN4j1pT9srAvy+hLvBYh8qaw1cMlv5io26cuO1l2zN7ogB9oZ5tZ4Q/
uThwsKE4jERnYtCrhUL++FOWOb7RaDOOVZ+SqEAASdmbHF2b4iaF3duNKVyuOlrE
MWYi3bqaoQKd4QeJXGxtk87oVO1LglQXDEgFin7qkIPWvVHJj9lGLkw0arpzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDvtQ/1m5xk7GGdEHXhZYqNO5IHUwHwYDVR0j
BBgwFoAUJnZUPB6avKAefh1J1/zYkO0qP+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC8yNjc2NTQzQzFFOUFCQ0EwMUU3RTFENDlEN0ZDRDg5MEVEMkEzRkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NzY1NDNDMUU5QUJDQTAx
RTdFMUQ0OUQ3RkNEODkwRUQyQTNGRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6wS4wDQYJKoZIhvcNAQELBQADggEBACYwXFbP
bzRTYvlz3vNAO6Gol14hSisvDFReJo6WDQTrYoi3/dbZUXwO1zghFGSleiZwijvS
3UBvkap2moS5cBIc4NjyuqUUJTE6AbaxVTNTfG4rg3nqwmbxgelrn9fFj+bK9Gl2
dWeGWramQCs+cV6eCeYd10cyzGY226bHU9cPQPpJJgZmydAIN9vSDxB3JhEdJ9f6
WH27b2ZfLRUpSudXjWBkII0iGzSWQdOwH7yL8YzNXk/h9u0R7zD6RmCVeNUE9AtP
5JAMBmaz9qA+AlFKLp5oUjY96qPwCIBOpQQlqEqE+rZjy/SxDIFWa93QP+xFlLwZ
kCaRfp11OY3RnUM=
-----END CERTIFICATE-----
Generated at Sat May 3 11:55:05 2025 by rpki-client