Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
File:                     3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier:          T942+I22olKUoF8g7UuB2ov3yuULn7rkquCI51mc40w=
Subject key identifier:   BB:D3:74:48:6A:00:9E:0E:E5:CF:9B:1A:FA:39:78:D7:38:03:C2:FF
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       4CEEDE7D1A697FA268C43508682E13B958FA8A99
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
Signing time:             Mon 14 Apr 2025 20:28:08 +0000
ROA not before:           Mon 14 Apr 2025 20:23:08 +0000
ROA not after:            Mon 13 Apr 2026 20:28:08 +0000
asID:                     266163
IP address blocks:        186.2.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl
                          rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 17:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ee:de:7d:1a:69:7f:a2:68:c4:35:08:68:2e:13:b9:58:fa:8a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Apr 14 20:23:08 2025 GMT
            Not After : Apr 13 20:28:08 2026 GMT
        Subject: CN=BBD374486A009E0EE5CF9B1AFA3978D73803C2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:d2:d2:1c:c7:33:80:92:52:7c:fe:66:25:
                    c5:b3:16:ff:9b:fb:99:fa:31:9f:65:fe:f9:d6:29:
                    64:b7:60:40:04:5f:f9:49:18:f8:2a:2e:10:11:5a:
                    91:c6:53:0d:5f:02:f5:01:73:15:fa:ea:0e:1d:07:
                    e6:a0:50:37:24:6e:30:90:6e:55:d3:e0:7a:60:14:
                    50:4c:32:f5:e8:c8:2f:32:6e:d8:f3:f5:7e:e4:f4:
                    9d:9a:8e:9e:75:9c:07:70:26:d2:6c:22:b7:3d:20:
                    de:34:f9:67:b7:f2:d5:ae:ef:f0:f8:ce:3a:aa:a4:
                    d0:91:84:5c:d0:b9:d6:39:d3:9f:ea:11:0e:1a:27:
                    fd:4d:0f:9c:46:b0:15:ff:17:10:10:2b:bd:b3:80:
                    f3:f0:ea:8e:17:42:48:1d:a7:ac:06:a0:86:13:63:
                    62:35:2d:25:28:5e:e9:68:9d:58:e5:e7:0a:bf:05:
                    81:05:ed:e5:bb:43:e8:a6:c8:cd:22:c0:e0:39:d7:
                    f6:b9:f4:45:41:1e:a6:68:6e:20:56:02:b0:30:c4:
                    4e:e8:2e:60:3f:ce:54:6b:17:85:c0:6c:46:69:a7:
                    25:be:83:1e:20:a1:2b:63:be:6c:1b:fa:83:9d:f4:
                    2f:a6:cd:35:c7:d4:a7:57:9b:70:b4:8a:fb:bc:45:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D3:74:48:6A:00:9E:0E:E5:CF:9B:1A:FA:39:78:D7:38:03:C2:FF
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:7d:0e:fd:94:10:e7:c5:d4:ad:b6:ea:7a:1a:38:49:19:
         93:b2:59:75:73:3f:77:a2:43:a4:f7:c7:10:59:b1:9e:c9:f7:
         a1:be:58:c7:e2:c4:cd:08:e5:06:bf:29:ea:8f:ea:9f:ce:66:
         39:e2:21:ff:74:41:8b:ff:34:8d:df:7f:84:90:9a:2b:4d:48:
         0d:77:84:b4:cf:1d:62:55:f9:c5:5a:88:f4:ca:16:a8:e4:9d:
         57:1f:f1:c1:09:96:aa:47:4b:d3:74:ab:49:78:f8:ee:ee:6e:
         85:85:53:ef:f8:63:45:59:f9:fc:f3:89:03:ca:52:4f:84:93:
         53:c2:4c:37:45:37:27:4f:5a:2a:3f:2a:4b:f9:7e:f1:36:a2:
         20:00:5c:e7:b7:9d:1f:03:9b:52:8b:fd:e1:9d:64:98:f8:2d:
         3c:9a:35:80:6a:39:4d:78:31:18:14:ba:96:5d:77:aa:3b:d9:
         05:b2:c1:96:94:08:7c:91:80:77:fb:7a:c6:28:b1:39:00:9a:
         b4:dc:50:34:28:9c:8d:12:0a:56:1e:3d:89:23:7c:3f:42:30:
         ac:63:14:a2:3d:92:c4:60:d6:ef:25:f5:0e:38:9a:d2:ea:8a:
         c5:ea:43:97:32:5b:f0:e6:46:28:c2:4d:e5:97:9a:c8:ae:7e:
         90:82:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:29:17 2025 by rpki-client