Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          AVd1Sy9iNoKJ0uQhgL7+Ss0S1F6aE314sXKaq7OGyDQ=
Subject key identifier:   67:09:6C:F5:61:58:12:5F:DF:FE:70:AA:8C:80:64:0D:84:83:07:75
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1E14547E8F36BE942566E691D405FE22D645EA09
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:49 +0000
ROA not before:           Mon 16 Jun 2025 14:05:49 +0000
ROA not after:            Mon 15 Jun 2026 14:10:49 +0000
asID:                     262729
IP address blocks:        186.193.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 19:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:14:54:7e:8f:36:be:94:25:66:e6:91:d4:05:fe:22:d6:45:ea:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:49 2025 GMT
            Not After : Jun 15 14:10:49 2026 GMT
        Subject: CN=67096CF56158125FDFFE70AA8C80640D84830775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:74:47:09:2c:51:75:48:4e:f3:6a:70:fc:
                    32:ff:75:3b:1c:0e:33:c7:3b:b1:e3:ca:24:c9:ae:
                    44:db:a6:a0:02:35:3b:c0:c3:3b:9c:02:cb:48:40:
                    95:e5:f8:95:f7:b7:16:e0:43:6e:e2:34:f7:fa:af:
                    e8:37:73:3b:ef:0b:b1:42:95:34:f7:e4:f1:1b:98:
                    74:b8:0e:12:80:46:08:b4:e5:57:d1:32:8d:c5:df:
                    01:1b:6e:3c:88:07:47:ef:2c:41:44:27:2a:c2:d0:
                    d2:9c:50:9d:dc:c2:6a:62:71:67:d5:5f:4e:ac:9e:
                    50:c2:dd:a2:6c:aa:c5:22:7a:7c:63:eb:c6:81:4f:
                    da:8f:b6:39:4d:e4:36:ff:01:79:3b:f7:83:05:0f:
                    9d:41:bc:2a:8e:77:f2:84:62:06:e2:d7:3d:a2:d7:
                    82:b5:cc:d2:4d:3d:25:46:6c:ab:78:55:c4:45:52:
                    05:03:f2:b9:98:70:8d:53:f1:8d:83:80:8e:a7:73:
                    02:a3:d8:4d:9d:f8:41:a1:ed:c3:b2:0e:8a:a9:54:
                    f1:de:e5:11:74:55:2c:7f:19:81:76:e7:a2:58:7d:
                    c8:3f:23:98:84:22:af:1d:a9:75:69:9d:e6:8f:03:
                    80:4b:c8:f0:15:a5:48:71:33:2d:28:77:84:e5:64:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:6C:F5:61:58:12:5F:DF:FE:70:AA:8C:80:64:0D:84:83:07:75
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:1e:4b:c3:af:5b:f2:75:40:01:4e:c3:a8:ed:bc:af:da:
         2a:00:8f:8b:ce:a4:b7:e4:56:35:40:39:9a:b0:04:7a:03:af:
         72:1f:03:30:3a:7b:5a:fe:e5:35:60:50:39:5a:61:95:ac:e3:
         fb:48:96:a0:c6:f4:f9:af:69:8a:a4:0a:d0:36:72:3e:f6:79:
         6f:b0:a9:c2:e2:22:6d:23:e1:08:31:c9:94:68:01:10:78:e7:
         93:52:4a:16:a5:16:37:1b:cd:01:02:32:df:ce:e8:7e:31:77:
         c6:8e:66:bd:93:f8:a5:6b:74:a0:27:e2:b9:26:9e:37:25:43:
         ab:5a:33:c5:a3:37:50:e0:d7:5e:bf:42:33:f7:6f:80:4a:77:
         bd:ec:07:48:d9:9f:d7:f8:4e:fc:e7:0f:16:15:12:75:4b:76:
         ab:be:47:10:9e:8b:1d:94:37:99:6b:ae:1a:a8:30:5e:e4:af:
         64:16:06:8e:2b:25:d4:88:1d:96:c9:27:d4:ec:31:2f:50:a8:
         68:09:45:17:c8:d0:a7:a0:b2:bd:46:1e:44:6b:90:1b:91:85:
         28:8f:38:7f:8e:97:7c:b0:65:e5:b1:33:fd:8f:ec:42:60:c1:
         34:59:42:56:78:78:ec:58:ad:6a:b5:29:ba:a4:ed:ba:dc:d2:
         2e:3d:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:15:17 2025 by rpki-client