Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133342e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          XRiYYq6XR9wYUyDXGQ6u7AVuWWrMMg+D/+aSJsUwKCQ=
Subject key identifier:   72:9D:1A:EB:19:10:CE:CB:3B:CC:30:D7:CE:9A:BA:18:F9:D9:F9:E6
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       0E4450F49A40AC2DE5C776F2EC5CD7CD8BC1A7D2
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:46 +0000
ROA not before:           Mon 16 Jun 2025 14:05:46 +0000
ROA not after:            Mon 15 Jun 2026 14:10:46 +0000
asID:                     262729
IP address blocks:        186.193.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:44:50:f4:9a:40:ac:2d:e5:c7:76:f2:ec:5c:d7:cd:8b:c1:a7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:46 2025 GMT
            Not After : Jun 15 14:10:46 2026 GMT
        Subject: CN=729D1AEB1910CECB3BCC30D7CE9ABA18F9D9F9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:3b:07:19:4c:d4:a1:81:60:19:95:7d:a2:
                    38:79:0b:88:6f:df:69:99:c1:74:17:71:d9:1f:96:
                    73:cb:8d:66:32:04:14:f8:d7:b7:77:e3:37:da:59:
                    99:8a:83:f3:28:48:9b:40:23:e6:a0:cb:05:9c:27:
                    cd:33:38:3d:06:ee:f0:ec:f1:47:e0:9c:03:42:47:
                    80:63:9f:7a:fc:3a:33:1b:34:74:d1:ba:ef:9f:14:
                    bf:90:86:9a:87:50:21:ac:e8:16:7e:08:fc:cf:12:
                    80:de:3e:46:31:79:11:a1:a9:6f:f2:f0:95:40:13:
                    e4:e8:4f:61:12:42:53:a1:c5:65:7c:2f:25:9d:dc:
                    f3:13:d5:f1:9f:84:d6:0b:dc:f3:b3:f7:7c:ce:4c:
                    4f:bf:fe:4c:71:17:51:88:53:94:27:d8:dd:83:46:
                    d6:f3:bd:6f:f0:43:59:d4:39:13:41:50:d5:1c:26:
                    60:83:97:f9:65:15:ea:1e:98:89:7e:2b:b1:fe:20:
                    c1:30:0f:82:db:01:df:5d:9e:cc:23:01:9d:6b:1a:
                    84:6a:ea:2e:c5:8b:f4:ff:66:a9:f7:1d:63:69:10:
                    b8:a4:c4:5d:4c:bc:43:3f:8f:41:36:7c:15:c7:86:
                    ed:5c:64:27:c8:1b:ac:ea:e5:ca:56:33:2c:b2:cc:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9D:1A:EB:19:10:CE:CB:3B:CC:30:D7:CE:9A:BA:18:F9:D9:F9:E6
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:f1:b6:80:cf:88:1a:08:d6:48:58:ca:6f:8c:22:10:c8:
         1c:2b:13:6d:7d:47:57:c1:26:da:a7:93:67:94:01:ef:22:7b:
         89:f7:ff:90:44:b3:af:2e:f9:db:b0:eb:b1:97:af:32:8a:27:
         1e:90:6f:a0:21:9b:c4:2c:d3:c8:e7:9d:c4:04:bf:96:d5:a5:
         00:6d:62:46:02:9c:fd:47:40:1a:40:a6:2e:e8:c8:a3:17:93:
         77:25:cf:a8:06:9b:22:41:a3:d4:fb:6a:07:37:a3:10:56:0e:
         ba:df:d9:07:d5:a9:a7:44:d7:8a:b7:6e:f4:60:3b:f0:48:61:
         9b:95:e8:ff:ae:9a:66:cd:a7:95:f1:6b:dd:f8:a3:d6:71:5f:
         f7:02:c5:e7:10:2a:e5:18:db:50:34:d1:2f:1f:60:c4:1a:c4:
         78:be:ec:bf:b5:99:51:b2:ae:c1:40:72:37:07:75:af:34:9b:
         bc:0c:61:f2:5b:b4:03:fd:a5:e8:9e:cd:9a:2f:b4:00:1a:b0:
         1e:ad:ad:87:f0:fb:8d:3c:62:03:5d:cc:67:77:34:c5:27:84:
         32:42:2b:b4:2c:cf:3b:8c:e0:41:36:f9:d1:ca:32:f5:71:ea:
         97:5f:0d:db:98:24:0e:24:7d:8a:ac:d7:ec:0a:63:53:8f:47:
         e6:96:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:13:20 2025 by rpki-client