Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133382e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          fOCpFJzjxX7LXjYmf8/dt0F0uja6ka1S+fPrRUp4FQU=
Subject key identifier:   4A:EF:63:9A:C2:9B:F2:CB:C0:4F:33:6A:F5:0C:6E:3F:13:56:EB:8B
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       12479BE88A005FD3F19860B23520D6C1F53CEE74
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:47 +0000
ROA not before:           Mon 16 Jun 2025 14:05:47 +0000
ROA not after:            Mon 15 Jun 2026 14:10:47 +0000
asID:                     262729
IP address blocks:        186.193.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:47:9b:e8:8a:00:5f:d3:f1:98:60:b2:35:20:d6:c1:f5:3c:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:47 2025 GMT
            Not After : Jun 15 14:10:47 2026 GMT
        Subject: CN=4AEF639AC29BF2CBC04F336AF50C6E3F1356EB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:a0:66:f5:d0:5b:29:93:67:33:f7:f1:cb:
                    96:cc:f6:7e:34:fe:32:2f:61:d1:be:9a:ac:66:88:
                    97:d6:98:66:f9:bf:76:a2:8f:db:cf:6e:ef:a5:d1:
                    13:cb:81:83:a9:5b:5d:72:05:57:6a:92:ea:15:e5:
                    a7:34:2e:89:3b:ea:ba:3a:41:a5:fd:93:60:7e:53:
                    3a:30:01:94:05:1c:9c:e6:77:93:cf:fe:3f:b5:ad:
                    49:cd:a5:8d:99:a7:f6:af:2e:75:c6:f6:a9:89:7e:
                    50:c8:09:39:3a:7b:b0:19:66:df:8d:a3:80:51:ad:
                    db:12:07:71:90:e5:c2:15:bb:be:e8:f9:ec:9a:dc:
                    d3:51:32:1d:80:56:b2:f0:c9:20:ec:5c:11:0b:91:
                    b5:08:24:5c:63:e8:89:75:95:45:d3:52:30:0e:ef:
                    e9:c6:1b:22:43:53:2c:b6:27:47:52:50:3c:e1:c5:
                    51:e2:5b:28:6c:07:3e:52:88:6f:35:e7:84:32:27:
                    c5:6e:31:a5:86:d4:dd:ec:5e:04:29:72:31:fb:ea:
                    21:c4:c6:0e:0e:39:4c:84:5b:c9:a2:dc:c2:20:a1:
                    30:95:6c:12:63:af:1d:fb:16:8a:d1:cb:98:68:e3:
                    e7:34:07:df:02:5e:66:81:27:d3:df:56:13:76:65:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EF:63:9A:C2:9B:F2:CB:C0:4F:33:6A:F5:0C:6E:3F:13:56:EB:8B
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:24:7b:98:c5:e1:b4:78:00:e3:00:0e:01:e0:a7:8e:da:
         33:15:2c:c8:79:1d:e1:51:a6:f4:15:b9:88:c4:1a:36:d8:05:
         56:56:b7:1a:21:94:cb:6b:74:98:f7:1b:3c:d9:05:89:8a:cc:
         41:d5:af:36:61:c4:ff:d2:b1:f5:3b:cb:28:30:39:0f:e8:18:
         91:42:96:2a:77:68:84:da:42:65:84:49:ca:1c:15:26:32:1d:
         f8:30:64:49:4f:5c:3e:57:a7:3c:68:73:47:21:f4:52:f7:40:
         7b:75:17:fc:97:d2:4a:1a:87:16:a4:e9:5a:b0:e7:75:56:d0:
         cf:18:75:82:66:60:0a:e0:83:f4:fc:01:42:a5:5f:8a:30:9f:
         f2:14:1e:20:7c:c7:4d:89:bc:ad:ac:f0:9b:16:cb:ab:f8:4d:
         09:15:ce:95:4d:a1:18:f0:d9:ba:6b:5e:e6:da:41:3c:87:cd:
         c5:85:a5:44:5c:9e:b1:22:63:4e:bf:75:a4:1e:ff:1a:f4:bb:
         6f:27:56:f0:c1:8c:f0:a2:b7:83:5a:9d:72:41:29:a9:52:7c:
         a6:8a:ec:43:cf:ae:5b:20:63:6a:23:56:09:d3:33:e4:f4:bf:
         21:7b:ac:de:dc:7e:32:34:c8:d6:1e:d7:e4:67:30:a9:d0:31:
         6a:33:29:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEkeb6IoAX9PxmGCyNSDWwfU87nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNTA2MTYxNDA1NDdaFw0yNjA2MTUxNDEwNDdaMDMxMTAvBgNV
BAMTKDRBRUY2MzlBQzI5QkYyQ0JDMDRGMzM2QUY1MEM2RTNGMTM1NkVCOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9U6Bm9dBbKZNnM/fxy5bM9n40
/jIvYdG+mqxmiJfWmGb5v3aij9vPbu+l0RPLgYOpW11yBVdqkuoV5ac0Lok76ro6
QaX9k2B+UzowAZQFHJzmd5PP/j+1rUnNpY2Zp/avLnXG9qmJflDICTk6e7AZZt+N
o4BRrdsSB3GQ5cIVu77o+eya3NNRMh2AVrLwySDsXBELkbUIJFxj6Il1lUXTUjAO
7+nGGyJDUyy2J0dSUDzhxVHiWyhsBz5SiG8154QyJ8VuMaWG1N3sXgQpcjH76iHE
xg4OOUyEW8mi3MIgoTCVbBJjrx37ForRy5ho4+c0B98CXmaBJ9PfVhN2ZalxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSu9jmsKb8svATzNq9QxuPxNW64swHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrBijANBgkqhkiG9w0BAQsFAAOCAQEAWMok
e5jF4bR4AOMADgHgp47aMxUsyHkd4VGm9BW5iMQaNtgFVla3GiGUy2t0mPcbPNkF
iYrMQdWvNmHE/9Kx9TvLKDA5D+gYkUKWKndohNpCZYRJyhwVJjId+DBkSU9cPlen
PGhzRyH0UvdAe3UX/JfSShqHFqTpWrDndVbQzxh1gmZgCuCD9PwBQqVfijCf8hQe
IHzHTYm8razwmxbLq/hNCRXOlU2hGPDZumte5tpBPIfNxYWlRFyesSJjTr91pB7/
GvS7bydW8MGM8KK3g1qdckEpqVJ8porsQ8+uWyBjaiNWCdMz5PS/IXus3tx+MjTI
1h7X5GcwqdAxajMpqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:32:08 2025 by rpki-client