Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          i4pU7UuBa4EjXgTBTazKB0VBk0J6ZaisIHAgIDqxx04=
Subject key identifier:   D7:93:D3:B9:3F:B3:70:20:28:52:6F:19:97:1C:2B:3B:77:3E:CD:51
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       25478B273875DAC8B465E7025E38DD5B873B5869
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:47 +0000
ROA not before:           Mon 16 Jun 2025 14:05:47 +0000
ROA not after:            Mon 15 Jun 2026 14:10:47 +0000
asID:                     262729
IP address blocks:        186.193.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:47:8b:27:38:75:da:c8:b4:65:e7:02:5e:38:dd:5b:87:3b:58:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:47 2025 GMT
            Not After : Jun 15 14:10:47 2026 GMT
        Subject: CN=D793D3B93FB3702028526F19971C2B3B773ECD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:65:de:31:9d:5b:31:c3:e2:83:62:29:fb:
                    e8:dc:01:1f:2a:9d:39:24:15:ea:5a:63:66:80:98:
                    06:a4:35:53:ce:22:33:74:51:57:85:71:06:5e:32:
                    2c:9e:86:c5:22:e9:1b:8e:55:88:55:9c:05:f3:df:
                    ad:c3:34:78:4c:1b:10:87:8c:77:d5:a8:14:17:f6:
                    11:97:5b:7f:54:2f:b5:85:62:20:24:0b:4e:5d:a2:
                    26:8e:ea:d4:9f:e5:ea:d5:14:ed:ac:15:1c:68:92:
                    23:ef:2a:80:fc:ba:24:3e:23:3e:e0:ca:89:2d:c4:
                    4f:cb:5e:90:9b:74:c6:06:e4:d0:4d:0a:df:15:bc:
                    dc:bb:cf:75:4d:f6:58:7a:79:50:7a:7c:1b:c4:02:
                    05:81:a8:6a:7f:6d:40:c8:1e:7b:34:30:42:44:eb:
                    61:e5:c2:03:2f:30:30:4c:cd:95:4f:25:08:99:da:
                    b4:cc:99:17:47:01:db:2d:6a:cf:f0:d5:93:d0:d7:
                    14:b8:0a:ec:78:17:84:d7:16:8a:64:0f:95:de:00:
                    2a:57:a2:f8:e6:1a:b3:9e:57:46:f3:34:e2:ea:78:
                    5d:7b:e4:0b:e2:33:dc:b5:1b:7c:8d:77:e4:a3:fb:
                    b8:dd:b4:5a:76:44:75:46:56:8c:6b:fb:1d:5d:6d:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:93:D3:B9:3F:B3:70:20:28:52:6F:19:97:1C:2B:3B:77:3E:CD:51
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:9a:07:9e:42:1e:7b:00:b7:94:a8:65:38:be:61:ce:3c:
         bb:02:d5:f6:ce:f5:48:1c:4f:07:26:b1:0a:69:24:f6:2d:9d:
         ec:8e:67:66:8f:cf:5b:a9:e7:2e:c4:76:8b:cf:67:e8:53:d3:
         58:f6:f9:c2:e8:aa:20:6a:e9:a0:d0:a3:5b:e9:5b:1b:fc:e6:
         77:74:4b:ac:e4:7e:eb:9f:e3:07:d3:11:0f:50:1e:29:85:3f:
         7d:43:a1:f0:66:b6:76:40:20:14:9f:c9:a8:3f:c1:0b:06:24:
         58:39:9b:0e:5f:b7:71:e9:98:00:a9:80:a9:36:78:10:14:65:
         8c:7e:94:1b:12:89:b2:51:64:2a:71:61:c6:0d:ea:a0:42:70:
         be:0e:05:a3:97:38:41:df:14:66:06:6d:9b:92:f4:95:b7:a7:
         2d:4e:58:c7:db:bb:d8:9c:1e:fd:dc:ad:ce:42:bd:ca:d4:1e:
         3b:46:c4:ad:99:11:b9:11:a9:eb:70:f3:ec:1d:d5:39:e4:73:
         10:98:ac:7d:94:a6:e3:67:2c:51:d7:1f:23:3c:78:0e:e7:d2:
         cb:3e:31:12:14:d9:fb:74:b5:38:9b:f3:fc:56:e4:ae:2a:85:
         d0:9d:71:6c:2e:bd:ea:b7:11:8f:6a:00:01:c0:21:60:1c:b2:
         f3:63:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:57:13 2025 by rpki-client