Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          9Ru7dViSuI6kmdNGFllOZ3czDo5amH95MplrvNx/1dk=
Subject key identifier:   95:2A:7E:E8:5A:1C:91:5C:F9:13:43:4A:A7:E1:0C:B5:1B:AD:C9:D0
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       4D10A691BD815467D6868E19D50EBD7518AB8654
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:46 +0000
ROA not before:           Mon 16 Jun 2025 14:05:46 +0000
ROA not after:            Mon 15 Jun 2026 14:10:46 +0000
asID:                     262729
IP address blocks:        186.193.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 10:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:10:a6:91:bd:81:54:67:d6:86:8e:19:d5:0e:bd:75:18:ab:86:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:46 2025 GMT
            Not After : Jun 15 14:10:46 2026 GMT
        Subject: CN=952A7EE85A1C915CF913434AA7E10CB51BADC9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:7d:80:83:d4:e8:49:c6:1e:fa:5b:74:46:
                    0c:38:42:25:9d:2a:e4:e9:db:e1:7f:f3:62:7c:20:
                    e9:d8:9a:5c:f2:19:3e:7b:b2:1c:d2:53:85:8d:8d:
                    cc:ed:c5:65:d9:f1:f6:f1:df:06:65:85:3f:83:74:
                    48:ec:3e:1e:1c:d8:aa:d2:8b:36:ae:88:94:93:c5:
                    d6:9c:fe:70:25:8f:4d:75:4c:f2:04:fe:cc:be:5b:
                    f1:43:25:df:b7:4e:9f:2d:99:a3:73:36:1d:f9:ea:
                    51:8c:dd:2d:5b:a3:80:69:75:9e:c0:d3:22:66:dd:
                    40:b0:bf:f8:81:94:5b:08:4b:63:0c:20:73:39:72:
                    73:c5:03:9a:1d:b9:5c:e0:31:ea:f3:c2:a1:6c:5c:
                    cc:77:20:3f:f7:29:11:2f:8b:ac:b5:7a:4b:87:23:
                    38:84:64:87:71:e5:aa:12:24:6e:85:27:56:25:40:
                    42:f4:da:d2:5c:32:c9:72:ae:94:c6:d2:7f:d1:9d:
                    80:14:2c:e5:f0:d5:19:d0:eb:ac:61:88:08:29:22:
                    16:ba:bf:c9:58:9c:27:f6:ff:e5:2a:06:5b:04:3d:
                    df:3f:1e:b8:bb:76:05:6c:ce:d1:f8:eb:e3:18:ba:
                    3a:a3:47:1c:44:5f:62:5d:2c:dd:8d:3c:cd:6b:b6:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:7E:E8:5A:1C:91:5C:F9:13:43:4A:A7:E1:0C:B5:1B:AD:C9:D0
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:2a:70:b6:00:fb:9a:43:97:92:90:e9:38:d4:fe:a6:b4:
         e6:b2:95:7c:5f:e3:1c:a1:f1:e4:fc:eb:9f:8d:f7:a3:ec:42:
         3c:3f:6a:1a:4e:1a:c6:06:8e:52:64:76:1f:38:df:06:33:29:
         83:fa:63:86:ac:6e:97:48:1d:72:53:89:fc:8d:86:a0:70:35:
         70:d7:6e:76:b5:65:ba:41:ad:59:31:78:d1:d2:9e:ba:6b:67:
         c7:5c:00:36:74:c3:70:67:19:b6:3b:f0:28:5e:7a:4c:43:fc:
         cd:9d:5e:9d:65:0b:d2:a6:35:78:f2:a5:70:24:9d:27:f4:e5:
         96:32:81:21:5d:c9:24:28:d9:5e:41:19:d4:45:1d:0a:cd:7e:
         63:8c:ed:86:52:76:73:07:10:c4:9d:62:87:33:31:21:e5:8f:
         dd:8c:24:5b:87:f2:7a:20:04:51:44:43:5f:dd:d0:97:b6:93:
         78:e9:28:e6:68:fd:ec:b5:0d:8e:90:37:ed:a1:75:81:c3:d6:
         0d:d6:e7:03:80:91:41:9b:78:69:19:b2:ed:55:4c:0f:dd:92:
         64:b9:92:c6:97:56:30:9a:31:20:d8:fb:36:19:c1:7c:c9:83:
         5f:cf:6f:fa:a1:46:f0:bb:36:b9:d2:0b:e1:f4:d0:c8:f5:9e:
         a7:a8:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:00:35 2025 by rpki-client