Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          6C5Id663Dd66PHtN7ggtKtD4RAx1rNwjJFjB9CHGvq4=
Subject key identifier:   34:B4:0C:AC:1E:4E:43:1C:02:91:99:D1:81:AF:10:CD:A9:E5:CB:0C
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       3083A4660A09B817CCC706297AE0CE8E9D5535BE
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:46 +0000
ROA not before:           Mon 16 Jun 2025 14:05:46 +0000
ROA not after:            Mon 15 Jun 2026 14:10:46 +0000
asID:                     262729
IP address blocks:        186.193.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:83:a4:66:0a:09:b8:17:cc:c7:06:29:7a:e0:ce:8e:9d:55:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:46 2025 GMT
            Not After : Jun 15 14:10:46 2026 GMT
        Subject: CN=34B40CAC1E4E431C029199D181AF10CDA9E5CB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:71:94:41:12:7e:47:69:f6:15:35:dd:52:
                    f6:90:55:5f:d4:b1:cc:74:cc:f1:9a:5d:a3:5a:5a:
                    be:83:80:80:f6:66:33:28:73:58:11:92:01:9a:70:
                    a5:2b:c7:7c:58:ae:00:2d:69:3d:8f:e9:7e:c5:e6:
                    fa:17:df:90:95:ac:0d:48:af:4a:24:05:b2:af:26:
                    cc:a3:23:57:30:ec:bc:7f:b1:76:9d:48:1e:8a:be:
                    a2:eb:0d:9d:08:c7:ce:a5:9d:1f:06:a5:49:18:ef:
                    11:0a:8a:39:a7:e8:c6:4d:ee:e6:5f:3d:0d:c5:99:
                    78:d7:ec:9d:7a:e6:c6:c1:e6:04:ac:91:4b:8a:f4:
                    11:52:bd:cf:7a:01:6f:3a:cf:d4:1b:04:89:75:46:
                    01:7a:5f:0e:90:f2:43:3b:5a:44:70:55:9c:48:1f:
                    8a:17:57:1c:7a:2a:6e:27:6f:6c:f9:b3:27:04:e0:
                    3c:2a:44:82:68:fb:da:4a:f0:b9:91:cb:1c:22:74:
                    86:c1:fc:48:c6:92:8b:a7:ce:58:78:26:04:84:8c:
                    8e:24:dc:f5:6f:d3:48:2c:79:64:ef:e4:eb:58:ad:
                    cf:9c:15:64:ed:2d:ef:7b:a8:39:a6:89:43:d2:82:
                    e1:de:96:5d:6f:87:7b:6c:a8:2c:0a:4e:70:8c:85:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B4:0C:AC:1E:4E:43:1C:02:91:99:D1:81:AF:10:CD:A9:E5:CB:0C
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:58:bc:00:c6:f8:b3:90:53:b7:e8:32:41:36:43:50:36:
         8f:b4:b2:a4:08:0e:a3:68:22:ad:3f:66:99:51:a6:60:be:2c:
         cc:7f:d4:23:a3:3d:b3:14:4f:67:93:78:96:20:69:3d:a3:80:
         11:f9:42:3e:c6:d4:7e:d7:2d:09:8d:57:6d:44:4e:ae:91:53:
         32:a5:eb:d2:af:a8:3d:f5:02:20:db:65:8a:8b:62:a8:2f:b9:
         a2:98:ab:21:0e:ae:6b:79:39:0f:38:a6:e6:5a:c0:da:c6:61:
         15:0c:7f:3d:64:7a:89:de:24:8c:12:7f:1b:b3:fb:69:36:bb:
         f8:6a:9e:f8:93:19:30:d2:a4:c2:79:b8:10:6f:bf:64:44:6a:
         2b:27:4f:6b:57:f4:63:44:a5:17:3a:91:b9:97:1c:37:db:5b:
         da:87:eb:cd:2e:8c:d7:70:46:91:e3:fe:b8:9a:4b:b4:f7:8b:
         da:6f:0e:37:ae:69:29:26:06:0b:c7:4a:58:aa:d6:bb:8c:ca:
         5c:de:ed:a3:c3:41:62:8f:e9:39:6a:15:cd:1f:5d:a3:29:b6:
         44:d5:29:e0:65:a0:1b:d6:cb:97:10:4b:38:63:44:16:12:9c:
         b6:21:94:ac:2e:3d:a8:75:6f:6e:94:c6:35:bf:91:f1:24:32:
         a9:73:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:56:47 2025 by rpki-client