Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36342e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36342e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          uoj4EFO1M7HJ0+al/hDerTgu52vOIPYyE11ZIjlnCT0=
Subject key identifier:   1A:3B:E5:E1:43:F1:E5:60:F6:FF:DD:D8:A9:1D:E4:CD:93:86:07:5D
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       1475B841AC7AA1E4B1E9F2318241205F92356C0D
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36342e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:43:27 +0000
ROA not before:           Wed 30 Apr 2025 18:38:27 +0000
ROA not after:            Wed 29 Apr 2026 18:43:27 +0000
asID:                     52580
IP address blocks:        186.195.64.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 21:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:75:b8:41:ac:7a:a1:e4:b1:e9:f2:31:82:41:20:5f:92:35:6c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:38:27 2025 GMT
            Not After : Apr 29 18:43:27 2026 GMT
        Subject: CN=1A3BE5E143F1E560F6FFDDD8A91DE4CD9386075D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:49:90:e4:57:71:bf:74:9b:b5:48:db:6f:
                    94:03:02:bc:9c:67:13:40:12:3b:09:86:f1:b0:63:
                    78:7e:e8:99:d2:ec:53:dc:d0:b6:99:b7:8f:90:47:
                    6d:e0:3e:26:41:b1:78:c0:a6:61:03:6d:43:8c:82:
                    1a:f3:6f:13:52:68:ef:05:18:f9:12:b6:66:73:f0:
                    4a:9c:5a:3f:55:13:d9:a9:bc:da:3e:f9:1c:9a:b5:
                    7f:80:9a:a3:b0:6f:83:08:62:29:2d:2d:9c:c5:e6:
                    8e:99:a3:99:09:b1:7c:14:cd:f1:c7:52:b6:cf:55:
                    49:c0:85:fb:ea:a8:b4:cf:6c:3b:21:c2:f3:e6:88:
                    b9:d9:06:21:f5:dc:c4:b6:1e:45:07:07:74:9b:1e:
                    1b:e0:09:0f:32:30:28:9b:80:df:42:f8:bb:64:01:
                    b2:11:e1:0f:21:f0:e5:0b:bb:86:9e:ab:c2:4f:57:
                    ac:82:3e:f2:7b:e0:13:fe:97:9b:c9:87:c2:f1:1f:
                    3d:34:01:af:f9:21:b7:2a:be:49:85:b6:38:1a:1d:
                    4e:e7:3d:d3:92:85:ae:36:8b:13:ee:96:0a:6a:5e:
                    b5:6c:56:55:b9:65:a4:cd:d1:ec:38:1a:da:82:ec:
                    77:21:df:d6:e8:45:9e:ff:ca:ee:ee:51:90:fd:9c:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3B:E5:E1:43:F1:E5:60:F6:FF:DD:D8:A9:1D:E4:CD:93:86:07:5D
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36342e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:27:b6:85:6e:78:c3:5c:c8:ce:62:fa:58:74:6e:68:b6:
         69:9a:52:d2:8b:a5:b7:63:70:59:a8:19:7e:f3:ae:a0:3a:df:
         f5:ed:d9:47:ff:a5:5d:ed:5d:82:07:82:e3:40:f0:d9:0b:7d:
         55:65:00:3e:4e:43:72:93:60:30:d0:3e:9a:44:ed:8d:25:64:
         95:f8:16:9d:6e:2f:8e:bb:81:73:3e:18:25:8c:22:58:be:b4:
         32:cc:5f:d5:9a:ea:4c:40:e5:2f:0d:0a:ad:6b:cd:de:e9:2a:
         e1:6d:a6:60:d1:a1:86:e7:5f:3a:2d:6b:11:6d:44:e5:be:9c:
         d5:7c:55:3b:24:e6:bc:20:2b:21:1a:06:dc:ca:a8:31:ad:4d:
         6e:59:4b:d8:5e:db:d5:ed:91:ac:80:ae:64:25:12:ba:37:46:
         80:82:d6:67:74:b7:32:97:b7:2d:3c:4a:9b:b4:22:8a:92:73:
         6f:18:da:4f:62:01:66:b2:14:de:12:64:9a:cd:fe:fb:e9:0d:
         75:96:33:b5:eb:3e:cf:32:df:0f:4b:b0:dd:ab:de:8c:e9:0b:
         eb:c4:45:cc:a8:ab:3c:91:48:1b:a9:dd:9f:e0:b9:ed:f1:92:
         8b:90:a2:5d:68:17:f2:d8:9b:ff:a7:eb:c0:6b:e1:8f:da:ca:
         2f:02:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:23:06 2025 by rpki-client