Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36362e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          qLNm6Lx0r868n70T1TLUW5qdMDBtw4D8Fh9dWdSvN/o=
Subject key identifier:   5E:E8:29:01:20:51:B0:7F:3C:EF:83:76:13:4B:20:BD:BC:FD:68:75
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       5E5B5E29235BA6BA73B6BDAEBA3E4A512E20FECE
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:38:16 +0000
ROA not before:           Wed 30 Apr 2025 18:33:16 +0000
ROA not after:            Wed 29 Apr 2026 18:38:16 +0000
asID:                     52580
IP address blocks:        186.195.66.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:5e:29:23:5b:a6:ba:73:b6:bd:ae:ba:3e:4a:51:2e:20:fe:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:33:16 2025 GMT
            Not After : Apr 29 18:38:16 2026 GMT
        Subject: CN=5EE829012051B07F3CEF8376134B20BDBCFD6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:41:f2:23:ef:31:70:91:8c:1e:4a:68:46:
                    04:69:bf:67:f4:80:b7:a3:a6:21:57:a3:3b:e5:4e:
                    c4:c0:4b:a3:4f:46:f9:b7:04:e0:77:b5:b8:33:72:
                    00:fb:18:e1:6d:6b:b9:5d:61:5c:f7:a7:50:ab:e5:
                    14:74:4f:59:87:23:47:83:d2:96:0d:f2:99:a5:b5:
                    bf:54:b6:0e:78:d3:73:34:f0:59:c3:8a:7a:c5:a5:
                    32:0b:98:70:8b:ac:de:42:43:8d:27:e7:b5:a1:ad:
                    47:d5:29:f9:54:a1:63:04:20:12:1f:9a:6e:11:1a:
                    45:24:ec:74:c1:26:9c:dd:f4:32:a7:20:d5:b3:cf:
                    bc:6d:7c:fe:19:cc:9f:b9:d0:29:80:e1:7c:9e:7d:
                    97:60:82:b4:95:56:c5:5a:44:65:f9:ee:8b:57:bd:
                    d2:7d:ef:75:d2:fd:a9:e0:6b:0d:ea:69:f3:f7:e8:
                    d1:1f:bb:40:f2:a9:a5:92:4c:4c:59:64:54:8f:12:
                    65:05:94:a7:3e:c3:f9:ec:39:7e:0e:32:0c:87:20:
                    69:44:79:52:98:36:c1:c9:8a:87:15:5f:c4:36:1c:
                    ee:9a:a8:6d:3a:6b:ca:4f:d4:de:e4:b2:ab:80:e9:
                    c2:35:25:88:62:de:a0:f5:24:63:35:ff:87:c4:0f:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E8:29:01:20:51:B0:7F:3C:EF:83:76:13:4B:20:BD:BC:FD:68:75
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:1b:1d:fd:5c:b9:00:91:02:a9:0d:51:b7:58:85:33:df:
         a5:6f:58:8b:ed:c0:ef:5e:cb:de:c1:a1:d1:5e:a0:db:af:57:
         c4:7c:4d:6a:7b:6d:eb:f1:82:83:42:87:65:f6:66:b6:71:1b:
         1a:d2:4d:2b:5b:39:f7:f8:7c:0f:fe:83:21:41:32:94:7e:83:
         10:f3:27:ba:39:1c:db:f1:8c:90:7b:3e:25:27:e5:3f:d9:fd:
         fd:57:a1:fb:ff:bb:24:d9:bc:5a:c5:32:54:a6:77:6c:9e:cc:
         c8:ff:1d:ae:36:3c:03:3f:8b:4e:45:a4:6f:ec:1f:73:fa:50:
         40:d3:e2:c9:0f:8f:1b:46:8b:52:5f:25:16:91:aa:80:0a:c3:
         e3:2a:5c:85:68:53:83:88:9a:bb:18:9c:5f:eb:89:92:9d:47:
         a7:e7:35:c7:fd:8d:e8:00:33:bf:a2:2f:df:de:97:18:9f:5c:
         a5:c2:50:b7:d4:e7:9b:44:eb:a8:f2:ab:ee:91:28:e2:0b:04:
         20:dd:81:20:64:a4:d8:a0:55:33:03:4a:a9:97:8c:2f:9d:33:
         08:0d:b3:a3:95:8a:ad:32:25:26:52:40:5b:70:75:44:7b:7e:
         b6:4e:a6:a6:71:10:8e:23:7b:0a:f0:85:38:a7:e3:26:31:2b:
         bd:5a:23:4c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXlteKSNbprpztr2uuj5KUS4g/s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODMzMTZaFw0yNjA0MjkxODM4MTZaMDMxMTAvBgNV
BAMTKDVFRTgyOTAxMjA1MUIwN0YzQ0VGODM3NjEzNEIyMEJEQkNGRDY4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfUHyI+8xcJGMHkpoRgRpv2f0
gLejpiFXozvlTsTAS6NPRvm3BOB3tbgzcgD7GOFta7ldYVz3p1Cr5RR0T1mHI0eD
0pYN8pmltb9Utg5403M08FnDinrFpTILmHCLrN5CQ40n57WhrUfVKflUoWMEIBIf
mm4RGkUk7HTBJpzd9DKnINWzz7xtfP4ZzJ+50CmA4XyefZdggrSVVsVaRGX57otX
vdJ973XS/angaw3qafP36NEfu0DyqaWSTExZZFSPEmUFlKc+w/nsOX4OMgyHIGlE
eVKYNsHJiocVX8Q2HO6aqG06a8pP1N7ksquA6cI1JYhi3qD1JGM1/4fED/xVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXugpASBRsH8874N2E0sgvbz9aHUwHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM2MzYyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNCMA0GCSqGSIb3DQEBCwUAA4IBAQB7dRsd/Vy5
AJECqQ1Rt1iFM9+lb1iL7cDvXsvewaHRXqDbr1fEfE1qe23r8YKDQodl9ma2cRsa
0k0rWzn3+HwP/oMhQTKUfoMQ8ye6ORzb8YyQez4lJ+U/2f39V6H7/7sk2bxaxTJU
pndsnszI/x2uNjwDP4tORaRv7B9z+lBA0+LJD48bRotSXyUWkaqACsPjKlyFaFOD
iJq7GJxf64mSnUen5zXH/Y3oADO/oi/f3pcYn1ylwlC31OebROuo8qvukSjiCwQg
3YEgZKTYoFUzA0qpl4wvnTMIDbOjlYqtMiUmUkBbcHVEe362TqamcRCOI3sK8IU4
p+MmMSu9WiNM
-----END CERTIFICATE-----
Generated at Fri May 2 10:20:10 2025 by rpki-client