Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33322e302f32322d3234203d3e20323730383633.roa
File:                     3138362e3235302e33322e302f32322d3234203d3e20323730383633.roa (raw, json)
Hash identifier:          2mKQh3fynUNY01LyYCTTyQcfUF6JhCjr7MJT94wYgVM=
Subject key identifier:   80:E0:26:D6:7F:34:89:B1:7F:00:5E:1C:29:BB:A9:60:58:F6:D3:BD
Certificate issuer:       /CN=C8A380591E5236A3BC72F7A6D4336D9EAA7338CB
Certificate serial:       1191BB62DCE59843DF67599857F6102890B34A30
Authority key identifier: C8:A3:80:59:1E:52:36:A3:BC:72:F7:A6:D4:33:6D:9E:AA:73:38:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A380591E5236A3BC72F7A6D4336D9EAA7338CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33322e302f32322d3234203d3e20323730383633.roa
Signing time:             Tue 06 May 2025 16:56:55 +0000
ROA not before:           Tue 06 May 2025 16:51:55 +0000
ROA not after:            Tue 05 May 2026 16:56:55 +0000
asID:                     270863
IP address blocks:        186.250.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/C8A380591E5236A3BC72F7A6D4336D9EAA7338CB.crl
                          rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/C8A380591E5236A3BC72F7A6D4336D9EAA7338CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A380591E5236A3BC72F7A6D4336D9EAA7338CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 23:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:bb:62:dc:e5:98:43:df:67:59:98:57:f6:10:28:90:b3:4a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A380591E5236A3BC72F7A6D4336D9EAA7338CB
        Validity
            Not Before: May  6 16:51:55 2025 GMT
            Not After : May  5 16:56:55 2026 GMT
        Subject: CN=80E026D67F3489B17F005E1C29BBA96058F6D3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:56:a6:e9:37:d3:38:96:13:2c:13:a4:5a:
                    54:71:9d:cf:2e:66:8d:ff:2d:83:7d:91:a5:44:10:
                    fe:9e:d8:b3:fb:34:b3:40:ac:98:dd:40:7d:68:d8:
                    43:e2:ec:70:8e:36:c7:7d:34:12:e1:fd:a3:30:47:
                    38:79:28:d1:b9:bb:f4:d6:cc:5a:b0:f2:7c:7c:7d:
                    f2:5b:92:bb:21:74:c3:d2:e6:02:fb:5d:45:38:26:
                    ea:2b:5a:db:b1:d3:32:62:da:c0:fe:33:5b:70:55:
                    8b:86:f2:9a:33:80:2c:7d:03:fc:d4:1c:31:66:c7:
                    12:20:aa:ba:e2:de:dd:b5:a5:c6:f6:e2:02:fb:5f:
                    62:be:99:20:ba:c3:ac:46:be:34:b6:a8:6e:41:a3:
                    73:7a:21:9a:77:5b:e8:6c:93:ba:ce:a8:55:e7:5f:
                    55:c0:df:d1:ff:9f:66:0d:1c:7e:a3:dd:62:5c:43:
                    cb:67:d1:cc:08:3a:f3:0d:e2:62:34:83:65:55:78:
                    46:e2:a9:87:f3:61:cb:fb:65:b8:5e:df:b9:9f:90:
                    f6:63:da:4c:2a:61:eb:68:ad:90:03:b8:93:67:6b:
                    12:9e:86:e3:a4:97:8a:bb:d0:5f:c6:eb:e5:3a:be:
                    a5:ac:bd:f7:61:65:65:0f:0a:c3:f4:50:09:ea:14:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:26:D6:7F:34:89:B1:7F:00:5E:1C:29:BB:A9:60:58:F6:D3:BD
            X509v3 Authority Key Identifier:
                keyid:C8:A3:80:59:1E:52:36:A3:BC:72:F7:A6:D4:33:6D:9E:AA:73:38:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/C8A380591E5236A3BC72F7A6D4336D9EAA7338CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A380591E5236A3BC72F7A6D4336D9EAA7338CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33322e302f32322d3234203d3e20323730383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:6b:4d:eb:b1:84:8c:60:8a:8e:08:21:07:3a:ec:30:7b:
         81:fe:79:1d:9a:5d:5f:7c:f8:84:49:79:3b:2e:a1:cd:36:8d:
         2c:13:f6:46:03:e6:a8:33:56:43:fe:0a:0d:9a:ea:2c:04:8a:
         11:d5:6d:6a:11:de:98:1c:ba:86:e9:7b:db:c6:d4:45:99:65:
         89:52:c9:95:b8:e2:ba:55:36:dc:8a:d8:81:46:5b:62:de:36:
         81:9c:cf:c6:94:bd:30:11:6e:71:84:37:47:c6:eb:c2:01:1a:
         07:ec:d1:63:7e:28:00:93:be:49:25:37:66:91:61:95:b8:4f:
         4f:b5:27:68:09:66:77:f8:be:96:54:ae:ab:b0:a5:a1:ef:7e:
         12:1c:e0:9e:33:be:b2:13:04:fc:6e:21:a6:ee:09:66:65:fd:
         13:98:d0:21:aa:7b:eb:ed:62:38:04:da:1a:a2:01:bb:9f:c1:
         83:39:8d:c3:4f:e5:a5:ac:1f:bb:d4:41:20:97:57:a2:f1:60:
         3c:0b:14:09:22:0d:62:ec:ee:af:cf:10:fc:8f:0f:00:b2:d3:
         43:a2:5f:49:16:69:e4:89:a8:a8:b2:61:6d:09:da:ae:12:bc:
         db:67:48:d4:00:5e:6d:16:0f:47:69:a9:ca:c1:19:56:9f:7b:
         c7:5c:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:53:49 2025 by rpki-client