Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa
File:                     3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa (raw, json)
Hash identifier:          GWBMZonJR+8/h3IkuaoB5J2cooymJjRsyrI1nOKhkr8=
Subject key identifier:   1E:52:8E:D7:94:35:43:88:96:7C:40:25:B5:30:86:FD:58:FE:37:A1
Certificate issuer:       /CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
Certificate serial:       09F0BEDDFA6C7632EB3E3586CE912298CD16DB69
Authority key identifier: 1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa
Signing time:             Tue 13 May 2025 19:18:34 +0000
ROA not before:           Tue 13 May 2025 19:13:34 +0000
ROA not after:            Tue 12 May 2026 19:18:34 +0000
asID:                     262817
IP address blocks:        186.250.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 09:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f0:be:dd:fa:6c:76:32:eb:3e:35:86:ce:91:22:98:cd:16:db:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
        Validity
            Not Before: May 13 19:13:34 2025 GMT
            Not After : May 12 19:18:34 2026 GMT
        Subject: CN=1E528ED794354388967C4025B53086FD58FE37A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:dc:08:b9:c9:70:66:b6:24:6b:05:47:14:
                    fd:c1:f4:25:d5:e0:a6:17:79:0d:af:6c:74:98:85:
                    3f:2a:da:5d:d5:9c:fc:41:75:42:95:f1:81:f6:ef:
                    57:7e:08:5c:22:eb:f2:c7:a7:ee:e4:8e:f3:bb:08:
                    95:3f:94:71:d3:8a:fb:e0:83:a6:86:9d:18:73:f1:
                    c3:52:cd:56:b6:59:f3:4a:3b:da:19:93:8f:7a:f3:
                    d7:ad:90:e6:4c:2b:bf:bf:cc:4b:a6:64:f7:df:76:
                    e0:76:34:c4:dc:2d:3a:e7:e1:88:8f:48:8e:fe:64:
                    fb:5f:d9:e7:c3:db:04:ae:d9:8e:79:4c:38:af:13:
                    a5:49:09:67:1a:a4:63:93:76:fd:b2:2c:ba:24:9f:
                    45:b3:ca:53:8a:e8:36:af:5a:18:55:0d:22:1c:06:
                    5a:30:85:19:4c:4b:23:a7:a0:09:dd:e5:80:30:9e:
                    0a:6c:f0:40:4d:a8:25:76:ff:cf:60:2e:93:2a:9e:
                    79:51:24:2e:69:4e:a9:d8:89:42:2b:2b:e1:58:f2:
                    b9:0b:b8:97:f1:62:9f:54:04:dd:4d:e2:5f:cd:86:
                    b7:8d:3e:41:b5:18:ff:a5:c0:0c:92:e5:84:3b:a3:
                    56:6f:59:ae:2a:4a:7f:81:8b:46:9a:e0:75:3f:cc:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:8E:D7:94:35:43:88:96:7C:40:25:B5:30:86:FD:58:FE:37:A1
            X509v3 Authority Key Identifier:
                keyid:1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:6c:ed:85:d6:19:0d:18:f4:c0:0d:85:9f:44:31:70:d6:
         a6:73:b9:45:b6:ef:d4:78:9e:c8:a1:c9:4b:ea:81:fa:a7:20:
         20:be:9d:4f:b0:bb:fd:1e:c8:aa:57:1f:8e:35:59:99:ae:2b:
         af:a6:8e:6d:6d:a0:69:2b:fa:3f:a8:33:07:be:fa:ad:8d:82:
         23:1d:34:29:d7:02:b3:fd:90:3b:60:7d:b4:71:ca:07:b3:a5:
         a8:35:c7:9a:f9:da:e0:0b:82:39:91:34:30:39:0c:17:25:6f:
         fc:62:c1:1b:5c:99:eb:c4:e7:05:1f:7c:de:75:72:44:a2:35:
         30:fe:9e:1e:ec:82:ca:7a:cd:d6:3a:ea:c2:cc:0a:2c:31:fa:
         98:e2:b6:f7:95:98:70:3b:27:14:59:57:21:09:96:99:cc:11:
         18:a4:55:e7:9a:15:ec:98:1e:ff:99:f7:ca:6c:2d:61:95:1a:
         33:76:32:94:5b:5e:51:33:05:62:6d:77:aa:f8:56:fa:c1:4c:
         74:cd:76:5d:1a:31:b6:52:07:01:1c:46:11:46:e4:6e:89:6f:
         15:a7:85:a4:f5:64:c1:9d:84:9e:e7:a2:16:f6:8f:34:ec:ed:
         59:d1:b2:cc:12:00:c9:d0:65:8d:09:97:19:24:1b:28:c4:cd:
         a2:0a:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:38:47 2025 by rpki-client