Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
File:                     3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (raw, json)
Hash identifier:          iX1G3BwA7GvrDoDHMa/8SGz1lhNNrpvqQU67HYRv43U=
Subject key identifier:   75:ED:7C:74:DF:D8:35:A0:F2:5C:38:BE:4B:E1:30:A7:68:2C:9A:8D
Certificate issuer:       /CN=75A4972B7CD4E111D558A51F98974C6685D9043C
Certificate serial:       130CC6CD0B99852D254C67FA4A9A878E3D2BB373
Authority key identifier: 75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
Signing time:             Tue 29 Apr 2025 19:35:51 +0000
ROA not before:           Tue 29 Apr 2025 19:30:51 +0000
ROA not after:            Tue 28 Apr 2026 19:35:51 +0000
asID:                     263027
IP address blocks:        186.249.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl
                          rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 22:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0c:c6:cd:0b:99:85:2d:25:4c:67:fa:4a:9a:87:8e:3d:2b:b3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A4972B7CD4E111D558A51F98974C6685D9043C
        Validity
            Not Before: Apr 29 19:30:51 2025 GMT
            Not After : Apr 28 19:35:51 2026 GMT
        Subject: CN=75ED7C74DFD835A0F25C38BE4BE130A7682C9A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:c4:68:09:89:cc:00:43:46:58:be:bd:12:
                    c7:d2:2d:5d:b6:2c:de:30:b8:f4:3e:e0:34:67:8a:
                    eb:6b:35:9a:b6:80:ce:95:ba:00:b2:6f:28:6a:51:
                    68:a5:09:e5:70:23:70:94:fb:1f:d4:f0:cb:61:7d:
                    d5:98:f4:dd:ea:9a:43:9a:d3:c1:fb:23:c8:2f:94:
                    a6:fb:d2:0a:69:ad:f4:5c:eb:58:f0:73:5c:07:de:
                    71:83:a8:6c:34:8b:bb:0c:f7:8c:e9:ad:10:18:ef:
                    05:09:bd:66:e9:4c:56:85:ef:81:15:1d:cd:a6:e3:
                    18:f8:27:d7:0d:58:ab:1c:21:73:38:d4:8c:dd:10:
                    29:b0:f8:9f:d6:6e:81:82:28:97:82:ab:ba:af:2f:
                    dd:3e:e5:32:87:05:e6:f0:cc:a4:87:c9:84:db:2b:
                    3c:e8:c0:91:92:38:7e:34:29:e3:b1:eb:38:48:12:
                    c3:17:cb:0e:a0:86:9a:c7:f5:0e:8f:ec:47:26:b1:
                    15:34:71:52:e2:83:e3:29:fb:a1:67:91:9c:88:17:
                    f3:52:ba:8d:7a:96:fa:fc:0a:ee:57:ab:10:e3:5e:
                    a6:ab:08:c0:a4:f7:84:41:9e:4c:03:41:44:72:1d:
                    ca:11:1e:0a:ae:48:fb:bf:38:fe:8b:f8:ef:82:36:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:7C:74:DF:D8:35:A0:F2:5C:38:BE:4B:E1:30:A7:68:2C:9A:8D
            X509v3 Authority Key Identifier:
                keyid:75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:9e:f7:48:41:71:89:ab:3a:a7:9d:f7:87:ac:88:22:b0:
         76:72:49:aa:66:3d:a1:97:d2:51:bc:1c:a7:f4:86:99:f6:f5:
         2b:56:56:48:bc:0d:8b:f5:37:9e:3c:7c:be:91:78:32:b3:1b:
         47:b7:84:f0:5a:5b:39:de:0c:49:d2:b4:aa:87:1a:38:79:fb:
         22:30:e5:f1:91:21:7e:ce:2c:f0:76:34:b6:6d:e9:89:d6:8d:
         80:18:f9:ba:d5:0b:03:3d:07:e2:a0:69:56:c4:97:c7:06:af:
         04:4f:91:6c:3d:d8:33:69:f1:11:0a:05:b5:03:a7:dc:36:6a:
         0d:fa:3d:dd:bf:df:4d:13:20:93:8f:2b:5e:18:f6:e4:1f:ea:
         d6:2e:b4:89:c9:3e:69:08:a9:a6:9e:22:f2:b0:2c:d8:8e:42:
         eb:e1:82:c0:9f:0c:f7:e4:f3:00:8a:ca:c1:3d:f2:50:b7:ea:
         ee:c1:a0:c7:1b:13:4f:67:31:d1:c6:2b:0e:ea:f5:b3:65:1a:
         c9:a2:9a:76:37:b6:e4:b6:16:5d:d7:a7:03:49:94:33:be:af:
         6a:e0:14:0c:f1:c6:52:83:25:e2:9b:a7:2c:c2:4d:9a:91:32:
         2f:10:5d:81:2a:95:d4:f2:76:62:92:d5:31:d7:87:f6:6d:1b:
         52:7b:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:55:21 2025 by rpki-client