Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          RIyXacbaIhNlq0p30V3YiYkh7oJKg68Vj4Y3tPKnimo=
Subject key identifier:   17:6A:9B:80:DE:F7:BA:52:A3:09:11:8C:84:A3:86:C9:5B:00:80:E1
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2F1833F5BD94FECB090447CDB8C0B0735513544F
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:45 +0000
ROA not before:           Mon 16 Jun 2025 14:05:45 +0000
ROA not after:            Mon 15 Jun 2026 14:10:45 +0000
asID:                     262729
IP address blocks:        186.193.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:18:33:f5:bd:94:fe:cb:09:04:47:cd:b8:c0:b0:73:55:13:54:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:45 2025 GMT
            Not After : Jun 15 14:10:45 2026 GMT
        Subject: CN=176A9B80DEF7BA52A309118C84A386C95B0080E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:28:bf:40:91:34:8f:e5:b1:81:9e:e4:b9:
                    6c:d8:a3:76:1c:93:ef:aa:c6:76:af:ab:e6:9a:46:
                    bb:84:f0:c8:ef:a3:6d:b8:49:be:b8:f3:fe:f5:c1:
                    83:86:80:55:03:72:57:a0:bc:5d:ec:67:f8:f4:0e:
                    24:05:d3:20:07:96:b4:e5:30:ab:d3:b6:22:09:dd:
                    10:a2:93:e4:8c:00:46:ad:59:fb:b6:fe:b4:ff:4e:
                    1e:1d:81:ad:f8:c8:80:c2:21:38:22:df:c3:42:b8:
                    ee:ac:f8:8d:e7:3c:91:f0:9e:cc:b1:6c:cc:47:c9:
                    bf:24:5b:c3:ba:8f:ce:53:b2:d0:b9:ff:05:f5:99:
                    af:87:be:10:d1:3b:88:5a:59:d7:1d:56:cb:9a:51:
                    45:b0:46:35:9c:b2:b9:03:a1:fa:c1:45:70:5f:71:
                    5c:7b:e6:1d:1a:ba:e7:7f:3a:a7:e6:1b:42:b2:6a:
                    86:d2:59:52:c3:74:45:c2:bf:0b:7f:f5:d9:16:ec:
                    c3:97:79:e9:93:3f:81:a0:af:fc:a5:1f:65:65:72:
                    82:90:f2:3b:9d:6c:13:b0:86:71:06:39:73:62:dc:
                    48:f9:77:80:cf:15:7b:0c:0d:57:8f:7f:a1:43:0d:
                    a2:1d:24:ab:bd:48:47:ca:17:1f:73:18:f3:ec:32:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:9B:80:DE:F7:BA:52:A3:09:11:8C:84:A3:86:C9:5B:00:80:E1
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:0a:bf:6c:97:3f:13:70:83:ef:70:92:d2:2e:50:35:82:
         5f:ce:0e:ac:0b:78:fc:97:71:20:97:f7:e9:83:f6:88:05:14:
         76:6e:4c:a1:0d:96:4f:73:35:d3:e5:dd:e1:3c:2c:31:a5:2f:
         62:55:59:b7:31:3f:d3:b4:3a:db:01:42:9e:0d:63:81:68:50:
         2c:96:9d:cb:73:bd:10:3b:49:1f:e4:56:06:d2:82:53:5f:ca:
         44:c6:60:ff:dd:ff:fd:ea:16:b5:b5:aa:71:dc:67:5c:f8:6c:
         07:ed:0b:96:57:29:90:7d:26:09:81:f7:94:d8:13:04:33:12:
         f0:b4:a4:45:30:bf:4d:80:df:39:ac:bf:78:ce:da:76:09:31:
         dc:67:06:85:26:03:37:e6:21:b5:e7:0d:9a:a7:9c:50:f0:44:
         4b:d1:91:49:b5:07:72:2c:ec:50:fb:61:96:3e:52:23:ba:c7:
         b9:99:d9:ab:e9:1e:36:e8:76:ee:88:84:40:a7:53:f2:66:d2:
         e4:11:27:54:d8:7d:1f:02:58:6c:a4:9c:91:92:e7:6e:29:d9:
         17:8b:c9:c6:5e:b9:1c:fe:7a:b3:a7:c0:8e:69:46:e0:7a:52:
         2a:eb:bc:1c:a7:4a:c5:75:d4:64:64:f3:ca:b8:87:d6:72:63:
         a7:ce:f4:80
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULxgz9b2U/ssJBEfNuMCwc1UTVE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNTA2MTYxNDA1NDVaFw0yNjA2MTUxNDEwNDVaMDMxMTAvBgNV
BAMTKDE3NkE5QjgwREVGN0JBNTJBMzA5MTE4Qzg0QTM4NkM5NUIwMDgwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgCi/QJE0j+WxgZ7kuWzYo3Yc
k++qxnavq+aaRruE8Mjvo224Sb648/71wYOGgFUDclegvF3sZ/j0DiQF0yAHlrTl
MKvTtiIJ3RCik+SMAEatWfu2/rT/Th4dga34yIDCITgi38NCuO6s+I3nPJHwnsyx
bMxHyb8kW8O6j85TstC5/wX1ma+HvhDRO4haWdcdVsuaUUWwRjWcsrkDofrBRXBf
cVx75h0auud/OqfmG0KyaobSWVLDdEXCvwt/9dkW7MOXeemTP4Ggr/ylH2VlcoKQ
8judbBOwhnEGOXNi3Ej5d4DPFXsMDVePf6FDDaIdJKu9SEfKFx9zGPPsMoTvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUF2qbgN73ulKjCRGMhKOGyVsAgOEwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrBiDANBgkqhkiG9w0BAQsFAAOCAQEAVeQK
v2yXPxNwg+9wktIuUDWCX84OrAt4/JdxIJf36YP2iAUUdm5MoQ2WT3M10+Xd4Tws
MaUvYlVZtzE/07Q62wFCng1jgWhQLJady3O9EDtJH+RWBtKCU1/KRMZg/93//eoW
tbWqcdxnXPhsB+0LllcpkH0mCYH3lNgTBDMS8LSkRTC/TYDfOay/eM7adgkx3GcG
hSYDN+YhtecNmqecUPBES9GRSbUHcizsUPthlj5SI7rHuZnZq+keNuh27oiEQKdT
8mbS5BEnVNh9HwJYbKSckZLnbinZF4vJxl65HP56s6fAjmlG4HpSKuu8HKdKxXXU
ZGTzyriH1nJjp870gA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:38:31 2025 by rpki-client