Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa
File:                     3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa (raw, json)
Hash identifier:          OUZbAtPpsrIW5zgTQlw7v0dM+UO574yBuI7HPy0tp0g=
Subject key identifier:   BA:C1:8D:DE:08:54:3C:03:3A:78:41:D9:DE:33:72:3A:D8:73:74:53
Certificate issuer:       /CN=FD5E4E3AECD6708F17553F15E6CFE9D262231785
Certificate serial:       162786E88E9D75D19E23428521DDADD95DB3B4E2
Authority key identifier: FD:5E:4E:3A:EC:D6:70:8F:17:55:3F:15:E6:CF:E9:D2:62:23:17:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa
Signing time:             Thu 13 Mar 2025 12:15:21 +0000
ROA not before:           Thu 13 Mar 2025 12:10:21 +0000
ROA not after:            Thu 12 Mar 2026 12:15:21 +0000
asID:                     263868
IP address blocks:        138.186.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.crl
                          rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:27:86:e8:8e:9d:75:d1:9e:23:42:85:21:dd:ad:d9:5d:b3:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5E4E3AECD6708F17553F15E6CFE9D262231785
        Validity
            Not Before: Mar 13 12:10:21 2025 GMT
            Not After : Mar 12 12:15:21 2026 GMT
        Subject: CN=BAC18DDE08543C033A7841D9DE33723AD8737453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:60:c5:0e:37:b7:b3:44:8c:11:36:64:52:
                    15:26:ac:cf:9f:04:1f:f1:43:82:2f:d4:14:e7:ca:
                    28:34:15:19:80:cc:61:45:78:29:de:c2:93:5b:ca:
                    c3:03:e0:9d:fd:35:39:6b:0d:8f:e5:14:20:03:6f:
                    1c:73:75:2b:0e:b1:eb:bd:1f:12:be:31:95:d9:1c:
                    bf:61:ce:b2:bc:a1:7d:34:d2:f4:ff:60:46:ef:09:
                    a0:dd:c0:71:1a:84:14:ad:a1:9b:36:43:71:ed:5f:
                    2b:91:c8:99:a3:7c:54:07:bc:15:d2:36:4c:45:b2:
                    c9:88:69:4d:25:61:75:c9:92:a3:ee:82:0c:33:48:
                    f6:c1:65:87:2e:44:53:17:c3:62:c2:e2:23:d1:54:
                    ad:e9:a8:05:be:89:18:7a:15:1f:a2:bb:12:6c:bc:
                    ae:65:3a:18:02:3b:a7:c0:ab:70:3f:7e:be:53:d0:
                    e5:82:d4:da:1d:fb:8c:b3:4a:04:24:52:21:2f:bd:
                    87:fc:05:11:7d:ec:d0:48:65:84:19:c7:70:83:39:
                    d7:f7:6f:29:f4:8e:fa:46:4d:06:74:4c:5c:1e:bb:
                    cc:df:af:3d:df:93:e7:7f:2b:21:6f:67:a0:2a:36:
                    50:3e:f3:b2:ec:fa:20:3b:1c:57:23:3f:32:86:87:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:8D:DE:08:54:3C:03:3A:78:41:D9:DE:33:72:3A:D8:73:74:53
            X509v3 Authority Key Identifier:
                keyid:FD:5E:4E:3A:EC:D6:70:8F:17:55:3F:15:E6:CF:E9:D2:62:23:17:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b0:bd:e5:8e:1a:84:9a:f1:89:25:2b:9b:9f:80:d5:7c:b2:
         d5:ec:d0:1a:8a:49:81:20:7a:38:12:0a:be:9c:39:98:60:93:
         19:df:c2:42:c3:3d:18:26:f4:6e:6c:c1:d8:af:76:f2:fa:2d:
         45:ee:31:d1:97:91:2b:c6:1b:b3:76:31:4b:e5:95:d1:a6:0f:
         dd:51:d5:c0:0f:76:f6:f5:de:71:f3:bf:d8:96:63:53:aa:c6:
         d3:d3:4a:d1:8a:34:83:58:12:d8:1b:a1:0e:42:25:9f:63:4f:
         1c:37:4a:5e:f4:32:84:e3:a1:17:e9:2f:c1:b9:c9:e7:83:53:
         16:66:62:d1:97:d2:1c:39:94:af:d0:95:ab:a5:a4:6a:53:81:
         db:e1:91:0f:6d:b5:0c:59:6c:80:7f:68:09:1c:b1:aa:5a:79:
         56:38:ad:1a:d0:2c:a8:e3:54:eb:33:5c:68:1a:01:00:3f:ca:
         a5:fd:36:f5:81:cf:bc:8a:e0:0b:5e:44:87:23:dd:f0:40:a0:
         10:56:d3:2f:b9:c4:ae:be:fc:ec:cb:ae:16:47:ad:93:5c:85:
         a9:eb:ab:c9:33:e1:cd:f8:a3:94:a3:32:6b:99:c8:fb:3c:78:
         b5:f1:76:b2:be:1b:86:0a:e3:2f:da:44:2e:1e:02:82:3b:ef:
         43:5e:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:30:00 2025 by rpki-client