Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3138362e3231372e302e302f31362d3138203d3e203533313636.roa
File:                     3138362e3231372e302e302f31362d3138203d3e203533313636.roa (raw, json)
Hash identifier:          tlA+C7x8uMft1RsFSP1JoPbgXYB0xZe0i6s0ta3R8mY=
Subject key identifier:   98:71:6F:A1:89:FE:F6:E5:F8:86:06:AB:9D:4B:C3:36:E2:B1:FB:A1
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       6E442C8A6AF7D593E259FA3402A9F4F181EF34E3
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3138362e3231372e302e302f31362d3138203d3e203533313636.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     53166
IP address blocks:        186.217.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:44:2c:8a:6a:f7:d5:93:e2:59:fa:34:02:a9:f4:f1:81:ef:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=98716FA189FEF6E5F88606AB9D4BC336E2B1FBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:da:8e:80:8a:06:c7:a9:64:3c:da:27:c2:
                    85:a0:f7:68:32:6e:1c:b2:10:f6:1b:f3:4a:a5:23:
                    d8:da:2e:bc:ae:2e:16:30:65:a2:69:0c:bf:e7:7b:
                    45:30:12:f1:7c:1f:0d:74:5b:07:f9:e2:ab:6b:c0:
                    dd:17:13:64:58:58:ab:b6:77:75:cf:23:90:6e:45:
                    4b:8d:39:ac:95:42:fb:81:90:1d:80:5f:be:a9:9a:
                    fc:89:3f:4b:a2:b2:ea:fb:5b:8c:de:34:81:d4:31:
                    4d:0f:1a:38:35:70:f8:8b:49:68:68:7d:92:c3:e4:
                    63:ba:2a:0b:51:b3:0d:fe:fe:71:a0:d7:55:4d:bf:
                    4e:22:69:8e:7d:93:d6:52:e9:d8:a4:1a:18:c1:ef:
                    25:8d:c2:94:40:fb:9b:da:b9:e7:5d:82:28:8f:eb:
                    fc:d2:7a:2d:ed:50:c6:11:3a:a5:07:48:32:2e:7a:
                    1d:84:f7:02:40:fd:9c:a4:eb:d2:9f:22:45:48:bf:
                    93:1e:cb:95:6f:b2:7d:cc:39:60:a7:2a:f7:ab:37:
                    40:38:97:91:30:ad:5a:2c:2a:9a:dd:d6:f7:53:74:
                    59:f2:0f:0d:1d:37:ed:ba:d8:28:33:66:bb:66:63:
                    a9:e1:5d:c8:ac:88:2b:61:ed:27:01:37:be:85:38:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:71:6F:A1:89:FE:F6:E5:F8:86:06:AB:9D:4B:C3:36:E2:B1:FB:A1
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3138362e3231372e302e302f31362d3138203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:49:b1:53:c4:0c:27:a3:08:96:cd:5e:c1:fe:6b:c2:32:ef:
         c5:a6:ec:37:76:60:b8:5a:ea:bf:4b:93:77:d0:71:79:c1:13:
         de:89:c4:b6:ab:00:f6:31:cc:87:9a:cf:64:f9:2f:98:a7:93:
         c0:1c:65:40:7d:8b:cc:06:dd:0d:38:28:ce:71:a7:9a:27:4b:
         97:aa:aa:98:52:26:d9:dc:d5:de:cd:d5:a9:dc:93:c6:b9:0f:
         a8:05:54:ec:6f:7b:14:ed:55:65:2d:72:d0:75:7b:94:3d:d6:
         a7:74:a1:8f:ac:ca:e1:f1:2c:4d:b2:44:e5:dc:0a:39:77:f0:
         ab:92:75:e2:db:03:de:f8:86:86:d7:b5:3d:eb:07:fb:d1:24:
         2e:cb:06:62:87:36:33:4c:87:29:3a:ff:e8:4f:55:07:63:58:
         b2:0a:2d:3b:42:70:ed:21:fe:43:9f:ad:04:ed:75:30:84:a8:
         ab:aa:2d:de:ac:52:71:26:e8:0a:72:a6:a6:ae:d1:4c:96:b3:
         82:9e:e4:01:b9:e8:a7:b8:1c:98:9b:38:13:8d:a3:80:1b:85:
         59:d5:6e:c5:d5:55:69:b5:cc:58:b4:18:2a:7c:dd:c6:25:fa:
         6f:6b:c2:f1:f1:98:54:81:c6:0e:2a:83:c0:c3:bb:3c:57:de:
         f4:72:20:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:08:08 2025 by rpki-client