Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa
File:                     3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa (raw, json)
Hash identifier:          gd9eCT45ma06ILxIsfJDbmF1504Jx/gv3TxluDyc5YQ=
Subject key identifier:   CE:63:0D:B8:88:B0:2E:82:AB:3E:CC:0F:6D:AA:82:D1:2F:BF:C3:B2
Certificate issuer:       /CN=A50362E1730E440E6BA771E7529DAB6A4505D5B0
Certificate serial:       6E125741F9F61202AC0E95A46336A744608BD57C
Authority key identifier: A5:03:62:E1:73:0E:44:0E:6B:A7:71:E7:52:9D:AB:6A:45:05:D5:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa
Signing time:             Wed 07 May 2025 13:09:39 +0000
ROA not before:           Wed 07 May 2025 13:04:39 +0000
ROA not after:            Wed 06 May 2026 13:09:39 +0000
asID:                     262738
IP address blocks:        186.195.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/A50362E1730E440E6BA771E7529DAB6A4505D5B0.crl
                          rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/A50362E1730E440E6BA771E7529DAB6A4505D5B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 11:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:57:41:f9:f6:12:02:ac:0e:95:a4:63:36:a7:44:60:8b:d5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A50362E1730E440E6BA771E7529DAB6A4505D5B0
        Validity
            Not Before: May  7 13:04:39 2025 GMT
            Not After : May  6 13:09:39 2026 GMT
        Subject: CN=CE630DB888B02E82AB3ECC0F6DAA82D12FBFC3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:4f:3c:69:31:50:1d:9a:38:de:38:9e:44:
                    4c:28:96:6f:d6:95:e2:e7:40:8b:2f:92:19:71:af:
                    17:69:8f:f5:b5:56:f8:f0:bb:ca:c5:3f:c8:44:be:
                    13:89:79:80:60:21:4c:42:11:88:68:b0:b1:02:d6:
                    62:ce:8c:ca:71:ae:d1:d7:a0:e2:13:fe:0f:da:72:
                    64:7b:1d:81:e6:cf:43:e3:48:d6:21:20:cb:e1:a2:
                    d1:fa:dc:cc:63:f0:36:80:2f:47:55:5c:68:32:1a:
                    18:43:14:a3:c9:35:6f:70:aa:3f:eb:aa:1e:4c:ca:
                    09:b7:57:23:66:75:b0:9e:2a:2d:9d:7f:b2:d4:86:
                    8d:48:11:06:e3:0e:88:fc:4d:90:14:22:42:0b:8c:
                    58:12:19:dc:d4:27:c1:1d:7c:35:98:47:02:d5:da:
                    97:7a:47:49:39:aa:c6:58:2d:33:bc:ca:7b:4f:58:
                    09:4f:c8:07:a4:8c:e0:77:55:e6:51:b2:94:57:09:
                    fb:44:3a:43:8b:c2:f7:65:e4:e1:c9:61:9e:91:ff:
                    1c:93:52:36:50:c6:76:30:24:e9:45:ff:9e:df:4d:
                    51:e2:04:0b:8f:96:d5:af:74:07:e4:fa:0c:3e:d4:
                    0e:42:f3:46:41:07:a2:d1:9e:ca:c0:3b:29:7a:22:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:63:0D:B8:88:B0:2E:82:AB:3E:CC:0F:6D:AA:82:D1:2F:BF:C3:B2
            X509v3 Authority Key Identifier:
                keyid:A5:03:62:E1:73:0E:44:0E:6B:A7:71:E7:52:9D:AB:6A:45:05:D5:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/A50362E1730E440E6BA771E7529DAB6A4505D5B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:64:f4:ff:5f:57:59:63:ff:59:db:aa:64:51:b6:fd:eb:e2:
         9e:99:a9:04:ab:0b:d4:0f:34:4d:22:0e:c5:c2:cc:ce:57:50:
         18:68:ab:2e:23:b5:a5:e9:be:5e:b7:c7:cd:c5:5e:76:d2:eb:
         89:65:4a:60:4a:a8:1f:65:b5:be:bb:44:55:75:51:aa:ff:26:
         42:74:eb:02:06:04:61:96:e8:fb:5f:3f:ce:cf:28:98:96:88:
         5c:64:b6:1b:0a:fb:b7:1b:18:6a:f0:17:65:65:fe:32:60:cd:
         49:46:29:0d:b3:f8:de:0c:d7:31:ee:0f:3a:8b:43:14:8d:94:
         40:2c:a9:77:a6:f1:d9:88:af:75:b8:0e:c1:6a:15:aa:cc:24:
         51:cf:fc:b5:fd:2d:c7:52:98:e1:fe:f3:8e:57:e9:4e:c3:8e:
         b3:bd:ad:ae:2b:c6:44:92:ef:d5:9b:d0:86:14:36:05:03:3b:
         fc:4f:e9:bb:1c:cd:7b:0c:64:07:63:72:0e:61:ea:b1:17:89:
         91:fe:36:3f:b7:5d:ef:76:2e:09:93:f5:9c:f6:cd:05:4e:7a:
         a6:f2:46:18:2a:b9:e7:35:83:df:2d:00:86:28:93:76:c6:5b:
         5e:66:2a:5c:23:c1:33:38:80:cf:18:7b:d0:ec:e4:a9:0b:42:
         ac:36:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:18:56 2025 by rpki-client