Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32332d3233203d3e20323635323831.roa
File:                     3136382e39302e3139322e302f32332d3233203d3e20323635323831.roa (raw, json)
Hash identifier:          1e3JcsuuS25QC+4B4RA3FFzkqjtQycbqNo021EWU33o=
Subject key identifier:   FA:D8:80:AF:ED:DC:7B:56:54:DA:F6:42:62:6A:6B:1D:D6:C7:6F:15
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       762E7687749AE0E5ED5AAF971A5F7B53700152E8
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32332d3233203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:11 +0000
ROA not before:           Thu 05 Jun 2025 16:59:11 +0000
ROA not after:            Thu 04 Jun 2026 17:04:11 +0000
asID:                     265281
IP address blocks:        168.90.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 09:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2e:76:87:74:9a:e0:e5:ed:5a:af:97:1a:5f:7b:53:70:01:52:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:11 2025 GMT
            Not After : Jun  4 17:04:11 2026 GMT
        Subject: CN=FAD880AFEDDC7B5654DAF642626A6B1DD6C76F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:dc:da:f4:0e:61:19:23:a4:f7:6a:79:da:
                    85:7c:19:95:43:34:e1:cd:d2:ed:77:1e:bf:3f:38:
                    2a:89:b5:78:7a:6f:cb:e2:2d:62:4a:21:b8:29:00:
                    68:52:7a:1e:02:dd:20:3d:aa:df:69:aa:ad:ff:0c:
                    0d:95:da:86:c4:f2:71:66:ef:2c:39:ac:3a:25:32:
                    c6:97:a2:7b:12:97:75:83:cd:37:78:75:21:17:35:
                    fb:43:b3:e9:fd:5c:ae:b4:2a:c5:03:69:37:d6:91:
                    fc:ee:62:fb:2c:ea:63:fb:10:1d:a9:fa:34:2b:82:
                    6f:fe:30:ac:de:16:cb:99:da:14:cf:4f:fb:e0:52:
                    35:45:52:ec:3f:2e:34:00:d3:e6:98:31:e2:73:dd:
                    e1:4c:80:85:7a:f2:f1:42:69:80:88:f2:4b:1b:fd:
                    ec:8d:0d:0b:99:25:af:e3:f9:35:fd:cc:df:af:ac:
                    36:9f:7b:fa:0f:71:00:e5:fa:2d:81:74:1a:49:48:
                    ac:29:25:ab:f9:4b:05:93:1d:18:7f:c5:f2:32:1e:
                    b2:32:df:f4:eb:a2:97:80:b4:16:48:4d:a2:7e:9e:
                    67:1f:a5:20:67:c9:5e:5b:69:0d:47:b0:1d:06:6a:
                    ba:38:04:88:d1:5e:e1:ed:2f:68:df:f4:2d:5f:9e:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:80:AF:ED:DC:7B:56:54:DA:F6:42:62:6A:6B:1D:D6:C7:6F:15
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32332d3233203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:bc:e5:5c:29:fd:9b:e5:dc:48:dc:85:77:b1:4f:3d:c1:
         b6:db:8d:11:c2:56:fa:04:b9:1a:22:b6:c0:4c:f2:05:f5:89:
         50:77:80:fe:c4:4f:14:05:c5:54:14:df:c9:a0:25:c4:c8:b7:
         e7:05:1b:8c:21:60:ca:bf:6b:cb:50:19:5c:02:03:b1:12:c0:
         0a:b0:73:f4:66:17:4e:4d:54:3e:67:19:6b:aa:5a:93:16:fb:
         d2:a6:ae:6f:db:02:4f:ed:c5:78:7c:95:87:ae:b0:df:ab:14:
         81:00:5e:d5:55:d6:b8:ed:c6:e2:96:76:71:33:68:c9:b1:2e:
         2d:4b:b2:36:8e:0e:2b:03:1a:40:ed:ed:b7:c9:45:5a:78:8e:
         d5:31:0f:72:e7:d9:ad:8d:e2:52:f7:fa:b1:64:b5:1a:b4:2c:
         e8:29:88:9e:7d:bb:54:60:5f:bb:2a:14:73:4f:a1:b3:2f:6a:
         80:e7:63:09:84:22:dc:a9:4c:a4:af:a2:19:89:f0:0a:7f:4d:
         b4:9b:51:40:88:22:b4:c5:69:93:e9:0f:9e:ab:fb:97:f8:54:
         05:a9:10:5b:0f:0c:99:00:17:38:e2:6c:ab:cd:3c:cb:c4:74:
         99:63:61:31:64:4a:a2:45:63:59:53:b0:5d:46:89:28:78:8e:
         f2:42:ea:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:30:14 2025 by rpki-client