Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa
File:                     3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (raw, json)
Hash identifier:          bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=
Subject key identifier:   CD:2E:A8:96:D2:B3:25:49:AC:B3:A5:AD:72:1F:B2:5A:39:25:E8:27
Certificate issuer:       /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Certificate serial:       0D2FED826DC190A0A81C1A052BBE62831C75383E
Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa
Signing time:             Wed 11 Jun 2025 17:26:23 +0000
ROA not before:           Wed 11 Jun 2025 17:21:23 +0000
ROA not after:            Wed 10 Jun 2026 17:26:23 +0000
asID:                     263140
IP address blocks:        168.205.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
                          rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 02:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2f:ed:82:6d:c1:90:a0:a8:1c:1a:05:2b:be:62:83:1c:75:38:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
        Validity
            Not Before: Jun 11 17:21:23 2025 GMT
            Not After : Jun 10 17:26:23 2026 GMT
        Subject: CN=CD2EA896D2B32549ACB3A5AD721FB25A3925E827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:8c:dc:76:30:df:98:a7:54:57:54:d3:10:
                    84:b1:77:00:f6:a0:bd:e8:ad:5d:82:05:60:46:4a:
                    42:08:c1:a6:c9:d1:b7:e1:a9:6a:6f:70:62:5f:d7:
                    c7:25:b3:98:09:c8:9e:8f:f9:eb:75:ae:84:c9:2c:
                    7c:63:81:ed:2a:57:e4:84:d9:b6:2e:4f:70:d7:99:
                    b7:9b:f8:83:1e:7a:69:f4:15:88:63:1d:03:56:21:
                    61:e4:0c:db:9d:24:f1:46:ac:1d:0c:aa:e7:64:cc:
                    58:80:31:35:c8:7d:54:15:a3:e7:ca:8b:ad:66:9d:
                    97:4e:8e:90:50:67:79:71:db:d1:1b:5b:3a:11:8c:
                    04:07:03:0a:8e:83:4e:11:63:0c:51:48:66:88:e4:
                    f5:0a:3a:f2:a6:3d:e5:7b:ca:8d:56:55:93:42:be:
                    a6:cd:fb:ed:f4:6c:b6:ca:cc:0f:33:c9:0a:e5:25:
                    36:b1:2d:74:18:e9:63:36:3c:7b:55:f0:4e:15:5d:
                    5f:fc:8f:d0:b9:0e:0b:93:81:5e:6b:cc:3c:82:58:
                    90:03:ff:b2:66:8f:4e:a4:c3:e5:6a:f2:3f:ca:a6:
                    04:1e:62:83:9c:5c:d7:b8:43:bf:03:1d:08:9e:27:
                    04:69:a0:27:7c:b0:2d:24:ff:50:11:3d:07:1d:45:
                    a5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:A8:96:D2:B3:25:49:AC:B3:A5:AD:72:1F:B2:5A:39:25:E8:27
            X509v3 Authority Key Identifier:
                keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:72:69:ff:f5:37:ee:8f:9f:90:33:b7:97:28:52:89:ab:
         78:2c:7e:f2:81:17:8c:6b:bb:66:9f:cf:17:07:17:df:30:23:
         43:ff:c9:cb:2c:c6:04:94:90:c3:03:a9:dc:b3:74:b2:2b:d4:
         24:30:a7:bb:fd:82:72:d0:99:2a:73:ac:9f:ec:79:4c:9c:4e:
         2e:e3:41:71:9e:fe:b6:48:b7:fd:11:a5:2b:82:7c:52:13:dd:
         f0:bb:8f:9a:82:80:0e:07:26:88:5c:83:6e:cc:76:d7:0f:3b:
         45:00:02:39:ff:6e:55:ca:e8:70:7a:c9:20:85:a5:22:70:63:
         e7:10:22:ca:b0:60:cd:70:ea:a9:20:78:08:a7:6e:16:e4:10:
         64:5a:bf:21:ff:8a:62:9e:65:41:38:e9:8e:67:eb:9f:e7:bc:
         13:d9:91:70:ad:da:8c:5d:43:32:d2:78:30:bd:9b:86:13:e4:
         30:c7:fc:65:d0:1c:16:3b:d4:e8:64:42:bb:95:13:73:ad:8f:
         a3:5c:c5:b1:0e:5b:7b:7d:6f:e9:ff:23:41:6a:1b:15:46:5b:
         ad:e3:43:1d:0e:af:43:77:70:a3:0f:9c:b3:50:a6:e4:4d:ff:
         6c:3f:76:d4:ef:39:7b:f2:c1:ec:0b:28:b3:cd:75:3a:89:a2:
         c1:07:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 11:16:13 2025 by rpki-client