Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa
File:                     3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa (raw, json)
Hash identifier:          RppR5ZCLAxJXL/O1MiovNSTpBnuyJAIqz9xl0buX8+I=
Subject key identifier:   FD:0A:62:25:55:57:90:F6:57:E8:25:4C:D2:BF:C7:26:AB:2F:A6:45
Certificate issuer:       /CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
Certificate serial:       7BA1D3E981D04ECC66D2D5A088346B7C7FA61735
Authority key identifier: 5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa
Signing time:             Thu 19 Jun 2025 13:57:53 +0000
ROA not before:           Thu 19 Jun 2025 13:52:53 +0000
ROA not after:            Thu 18 Jun 2026 13:57:53 +0000
asID:                     265394
IP address blocks:        168.194.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 10:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a1:d3:e9:81:d0:4e:cc:66:d2:d5:a0:88:34:6b:7c:7f:a6:17:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
        Validity
            Not Before: Jun 19 13:52:53 2025 GMT
            Not After : Jun 18 13:57:53 2026 GMT
        Subject: CN=FD0A6225555790F657E8254CD2BFC726AB2FA645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:d1:38:15:23:50:92:39:81:0d:d4:2c:3e:
                    b8:69:d4:6f:78:c5:e6:9f:d1:1b:c6:33:fa:97:ab:
                    90:3b:33:14:ae:34:bc:3a:96:7a:95:5f:f5:26:15:
                    2d:45:13:ca:fe:a3:ce:1e:37:64:ef:d5:36:d6:b1:
                    b6:42:c3:90:bf:32:11:89:ed:cb:79:fa:b6:72:86:
                    cc:7f:aa:00:dc:eb:de:64:42:4a:21:0e:b6:11:dd:
                    9c:23:16:6c:da:ed:1c:16:3c:37:2b:1e:70:cf:d2:
                    f1:49:98:9b:6e:1d:39:97:71:c3:62:f5:4e:18:43:
                    e8:6b:e4:47:25:d2:2e:31:28:d8:6b:97:6b:bc:22:
                    ae:c8:60:2e:6d:49:96:df:ae:87:06:e4:f8:da:ba:
                    aa:87:82:c1:a8:66:d0:39:d1:93:88:f3:ac:d4:62:
                    61:7b:1c:14:ca:e8:c1:f9:e8:db:d5:0d:cb:a1:93:
                    d9:c5:9f:f6:01:80:42:04:c1:63:e8:a5:e9:e2:c5:
                    0f:8d:a3:c7:4d:37:5d:61:85:dc:dc:5c:49:a0:a8:
                    3c:91:f6:5c:07:29:66:f5:e6:6c:1f:9e:d9:59:b5:
                    92:e9:a7:10:34:14:74:cf:91:47:09:30:f4:62:86:
                    a8:10:6b:45:8e:e3:b1:40:19:e1:eb:59:28:ee:bc:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:62:25:55:57:90:F6:57:E8:25:4C:D2:BF:C7:26:AB:2F:A6:45
            X509v3 Authority Key Identifier:
                keyid:5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32332d3233203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:19:12:6a:b1:c3:d3:50:36:64:78:7b:d1:52:c3:35:89:03:
         93:80:70:14:3e:2d:e1:2c:30:9e:f3:9f:04:46:fc:f4:c7:01:
         13:89:77:83:45:ee:c0:2b:20:19:f1:e7:14:ce:cc:7d:53:dc:
         35:43:21:70:ad:1f:84:66:ec:68:5e:86:83:c9:3c:09:92:22:
         84:84:1c:e9:04:ea:2c:1e:37:5d:ce:ae:b7:8e:b6:f8:7e:80:
         2f:1b:15:cb:b6:e3:de:44:a2:3a:9b:7a:f7:da:94:57:c8:7d:
         7f:4c:83:29:90:fb:01:20:64:4d:b7:7f:5d:a0:49:ce:04:1a:
         3e:c1:78:67:2e:b0:9e:8b:ec:61:bb:44:23:cb:b9:3c:ff:85:
         76:b2:74:93:68:7f:83:d6:9e:2b:d8:a0:97:6e:e8:b6:d8:98:
         dc:e6:19:c6:26:19:0e:cb:5d:c8:52:18:c2:5a:31:3f:dc:6f:
         f6:24:89:6e:a6:04:ca:3e:f1:50:7d:50:e8:65:f9:78:ce:25:
         86:c9:0e:e9:8a:54:45:56:58:c6:fc:d9:9b:37:75:32:2e:29:
         e3:17:06:8a:7a:2c:3a:69:7a:0a:a3:33:9f:05:1e:22:d3:c9:
         a4:85:6f:d2:71:95:cc:33:b3:45:4a:ec:70:5c:e5:91:9a:15:
         8d:ba:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:02:14 2025 by rpki-client