Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa
File:                     3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa (raw, json)
Hash identifier:          BGJpahkSl/zIqkgrjRpq1tF4amcinRk9AvMMaggRA7g=
Subject key identifier:   62:9E:E0:A0:DA:C4:D8:7A:6A:57:F1:04:4B:F8:79:26:7C:0F:D2:57
Certificate issuer:       /CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
Certificate serial:       3511CB22ABCCB516B53F2020062FA46CA0FCF392
Authority key identifier: 5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa
Signing time:             Thu 19 Jun 2025 13:57:49 +0000
ROA not before:           Thu 19 Jun 2025 13:52:49 +0000
ROA not after:            Thu 18 Jun 2026 13:57:49 +0000
asID:                     265394
IP address blocks:        168.194.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 10:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:11:cb:22:ab:cc:b5:16:b5:3f:20:20:06:2f:a4:6c:a0:fc:f3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
        Validity
            Not Before: Jun 19 13:52:49 2025 GMT
            Not After : Jun 18 13:57:49 2026 GMT
        Subject: CN=629EE0A0DAC4D87A6A57F1044BF879267C0FD257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:16:43:5a:55:6d:3c:ab:b0:67:9d:cf:e0:
                    9d:28:06:04:3e:82:92:1b:e1:b9:23:eb:d5:5d:19:
                    07:23:ad:3a:28:17:6c:47:94:57:5f:ca:16:64:ce:
                    7a:af:be:af:b1:49:72:1b:59:1e:4d:1e:a0:97:0f:
                    e9:24:5c:04:22:2a:55:95:8c:a1:9c:81:bf:e2:2f:
                    db:5a:ce:38:76:06:5a:8d:3f:59:2e:0c:db:31:c4:
                    ca:ef:74:fe:8c:79:8d:4a:cb:07:87:72:0a:92:92:
                    94:ad:be:a9:3b:79:69:9c:e3:f0:ea:c9:3d:f9:dd:
                    f3:31:47:0f:2e:ba:0e:53:3b:0d:08:b1:5b:bc:20:
                    6f:29:28:dc:cb:d1:3f:08:e3:be:34:72:ad:c5:02:
                    62:20:87:af:8a:7c:51:18:b6:54:61:72:a1:88:2f:
                    3e:01:0c:79:62:6f:96:5b:b4:3f:80:40:33:e0:c8:
                    59:d0:b4:15:e8:2c:c1:cd:dc:03:13:cf:f1:b2:ff:
                    f9:b7:90:f1:16:29:56:08:de:dc:49:bc:4a:25:69:
                    a0:04:2e:89:a9:36:6a:6f:f4:e3:56:c5:54:c9:63:
                    39:43:f4:bd:f8:34:80:83:fb:e6:3f:f2:79:56:4f:
                    48:b7:92:88:b4:96:82:81:e1:bd:75:12:44:81:43:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:E0:A0:DA:C4:D8:7A:6A:57:F1:04:4B:F8:79:26:7C:0F:D2:57
            X509v3 Authority Key Identifier:
                keyid:5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:13:45:99:8a:d2:00:4f:c7:af:56:db:c3:63:05:e6:8d:
         1a:65:ab:77:ae:05:75:6b:e4:f6:86:3f:b1:6d:0e:27:92:d9:
         89:fe:b1:b7:b1:7e:ba:46:6a:8b:94:7f:7b:f4:10:14:bf:e6:
         8c:d0:ee:fd:e9:da:9e:4b:9f:63:ec:9c:d8:a8:b2:7e:2a:36:
         ad:df:20:37:82:6e:a5:a6:ea:5a:d1:89:a9:77:98:87:4e:4d:
         94:bc:3b:6c:41:df:07:0a:d7:3f:0f:a8:30:58:f6:82:bd:31:
         5d:fb:92:65:ae:a3:bf:f4:c0:f1:c7:9d:dc:6f:9a:6e:1a:d2:
         9b:15:3b:ec:d3:03:fc:3f:43:4d:03:f1:ec:fa:9f:61:83:17:
         73:49:e7:34:0d:8d:43:e6:5d:bf:fb:10:c2:1c:da:bf:6b:9c:
         cb:b6:78:c1:b3:93:6f:e2:0c:cc:ab:f1:57:43:84:f6:41:8d:
         71:0d:db:f5:61:37:42:53:63:c5:68:c1:bc:71:bf:e9:6b:9f:
         e3:c5:24:2b:83:2b:53:da:30:31:94:b2:48:9d:57:4f:b0:4b:
         e6:c8:9f:d7:2b:8b:9a:6e:6c:83:cc:fa:47:f0:41:07:81:4b:
         fb:a4:30:7c:33:9d:5f:02:18:f4:55:9f:ba:1f:4c:f3:79:7a:
         4b:a3:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:02:57 2025 by rpki-client