Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139342e302f32342d3234203d3e20323635333934.roa
File:                     3136382e3139342e3139342e302f32342d3234203d3e20323635333934.roa (raw, json)
Hash identifier:          JAJ7h0O7d6iRxZLdrVTHrbBpe5YNpauUhYynqUbqjaM=
Subject key identifier:   35:C5:48:D3:A0:54:5A:BF:6A:39:7D:A8:4E:44:2D:EC:21:50:7F:2B
Certificate issuer:       /CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
Certificate serial:       3B4CD75FE5FF32C3CE10D239648ABD00410A4C89
Authority key identifier: 5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139342e302f32342d3234203d3e20323635333934.roa
Signing time:             Thu 19 Jun 2025 13:57:49 +0000
ROA not before:           Thu 19 Jun 2025 13:52:49 +0000
ROA not after:            Thu 18 Jun 2026 13:57:49 +0000
asID:                     265394
IP address blocks:        168.194.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4c:d7:5f:e5:ff:32:c3:ce:10:d2:39:64:8a:bd:00:41:0a:4c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
        Validity
            Not Before: Jun 19 13:52:49 2025 GMT
            Not After : Jun 18 13:57:49 2026 GMT
        Subject: CN=35C548D3A0545ABF6A397DA84E442DEC21507F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:4b:e6:23:52:f7:82:64:b9:5b:45:c6:02:
                    30:b5:e4:fc:01:04:90:86:c4:45:19:57:93:68:fd:
                    4b:db:50:76:1b:92:9f:a9:db:92:ff:72:83:a5:a3:
                    21:58:6c:64:c2:dd:e7:01:0f:ab:32:c2:c3:65:b8:
                    1f:94:8b:59:5f:1e:3b:3f:1a:3c:e2:9a:35:9a:44:
                    48:dd:2b:3b:df:9d:0a:54:21:8a:f0:58:ba:db:b5:
                    35:46:c4:9f:70:95:63:02:3e:73:3c:2a:3f:2d:e0:
                    de:be:ed:61:6e:43:63:09:ba:db:72:8c:a8:c2:15:
                    18:99:92:e5:b4:24:c7:1e:bb:e7:d1:a5:cd:23:99:
                    97:5c:ad:86:56:29:17:a0:3f:6a:32:1d:65:ca:29:
                    ac:21:3c:26:bd:72:b8:bf:b0:4e:c1:14:e0:7c:d2:
                    dd:8b:5e:cb:84:6b:5d:7b:eb:19:5a:0e:32:07:8d:
                    f5:5b:2f:6b:fb:33:a0:00:d1:3b:a6:7d:ef:6a:2e:
                    d1:dd:a6:30:5f:0a:d1:26:84:17:dc:d9:15:90:55:
                    73:92:8c:12:57:9d:33:65:99:3e:81:f9:25:59:5e:
                    a1:90:1e:dc:4f:8b:35:44:c3:c2:3b:32:79:d8:24:
                    1a:63:12:ee:a7:de:7e:38:e6:e0:e0:34:90:35:62:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C5:48:D3:A0:54:5A:BF:6A:39:7D:A8:4E:44:2D:EC:21:50:7F:2B
            X509v3 Authority Key Identifier:
                keyid:5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139342e302f32342d3234203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0d:5c:71:81:51:4a:30:98:2a:a3:10:4c:0e:82:c0:6b:8d:
         fb:1a:71:f4:68:2d:d0:8a:10:90:6e:bf:e7:f4:d0:ce:1f:96:
         9e:ce:e6:e2:ef:c1:2a:3e:b3:01:40:0a:a5:77:f2:03:a2:e6:
         91:cf:1a:ef:16:9d:18:7f:e2:45:95:5e:f6:14:aa:fe:3a:2b:
         75:91:7c:9f:49:fb:a0:0c:44:df:9d:79:80:a9:34:28:bd:db:
         4f:44:da:a3:95:f3:54:24:db:36:94:12:e9:d8:73:b2:c8:b6:
         ca:09:4c:3b:a2:bf:04:23:9d:10:4a:af:d8:12:48:a8:40:bd:
         e6:cf:df:e2:1c:90:8a:d8:ec:14:9c:97:21:be:15:49:59:62:
         c2:15:13:02:05:0a:83:60:56:a5:a6:e0:2c:d1:04:32:51:17:
         18:75:fc:5c:f3:b9:76:31:76:0f:56:ae:72:85:08:3e:70:fe:
         f6:c2:93:c5:08:18:36:88:e3:ed:93:a0:17:40:b3:ef:32:c2:
         33:5f:16:9b:b8:15:1b:c7:6d:50:07:2a:18:15:c8:de:14:54:
         05:35:e8:3e:61:7c:df:1b:9e:28:68:7c:4f:cd:c9:78:bc:52:
         5b:86:a6:ad:dc:c6:ba:45:b1:94:d8:76:a3:05:8b:cf:bb:32:
         b7:01:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:50:01 2025 by rpki-client