Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32332d3233203d3e20323632393838.roa
File:                     3136382e39302e38302e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          zVCB6dVdn2yPPhbCDG7MmgJX6sMwDzMhDL4liaJDhWk=
Subject key identifier:   73:13:11:1F:7A:DA:DD:29:FA:BF:E1:D9:81:C8:98:E4:4A:98:1C:6D
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       274C63EBBA35699EB3133D55F1A1691A1BD38E17
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32332d3233203d3e20323632393838.roa
Signing time:             Thu 12 Jun 2025 12:57:49 +0000
ROA not before:           Thu 12 Jun 2025 12:52:49 +0000
ROA not after:            Thu 11 Jun 2026 12:57:49 +0000
asID:                     262988
IP address blocks:        168.90.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 19:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:63:eb:ba:35:69:9e:b3:13:3d:55:f1:a1:69:1a:1b:d3:8e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jun 12 12:52:49 2025 GMT
            Not After : Jun 11 12:57:49 2026 GMT
        Subject: CN=7313111F7ADADD29FABFE1D981C898E44A981C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:94:d2:51:1f:ce:e1:03:be:18:9e:d2:0d:
                    56:e4:88:77:67:6c:ff:3b:8d:19:ec:32:33:04:f4:
                    b0:08:d9:58:95:64:84:be:9f:16:23:9a:c3:c6:47:
                    94:2e:02:f6:93:3c:66:d5:5b:3a:6f:b2:f3:d6:85:
                    3a:dc:fa:9e:70:36:ea:30:a9:b8:7a:9b:0f:3d:bb:
                    d5:61:ec:28:c7:91:7d:a0:fa:4f:38:fb:e8:22:41:
                    e1:0e:ee:20:d1:4a:9d:f1:60:be:e8:fd:24:ec:26:
                    36:b0:67:24:49:0a:b7:21:a1:a1:9a:67:5a:b5:21:
                    12:17:e6:d6:12:7c:96:49:e0:a6:1c:ae:52:30:b4:
                    9f:c8:48:a4:64:28:df:ca:84:9b:98:dc:a6:8b:d0:
                    ce:6a:ee:de:98:78:4b:37:3c:1b:1b:b2:eb:01:a7:
                    b7:4a:aa:69:0c:f8:1c:6c:c0:cf:fd:53:52:95:fa:
                    29:ad:0d:c5:9e:c5:49:85:c2:de:c3:be:57:ef:48:
                    05:99:1f:4e:49:4e:2b:ba:20:05:c0:f1:4a:27:70:
                    0a:1a:2d:99:94:c8:a0:79:58:d6:ce:ea:6d:2a:5e:
                    c7:b0:6c:30:ad:00:5f:83:cc:ea:32:2f:2a:f2:03:
                    c5:5f:83:35:28:f2:68:30:25:2f:08:0c:8b:5d:f9:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:13:11:1F:7A:DA:DD:29:FA:BF:E1:D9:81:C8:98:E4:4A:98:1C:6D
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:f3:fa:4a:04:0c:0a:16:01:51:19:5c:e9:bc:d6:0e:61:
         7a:09:57:fb:f2:5f:9d:7f:46:ce:80:fb:52:60:c9:c1:72:11:
         dd:1b:09:e8:45:da:41:1e:1a:0d:bd:9e:42:b8:ed:f4:ab:19:
         2a:1d:2f:d1:04:c8:13:25:95:84:fa:c6:c6:8c:57:fe:5c:77:
         39:73:a8:39:f6:ff:c2:c1:8a:6b:1f:6b:60:76:2f:db:fc:5c:
         13:8c:8a:86:36:90:3c:13:f4:c3:7b:81:63:ec:30:9d:70:ac:
         d5:8a:ad:e6:cf:4c:6a:eb:69:7c:60:86:b7:03:33:8c:f1:ee:
         5d:ec:23:dc:cf:75:5c:b8:b1:7c:06:7a:31:d1:0c:5c:f2:43:
         b5:6e:ff:32:32:70:b9:f0:f2:15:f3:1f:5d:20:6b:35:85:69:
         27:14:2f:8b:51:0c:cf:1c:1f:98:d1:98:2c:54:e4:83:8b:78:
         da:86:7a:14:01:eb:4f:a9:c2:cc:20:fd:9a:98:b7:0d:c8:cc:
         12:07:86:da:2e:18:ae:2f:ba:72:8c:1c:fd:b1:70:b8:5f:2a:
         79:7b:dd:52:91:c3:a0:95:29:4b:e6:d6:48:1a:50:5e:22:23:
         99:68:fe:57:2a:6e:9d:1d:ec:77:60:45:85:df:80:a1:17:1b:
         ee:17:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:18:16 2025 by rpki-client