Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
File:                     3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (raw, json)
Hash identifier:          cCj8J8Y1DIuOO0G8E20odz5e6rjj7fSQSRqQ0oqTUwo=
Subject key identifier:   37:16:C0:9F:69:04:C5:2B:30:22:04:9F:B8:12:E0:31:8D:2A:B6:B8
Certificate issuer:       /CN=271B7B9EF1C84576BCE80407BDABE78827D18EED
Certificate serial:       13C23C4D2D2E8AD8FCDE971AA6D03CD3BBCB35CF
Authority key identifier: 27:1B:7B:9E:F1:C8:45:76:BC:E8:04:07:BD:AB:E7:88:27:D1:8E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/271B7B9EF1C84576BCE80407BDABE78827D18EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
Signing time:             Fri 04 Apr 2025 10:15:54 +0000
ROA not before:           Fri 04 Apr 2025 10:10:54 +0000
ROA not after:            Fri 03 Apr 2026 10:15:54 +0000
asID:                     262469
IP address blocks:        168.196.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/271B7B9EF1C84576BCE80407BDABE78827D18EED.crl
                          rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/271B7B9EF1C84576BCE80407BDABE78827D18EED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/271B7B9EF1C84576BCE80407BDABE78827D18EED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c2:3c:4d:2d:2e:8a:d8:fc:de:97:1a:a6:d0:3c:d3:bb:cb:35:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271B7B9EF1C84576BCE80407BDABE78827D18EED
        Validity
            Not Before: Apr  4 10:10:54 2025 GMT
            Not After : Apr  3 10:15:54 2026 GMT
        Subject: CN=3716C09F6904C52B3022049FB812E0318D2AB6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:43:87:34:9f:fb:cd:6d:7d:ce:9d:0d:70:
                    b5:4b:94:74:92:bc:63:76:25:56:77:da:c1:dd:c7:
                    c0:95:87:51:d9:6e:77:e4:18:14:f1:2f:c3:a3:ce:
                    a6:d6:ec:94:bd:38:0e:62:68:65:53:be:1e:02:de:
                    1e:c9:27:66:0f:b0:e3:ad:e6:f2:3b:26:71:c1:7d:
                    e2:de:12:c5:39:d8:ff:17:c4:26:a0:ab:1f:b0:66:
                    5c:49:a8:12:11:d0:44:9e:b2:78:af:51:eb:b0:63:
                    fe:dd:5d:44:79:0d:f0:2a:d5:8e:8f:57:94:15:99:
                    a7:33:8f:8a:3a:64:18:77:2d:58:f5:6b:71:0f:91:
                    a1:64:4e:14:04:d3:e1:ae:38:f1:7b:98:ca:08:4f:
                    e0:df:12:55:e7:35:7b:cd:68:7d:b6:07:73:c3:45:
                    b6:09:19:09:bf:36:b6:93:5a:f2:56:f6:61:90:c7:
                    bf:d0:ce:83:dc:03:aa:0a:04:da:4d:5f:00:b9:9f:
                    42:c1:b6:8d:2a:27:e4:4e:d9:8a:db:71:03:85:84:
                    c7:46:d9:d3:d4:66:8a:e6:30:0b:97:44:fe:d5:56:
                    fc:d8:9c:ea:a2:5c:d8:6e:5a:52:c9:70:8e:0a:74:
                    2a:3d:ac:d3:96:04:6f:a6:1d:0f:32:26:95:c3:9b:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:C0:9F:69:04:C5:2B:30:22:04:9F:B8:12:E0:31:8D:2A:B6:B8
            X509v3 Authority Key Identifier:
                keyid:27:1B:7B:9E:F1:C8:45:76:BC:E8:04:07:BD:AB:E7:88:27:D1:8E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/271B7B9EF1C84576BCE80407BDABE78827D18EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/271B7B9EF1C84576BCE80407BDABE78827D18EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:1c:99:57:e8:5a:b2:1b:93:8e:2d:b1:67:0c:e2:94:13:
         21:32:ef:bb:89:37:38:48:f7:2b:a4:e5:f4:fa:1b:20:90:f5:
         61:e7:ea:8c:93:2e:dd:6d:3b:29:b4:25:f5:3c:5a:7b:87:82:
         d4:55:7c:c7:ed:b2:ac:88:1e:0e:80:51:3c:d2:fe:49:bf:66:
         20:d7:33:59:21:02:a6:7f:3c:c0:5a:da:06:8d:e6:fd:4f:2d:
         88:20:4c:c7:c3:c3:d2:38:41:ec:b7:d3:46:55:f2:95:59:34:
         49:f2:35:80:85:7a:24:72:90:0d:d4:0d:44:77:09:ad:0b:6d:
         6b:c6:81:17:c9:ef:66:8c:34:54:15:98:7a:cb:47:c8:a5:80:
         dc:09:f9:7c:93:ec:93:ec:a2:fc:37:ff:ed:7e:9a:57:a8:c1:
         47:38:6f:80:a7:7f:2b:c4:77:a8:e9:0d:aa:97:ff:40:30:8f:
         dd:c6:c4:57:21:f8:76:59:16:eb:6a:65:08:0f:86:ca:20:ee:
         88:19:1f:63:7a:5b:97:28:9c:27:d6:0b:40:31:18:dd:e5:c2:
         84:34:95:d8:a4:06:ae:e4:3b:ff:e9:65:cf:8a:c8:de:97:0d:
         92:5a:1c:30:fd:b9:2b:7d:22:91:e5:29:22:7f:8d:88:f2:e9:
         f5:3e:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:05:07 2025 by rpki-client