Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
File:                     3136382e3232382e34302e302f32322d3332203d3e203631373531.roa (raw, json)
Hash identifier:          k2dNZ/uMKrR2A935HV2JI2jH/943jXieb4KZNLuXbSo=
Subject key identifier:   8E:39:75:B8:0F:E8:61:F1:87:70:34:17:03:A8:A1:12:6C:6F:C1:A6
Certificate issuer:       /CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB
Certificate serial:       4E62A01CE4AB5AED4674D496F3FFB55033531F65
Authority key identifier: 6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
Signing time:             Mon 16 Jun 2025 17:58:09 +0000
ROA not before:           Mon 16 Jun 2025 17:53:09 +0000
ROA not after:            Mon 15 Jun 2026 17:58:09 +0000
asID:                     61751
IP address blocks:        168.228.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl
                          rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 09:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:62:a0:1c:e4:ab:5a:ed:46:74:d4:96:f3:ff:b5:50:33:53:1f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB
        Validity
            Not Before: Jun 16 17:53:09 2025 GMT
            Not After : Jun 15 17:58:09 2026 GMT
        Subject: CN=8E3975B80FE861F18770341703A8A1126C6FC1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:6a:e9:76:43:97:f1:ad:8b:e0:35:85:d6:
                    f0:bd:2f:ef:9a:9d:ee:fa:3c:df:6e:8f:af:10:cc:
                    f6:45:86:47:4b:8f:f5:79:c7:8c:cd:12:a3:3f:c6:
                    51:46:ca:3a:4b:d1:af:35:fc:e0:ef:ed:64:6a:09:
                    a0:6f:ff:3c:87:b7:d1:bf:0c:1c:bd:39:80:6d:16:
                    70:7d:b2:e5:5b:9f:b5:5c:20:33:05:58:25:da:6d:
                    2b:96:85:d7:bd:07:25:66:af:ef:bf:03:b6:dd:82:
                    10:12:45:e6:47:f3:1a:cd:ab:c6:4a:72:a9:be:f1:
                    91:ab:b4:27:91:e6:f1:78:41:ef:54:75:97:be:cf:
                    15:67:5c:19:5c:0a:c9:d7:51:5b:01:4a:8b:14:db:
                    c0:5b:e6:c0:45:b6:40:88:88:d5:9b:64:5e:fa:ad:
                    6c:d4:64:83:a9:a3:3d:b7:da:ea:72:66:65:d5:1e:
                    81:71:0d:0e:03:87:c0:21:b3:ac:ed:45:16:2b:f5:
                    5a:34:4f:d8:3e:f7:b7:4e:f1:f8:5f:0f:c3:ca:83:
                    c0:e5:59:7f:93:91:56:bc:9d:c5:40:83:aa:e8:ff:
                    6f:ed:64:20:b9:e8:12:3c:ac:be:a2:a8:cd:a5:e9:
                    6b:be:87:ba:45:77:45:de:31:35:2d:d3:8e:f7:f4:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:75:B8:0F:E8:61:F1:87:70:34:17:03:A8:A1:12:6C:6F:C1:A6
            X509v3 Authority Key Identifier:
                keyid:6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:7c:83:c9:37:2c:92:ad:30:71:41:d2:13:f1:85:af:e7:
         e0:e3:73:36:84:de:dc:f0:a5:a5:73:5f:5c:37:3d:dc:9e:b7:
         83:41:9c:86:d7:df:48:2a:b3:f2:eb:1b:81:f4:fa:17:85:d9:
         2c:e9:4e:99:28:7c:b4:d4:09:91:69:10:40:ee:ef:df:88:53:
         80:3e:c9:ac:ee:5b:f9:87:6d:95:08:23:0d:44:39:91:40:b7:
         e9:f1:8b:55:11:11:23:b1:22:1b:0b:cd:e4:aa:ec:1c:b5:26:
         66:63:d6:47:d9:72:33:b9:92:05:3c:87:91:59:e2:b5:30:74:
         32:43:a6:a1:bc:b6:4d:89:37:a9:2c:27:f7:60:aa:71:17:73:
         bb:21:bd:f8:3f:d9:5a:f2:fe:be:43:87:fc:3b:39:83:ec:ca:
         6e:e9:e8:15:41:d8:f7:d4:81:37:4a:b2:07:0d:7c:34:f2:4a:
         65:5c:62:94:97:1a:39:03:52:57:95:b4:01:5f:78:0b:06:7f:
         13:98:4e:4e:22:71:90:f7:f7:9f:c6:2b:f8:80:cc:95:15:a0:
         a8:77:02:6f:f9:98:25:94:ad:bf:b9:3f:bb:05:a2:af:b4:9d:
         39:b7:e2:a5:0f:69:cf:4d:1c:68:fb:01:19:e3:48:0b:db:38:
         40:04:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:56:43 2025 by rpki-client