Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32342e302f32332d3233203d3e20323635323934.roa
File:                     3136382e3132312e32342e302f32332d3233203d3e20323635323934.roa (raw, json)
Hash identifier:          1Rq3BeniLGM9YNiG+x1N3uy+tOR4w5ko57/HfN7ZaLI=
Subject key identifier:   0F:A5:B4:84:38:56:7A:83:39:A2:20:9A:40:39:E6:FB:ED:B4:E5:57
Certificate issuer:       /CN=C6097CB6BD5F2601D6B32994C5DA4AD5568AB473
Certificate serial:       3538EF5B6E40C23DC96F967F1DAC3F1D2A2B545B
Authority key identifier: C6:09:7C:B6:BD:5F:26:01:D6:B3:29:94:C5:DA:4A:D5:56:8A:B4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32342e302f32332d3233203d3e20323635323934.roa
Signing time:             Tue 17 Jun 2025 11:26:37 +0000
ROA not before:           Tue 17 Jun 2025 11:21:37 +0000
ROA not after:            Tue 16 Jun 2026 11:26:37 +0000
asID:                     265294
IP address blocks:        168.121.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 17:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:ef:5b:6e:40:c2:3d:c9:6f:96:7f:1d:ac:3f:1d:2a:2b:54:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6097CB6BD5F2601D6B32994C5DA4AD5568AB473
        Validity
            Not Before: Jun 17 11:21:37 2025 GMT
            Not After : Jun 16 11:26:37 2026 GMT
        Subject: CN=0FA5B48438567A8339A2209A4039E6FBEDB4E557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:24:ce:8e:67:40:4e:63:47:b4:c1:29:9d:
                    59:ed:37:42:2f:21:d5:56:d2:22:68:3c:1d:19:cf:
                    72:e6:bd:b8:9a:25:a5:f3:b3:19:11:03:57:dd:92:
                    a7:09:58:a8:dd:14:27:25:bc:04:f8:5f:7a:2e:dd:
                    02:cb:5f:62:48:6b:1c:4e:69:e7:43:dc:47:f8:fe:
                    f5:e3:0f:25:f5:1e:cd:9e:a2:1b:26:cb:37:a7:f5:
                    6f:0a:c7:6f:09:89:c2:a1:45:8d:ba:95:69:d1:c6:
                    7e:da:72:27:c7:ae:bc:51:c3:11:34:d1:79:97:9c:
                    8f:f7:57:3c:36:58:0e:d2:5a:8c:6e:23:4c:83:92:
                    f1:43:1c:43:c2:21:80:45:77:c3:0d:74:8e:67:58:
                    70:a1:5f:53:73:fa:f4:ec:af:7d:26:8a:90:ac:49:
                    49:94:06:e5:b0:bf:69:39:2f:0d:52:72:bd:13:72:
                    e6:fc:79:bc:29:d6:02:89:a2:c0:98:c0:d1:97:ad:
                    eb:0a:88:44:58:c7:ea:a0:f9:55:af:19:48:9f:45:
                    c0:49:82:21:ce:4d:7a:c3:dd:a4:bf:2a:13:82:97:
                    fb:e7:b6:c2:5a:88:aa:8b:9b:83:9c:9b:70:1b:d5:
                    9a:ed:74:16:60:a4:da:de:7f:75:69:cf:c8:97:2d:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:B4:84:38:56:7A:83:39:A2:20:9A:40:39:E6:FB:ED:B4:E5:57
            X509v3 Authority Key Identifier:
                keyid:C6:09:7C:B6:BD:5F:26:01:D6:B3:29:94:C5:DA:4A:D5:56:8A:B4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/3136382e3132312e32342e302f32332d3233203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:21:44:de:5f:65:7a:9a:a6:13:df:80:6f:52:40:15:c7:bf:
         68:da:a4:a9:ad:dc:61:c3:93:12:4c:17:39:87:9d:12:fe:1e:
         f9:db:85:d1:31:13:2b:0e:60:0b:05:03:d0:55:ab:1b:ed:36:
         5e:f0:be:67:35:ff:62:8e:e1:b6:d7:6d:9f:44:d5:19:b0:db:
         5b:79:64:03:1e:ef:91:a8:63:8b:b3:d3:9e:d2:9f:c2:61:19:
         e5:66:0e:af:c6:f8:97:95:e3:75:b8:e2:3d:cf:d6:a2:a6:01:
         2d:1e:55:36:fd:87:d4:3d:83:1e:00:ba:ab:e8:11:81:96:56:
         3d:82:67:ee:6a:a2:91:f2:6b:45:fe:65:77:d4:f1:39:e7:26:
         4e:a9:28:85:da:9e:33:b8:65:bc:af:94:2a:79:f9:38:04:7e:
         16:b3:63:fa:64:1f:12:af:4c:be:e5:54:13:a7:ba:f4:e9:75:
         58:86:8e:59:d3:99:b3:3d:f3:ab:aa:cd:59:fa:c6:a7:bd:81:
         36:6a:e6:25:4f:05:84:31:0c:3a:aa:e5:b8:59:39:80:fb:16:
         b2:52:f8:e6:55:a5:26:bf:0e:d9:85:89:37:2f:f4:a5:b6:5b:
         fd:9a:7e:45:91:b9:49:77:e2:4c:ae:3e:ff:e9:56:30:17:ac:
         62:ec:e3:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNTjvW25Awj3Jb5Z/Haw/HSorVFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYwOTdDQjZCRDVGMjYwMUQ2QjMyOTk0QzVEQTRBRDU1
NjhBQjQ3MzAeFw0yNTA2MTcxMTIxMzdaFw0yNjA2MTYxMTI2MzdaMDMxMTAvBgNV
BAMTKDBGQTVCNDg0Mzg1NjdBODMzOUEyMjA5QTQwMzlFNkZCRURCNEU1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0yTOjmdATmNHtMEpnVntN0Iv
IdVW0iJoPB0Zz3LmvbiaJaXzsxkRA1fdkqcJWKjdFCclvAT4X3ou3QLLX2JIaxxO
aedD3Ef4/vXjDyX1Hs2eohsmyzen9W8Kx28JicKhRY26lWnRxn7acifHrrxRwxE0
0XmXnI/3Vzw2WA7SWoxuI0yDkvFDHEPCIYBFd8MNdI5nWHChX1Nz+vTsr30mipCs
SUmUBuWwv2k5Lw1Scr0Tcub8ebwp1gKJosCYwNGXresKiERYx+qg+VWvGUifRcBJ
giHOTXrD3aS/KhOCl/vntsJaiKqLm4Ocm3Ab1ZrtdBZgpNref3Vpz8iXLZGDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUD6W0hDhWeoM5oiCaQDnm++205VcwHwYDVR0j
BBgwFoAUxgl8tr1fJgHWsymUxdpK1VaKtHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0YydVRLMjN4U25kdFpheW91VHhRVHlVODFzTnVHVXM4RTlETFpzRVN0
c3QvMC9DNjA5N0NCNkJENUYyNjAxRDZCMzI5OTRDNURBNEFENTU2OEFCNDczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2MDk3Q0I2QkQ1RjI2MDFE
NkIzMjk5NEM1REE0QUQ1NTY4QUI0NzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdGMnVUSzIzeFNuZHRaYXlvdVR4UVR5VTgxc051R1VzOEU5RExac0VTdHN0LzAv
MzEzNjM4MmUzMTMyMzEyZTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoeRgwDQYJKoZIhvcNAQELBQADggEBABEhRN5f
ZXqaphPfgG9SQBXHv2japKmt3GHDkxJMFzmHnRL+HvnbhdExEysOYAsFA9BVqxvt
Nl7wvmc1/2KO4bbXbZ9E1Rmw21t5ZAMe75GoY4uz057Sn8JhGeVmDq/G+JeV43W4
4j3P1qKmAS0eVTb9h9Q9gx4AuqvoEYGWVj2CZ+5qopHya0X+ZXfU8TnnJk6pKIXa
njO4ZbyvlCp5+TgEfhazY/pkHxKvTL7lVBOnuvTpdViGjlnTmbM986uqzVn6xqe9
gTZq5iVPBYQxDDqq5bhZOYD7FrJS+OZVpSa/DtmFiTcv9KW2W/2afkWRuUl34kyu
Pv/pVjAXrGLs4wk=
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:00:25 2025 by rpki-client