Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa
File:                     3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa (raw, json)
Hash identifier:          H1dRSKAorvOwAQvWdpUijnxX1f3NuYlMBBkoiQBu0Yw=
Subject key identifier:   77:E4:BE:16:90:28:3F:0A:A6:FB:B3:0D:71:B1:FF:D5:2B:68:3F:E7
Certificate issuer:       /CN=F24DECAC389F539CB330015CA81861F55E388016
Certificate serial:       3151DA6ED56A836B6A284A71C683E3A87E6DC072
Authority key identifier: F2:4D:EC:AC:38:9F:53:9C:B3:30:01:5C:A8:18:61:F5:5E:38:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24DECAC389F539CB330015CA81861F55E388016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa
Signing time:             Wed 11 Jun 2025 20:42:03 +0000
ROA not before:           Wed 11 Jun 2025 20:37:03 +0000
ROA not after:            Wed 10 Jun 2026 20:42:03 +0000
asID:                     264862
IP address blocks:        168.181.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/F24DECAC389F539CB330015CA81861F55E388016.crl
                          rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/F24DECAC389F539CB330015CA81861F55E388016.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24DECAC389F539CB330015CA81861F55E388016.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 04:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:51:da:6e:d5:6a:83:6b:6a:28:4a:71:c6:83:e3:a8:7e:6d:c0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24DECAC389F539CB330015CA81861F55E388016
        Validity
            Not Before: Jun 11 20:37:03 2025 GMT
            Not After : Jun 10 20:42:03 2026 GMT
        Subject: CN=77E4BE1690283F0AA6FBB30D71B1FFD52B683FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:b1:5c:ec:e3:93:cf:92:1f:95:55:74:39:
                    e2:65:ea:12:9d:e8:17:8e:70:f2:3b:21:52:58:a9:
                    7f:d5:cc:32:98:a5:26:da:32:5f:38:90:03:c0:9a:
                    ef:08:e2:79:ca:c5:da:81:0e:59:96:e4:5f:df:c9:
                    f6:35:3f:4a:2b:26:37:d5:c9:71:1d:4e:06:bf:c8:
                    bd:8e:8b:55:6e:9b:97:3b:c2:90:5e:df:4d:8d:63:
                    73:41:39:89:f3:83:a1:2a:27:34:99:16:06:90:0f:
                    db:8b:3a:3c:99:28:47:1d:6c:c5:69:8f:ee:6d:12:
                    f7:5b:aa:68:b6:32:65:5d:72:e4:13:2b:e2:c7:3f:
                    94:6b:c1:06:30:68:fc:ec:04:90:57:e8:de:13:af:
                    b2:56:07:2f:6c:26:9d:87:09:29:24:3c:73:7c:0f:
                    f2:e1:16:c6:9e:03:1f:38:72:1c:e8:bf:7c:dc:f9:
                    c6:0a:0a:fb:5a:2e:64:46:32:7a:0f:9f:de:31:c3:
                    5e:90:99:a5:83:83:fa:ad:31:99:79:b1:99:fb:e3:
                    ae:7b:5f:2e:07:7d:a9:55:7e:11:ec:de:4d:37:d3:
                    9e:49:b7:58:6c:2d:d7:89:d9:53:5c:fa:b2:2f:2c:
                    da:b1:cc:26:8d:d1:55:0d:a9:88:12:60:0e:4a:b4:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:BE:16:90:28:3F:0A:A6:FB:B3:0D:71:B1:FF:D5:2B:68:3F:E7
            X509v3 Authority Key Identifier:
                keyid:F2:4D:EC:AC:38:9F:53:9C:B3:30:01:5C:A8:18:61:F5:5E:38:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/F24DECAC389F539CB330015CA81861F55E388016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24DECAC389F539CB330015CA81861F55E388016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:ca:d0:2e:a2:aa:06:0e:b4:5e:30:06:1a:1b:9d:70:07:
         44:2c:e2:8e:55:00:43:75:dc:26:2f:f4:7b:e8:e0:73:0a:a0:
         09:c6:fd:00:f0:25:4d:cd:fb:a1:d1:2b:ec:4d:85:df:81:c4:
         1e:ff:0b:60:0b:6f:2f:20:a9:b5:a2:3d:70:9b:a4:a9:9c:79:
         0a:49:91:30:21:5a:78:ad:f9:d7:21:09:f4:da:43:49:2e:fe:
         d0:8a:a0:f2:48:b7:8c:94:8c:da:34:b6:25:95:b2:87:06:28:
         35:77:2d:3f:da:1e:9d:ed:57:4e:20:a4:01:cd:3f:10:47:e2:
         0c:34:64:9b:0f:72:39:b1:5c:8e:2e:b4:f7:50:a4:1a:19:f8:
         85:4c:4a:a8:8d:e3:50:2d:b1:04:e6:a1:5f:b8:a3:7a:77:f5:
         43:a3:ad:a1:67:c9:75:b3:bb:33:9f:67:24:52:98:51:97:f7:
         09:34:4f:52:86:94:98:a2:80:fc:6b:44:46:6b:07:7f:7f:6c:
         a7:17:ba:9e:73:a5:ca:34:79:7f:b8:ee:ec:0a:ef:e4:cb:8a:
         5a:23:ff:2f:80:c0:08:93:ef:4d:a7:6b:0c:d3:55:cf:38:9c:
         2d:aa:0c:4e:ee:a0:70:51:59:09:fd:92:a4:92:c5:54:50:2d:
         84:40:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:35:36 2025 by rpki-client