Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa
File:                     3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          u1IHllSD2QawQgT0Zi5ND4d3sCezC0RAHNgrGNvLD54=
Subject key identifier:   89:74:47:D4:44:A6:B9:26:23:BA:15:95:F4:B1:D1:D7:9B:57:E1:5C
Certificate issuer:       /CN=A8A952B21604B5039520204827A8ABA0842CBF36
Certificate serial:       01C1E0EB6C0DE3753FB3EF147638A4E2D829D34C
Authority key identifier: A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa
Signing time:             Wed 30 Apr 2025 20:15:51 +0000
ROA not before:           Wed 30 Apr 2025 20:10:51 +0000
ROA not after:            Wed 29 Apr 2026 20:15:51 +0000
asID:                     268786
IP address blocks:        168.196.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 13:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c1:e0:eb:6c:0d:e3:75:3f:b3:ef:14:76:38:a4:e2:d8:29:d3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8A952B21604B5039520204827A8ABA0842CBF36
        Validity
            Not Before: Apr 30 20:10:51 2025 GMT
            Not After : Apr 29 20:15:51 2026 GMT
        Subject: CN=897447D444A6B92623BA1595F4B1D1D79B57E15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:18:34:36:c8:b8:0f:70:cc:6b:3e:8b:b4:
                    38:3c:1d:17:76:b0:28:c5:45:46:c7:af:c1:da:46:
                    89:a6:97:6a:95:30:62:4c:7b:c4:fa:d0:9b:99:95:
                    ab:a8:17:9b:5a:38:a8:f9:06:b7:67:04:ec:fb:d4:
                    e7:af:42:77:70:15:a4:c9:5c:91:25:59:54:14:98:
                    a7:35:05:88:db:8c:d9:0f:4a:a2:70:38:a3:8e:f2:
                    3a:2e:ef:e8:7a:4a:73:90:2e:99:3c:bf:2f:06:a0:
                    0c:a3:5d:b7:d9:72:09:63:8c:62:93:a2:75:db:46:
                    be:9f:3b:8d:d7:85:b4:b1:5f:80:4a:4c:1b:af:22:
                    59:44:4f:fe:70:25:af:3d:57:54:dd:c1:b7:5f:ce:
                    b1:49:71:27:c6:2e:f5:3a:c7:3b:ce:1f:b7:a8:fb:
                    e1:3d:d5:b6:85:01:3f:09:f9:84:1d:a1:cd:96:8c:
                    0d:61:ba:1e:d9:b0:45:83:d5:23:4b:a0:4b:91:a7:
                    a4:4e:b0:17:b6:ba:88:83:a9:81:dc:fe:58:81:92:
                    d5:42:04:a2:75:d1:43:76:5d:5b:fd:2f:c6:a8:63:
                    c5:6b:f1:86:d0:37:86:bb:68:15:e5:45:28:16:52:
                    f2:c4:46:85:95:1c:f5:a0:99:99:30:1c:19:c2:77:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:74:47:D4:44:A6:B9:26:23:BA:15:95:F4:B1:D1:D7:9B:57:E1:5C
            X509v3 Authority Key Identifier:
                keyid:A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:1c:f2:d7:2c:a7:78:53:30:4e:77:22:0b:00:6a:c5:33:5d:
         e0:17:56:43:58:80:21:f2:9b:e9:e7:64:f6:41:8f:77:56:dc:
         f4:40:a0:aa:43:be:da:6a:30:13:22:9b:ba:56:e2:38:78:da:
         32:06:03:2b:8d:df:7b:74:60:c9:87:67:9c:f8:f7:1f:db:f7:
         2a:83:06:5b:48:94:c4:d2:e2:26:da:ff:23:1d:63:fb:40:4e:
         82:78:51:62:7b:63:ee:e6:79:65:f3:1e:c6:85:70:08:56:a7:
         77:5a:8c:a5:6d:05:d4:d8:14:9a:83:7a:04:52:89:15:99:46:
         a4:5d:30:6c:b1:db:33:06:6e:aa:1b:8a:ee:2f:41:fc:2e:bc:
         96:3b:1f:46:68:6b:bb:2a:25:56:2c:99:2b:5f:c4:40:37:d9:
         a5:c1:fb:17:d7:81:a5:21:57:72:b1:6a:b9:7f:bd:2f:ae:f7:
         9e:df:df:de:a4:9a:f0:db:f6:cb:37:9f:cf:56:22:9a:f8:ac:
         94:ad:e1:31:92:f3:e8:4c:38:6a:e8:71:ca:1c:e7:02:13:c7:
         4b:5e:d7:5e:4e:aa:ab:47:b3:99:4e:72:2d:e4:6e:e2:1f:4c:
         65:9d:b2:15:4c:3a:55:32:de:c2:81:be:ec:ef:db:ff:ac:40:
         de:38:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:54 2025 by rpki-client