Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          qQLU+Ohj/iJiP6sxC7iSpDsIRV0d5ppxsynfxSqYVnE=
Subject key identifier:   6E:BD:94:25:45:02:30:5D:0D:4E:DF:5C:3E:22:B9:25:F8:BD:8E:27
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       5E8A4B87783652FBD3B2E8784047CBC021B54D17
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
Signing time:             Fri 06 Jun 2025 15:00:59 +0000
ROA not before:           Fri 06 Jun 2025 14:55:59 +0000
ROA not after:            Fri 05 Jun 2026 15:00:59 +0000
asID:                     264863
IP address blocks:        168.205.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
                          rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 18:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8a:4b:87:78:36:52:fb:d3:b2:e8:78:40:47:cb:c0:21:b5:4d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Jun  6 14:55:59 2025 GMT
            Not After : Jun  5 15:00:59 2026 GMT
        Subject: CN=6EBD94254502305D0D4EDF5C3E22B925F8BD8E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:d0:bb:52:ec:d6:eb:c6:2a:85:c5:93:2c:
                    98:3d:0c:7e:6e:d4:ed:39:b0:ad:6a:8b:e7:48:4d:
                    77:f5:21:7c:db:d8:a4:71:31:89:7a:85:f5:d6:82:
                    e1:b5:b1:94:23:a5:74:ef:bf:03:29:04:3a:74:ba:
                    0a:21:19:5b:03:bd:35:58:65:e1:7d:81:a6:42:ce:
                    a5:c0:37:6b:ae:23:f3:35:d7:40:1e:a5:52:0a:95:
                    32:9d:06:c1:37:cc:ac:ff:99:98:1c:79:ce:31:9c:
                    f7:b5:1a:91:32:1e:a9:da:9b:eb:c9:8c:96:82:d8:
                    29:f0:ff:bb:70:f3:b1:f6:2d:97:10:c6:be:1c:52:
                    11:13:9f:c4:cf:0b:74:00:1a:72:73:ad:08:20:c6:
                    57:01:3b:29:70:af:11:ad:c3:eb:dd:10:c5:bb:ec:
                    6e:f5:8b:d0:38:46:21:38:9e:cd:93:f3:6a:db:f6:
                    14:ca:11:f5:2e:4b:cf:19:c9:c7:2a:8a:a1:e5:56:
                    3d:4a:a6:e2:94:55:af:bd:f3:a0:65:2c:06:8b:38:
                    a2:4f:dc:3c:94:8b:53:02:62:f8:d0:d8:d3:48:af:
                    7e:cf:af:d9:77:93:bc:1d:cb:5b:8c:f3:03:c0:c6:
                    7a:c5:6a:de:4b:81:10:e4:50:2f:d2:30:dd:f1:67:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BD:94:25:45:02:30:5D:0D:4E:DF:5C:3E:22:B9:25:F8:BD:8E:27
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:98:ba:4b:2c:e4:76:47:46:3a:8f:ee:50:03:e8:c1:21:
         d3:b6:b9:6a:02:07:1a:85:3e:0b:08:7d:19:02:e3:35:28:cd:
         35:57:a8:f5:b8:e7:54:59:ca:e2:01:56:b7:4d:7b:b0:3c:0d:
         60:82:97:af:19:57:e0:6e:4c:bd:5e:b0:4b:97:b7:d1:e2:61:
         8d:04:00:a7:4f:a5:49:8d:a3:2a:aa:9c:e1:ac:32:48:5e:10:
         27:45:08:5a:c8:5e:1f:1b:3c:55:d6:20:1d:dd:41:0d:56:b1:
         50:d8:9e:9a:ac:a2:28:35:bc:6c:10:bf:10:a7:16:f1:e1:94:
         b1:0a:4d:55:1d:2b:2c:06:e6:9e:02:ac:0e:eb:f5:da:fa:3b:
         b3:92:ac:91:e2:10:6f:11:fc:09:70:57:bd:5d:80:00:f8:0b:
         46:a4:7f:06:d2:96:ce:9f:31:8f:8d:ca:d9:0f:2e:6c:d8:68:
         0d:c0:53:60:ae:39:cd:fe:a8:a5:b9:d7:4d:91:a7:9a:25:68:
         a4:3f:f5:31:81:f0:30:c4:a4:7b:a2:0f:ea:44:a7:47:55:0e:
         3f:c8:0f:6f:71:41:f0:9b:63:f5:e2:92:86:99:b0:34:76:3c:
         77:92:33:30:a4:35:94:51:7d:16:da:63:3e:1b:4c:4d:7a:f4:
         1a:c8:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:07:29 2025 by rpki-client