Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131342e302f32342d3234203d3e20323637353539.roa
File:                     3136382e302e3131342e302f32342d3234203d3e20323637353539.roa (raw, json)
Hash identifier:          XrIr2d7IehZem6W4MkrI1fbpjt/e0z3dXQX3iOgDi0g=
Subject key identifier:   34:52:7E:0D:AA:F1:44:D5:74:29:7D:84:7D:DC:8B:74:B0:18:11:BE
Certificate issuer:       /CN=7F41F2DF45380ED28EBC66827733788836A8955D
Certificate serial:       771B3D22D8630E62D5452762D914F34CB413750B
Authority key identifier: 7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131342e302f32342d3234203d3e20323637353539.roa
Signing time:             Tue 10 Jun 2025 12:02:20 +0000
ROA not before:           Tue 10 Jun 2025 11:57:20 +0000
ROA not after:            Tue 09 Jun 2026 12:02:20 +0000
asID:                     267559
IP address blocks:        168.0.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl
                          rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 23:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1b:3d:22:d8:63:0e:62:d5:45:27:62:d9:14:f3:4c:b4:13:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F41F2DF45380ED28EBC66827733788836A8955D
        Validity
            Not Before: Jun 10 11:57:20 2025 GMT
            Not After : Jun  9 12:02:20 2026 GMT
        Subject: CN=34527E0DAAF144D574297D847DDC8B74B01811BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:10:fa:14:ed:8e:51:a6:c1:7f:d5:4a:d9:
                    57:d7:7f:3c:a7:97:27:15:33:12:1f:2f:43:c2:93:
                    f0:5f:ae:4e:a6:8e:93:2b:cd:68:c9:e8:43:18:22:
                    18:9a:b1:62:fb:90:f2:d4:6e:21:5a:4a:a5:79:b5:
                    05:02:5e:18:02:5a:f6:64:4e:f4:7e:27:56:84:01:
                    aa:54:c5:ee:d4:75:ea:c4:53:8e:2c:83:3a:68:e3:
                    dc:67:3f:5a:31:5c:c5:f6:5a:38:80:9b:4a:c2:03:
                    79:ef:03:83:0a:77:bc:77:3c:be:79:5a:c6:47:0f:
                    91:2d:cc:a4:5f:5e:69:2b:29:64:b7:ba:0f:7d:c5:
                    8f:a8:c2:04:53:1a:62:97:c2:69:1e:db:81:e1:f1:
                    22:46:64:db:34:49:d6:69:85:5b:e7:a3:5c:05:4b:
                    95:22:c4:85:a2:76:e1:a5:04:1c:f7:cb:d4:a9:87:
                    88:3c:7b:ce:c8:a8:3a:74:2f:09:53:06:06:4b:60:
                    a5:3c:07:14:59:93:a7:64:3d:fc:8e:65:5f:be:20:
                    21:13:6d:b5:f4:bf:8f:01:c1:f1:5a:cc:e5:67:87:
                    22:17:86:5a:37:74:a7:86:e2:1b:08:e4:e3:8f:fa:
                    97:d8:77:31:26:22:c2:65:69:d7:b1:01:11:c1:95:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:7E:0D:AA:F1:44:D5:74:29:7D:84:7D:DC:8B:74:B0:18:11:BE
            X509v3 Authority Key Identifier:
                keyid:7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131342e302f32342d3234203d3e20323637353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:03:5e:58:1d:cf:a6:8a:65:a1:84:31:2f:62:89:42:05:
         90:4f:2e:c2:5d:7f:27:e4:58:60:39:05:97:68:de:06:5c:ed:
         49:f5:2a:e0:0f:47:6a:fd:93:1f:70:3a:77:93:59:46:84:b0:
         31:53:22:d0:b3:c4:db:88:8a:ca:32:84:54:ae:a1:bf:71:5f:
         ed:cd:59:fa:45:85:25:a2:d1:3a:46:d3:76:72:69:45:ae:34:
         ed:e3:64:85:fa:65:30:c2:b2:ab:34:3a:48:57:ed:09:42:ab:
         98:cc:99:a7:93:14:a5:66:51:f0:86:ca:fe:31:af:0f:31:bf:
         90:65:fd:b8:2a:7e:b3:8d:32:6f:6a:67:5e:69:7c:d8:9b:d8:
         dd:db:8e:d0:98:69:97:73:c7:c5:d4:e9:ea:52:17:ac:fb:b0:
         46:a5:91:72:dd:47:55:11:cb:56:ec:03:da:c9:f5:a3:94:78:
         49:8e:fe:21:65:39:29:05:1c:ac:14:13:d6:72:71:1f:c2:bb:
         35:78:1c:34:26:f8:4c:c2:97:22:54:9e:93:25:ff:f0:f5:30:
         7b:a6:59:42:53:83:2a:63:77:90:6c:92:e1:01:48:9f:af:d2:
         4f:a2:95:b5:71:bc:8b:6f:42:9f:1c:c0:0b:df:c4:8e:65:05:
         9b:30:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:39:48 2025 by rpki-client