Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa
File:                     3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa (raw, json)
Hash identifier:          e0EIXAXuNv9ZMIjn1F70cigroGAnJOMWlshvQvcX898=
Subject key identifier:   66:78:0B:77:5C:27:6B:FC:F3:A6:10:11:19:61:60:F9:34:AB:39:57
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       3063ECE7AC4AB7CFA1E0114BFE75D7AEBB5D7FDF
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa
Signing time:             Sat 12 Apr 2025 15:02:56 +0000
ROA not before:           Sat 12 Apr 2025 14:57:56 +0000
ROA not after:            Sat 11 Apr 2026 15:02:56 +0000
asID:                     265295
IP address blocks:        168.90.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 01:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:63:ec:e7:ac:4a:b7:cf:a1:e0:11:4b:fe:75:d7:ae:bb:5d:7f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Apr 12 14:57:56 2025 GMT
            Not After : Apr 11 15:02:56 2026 GMT
        Subject: CN=66780B775C276BFCF3A61011196160F934AB3957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:6e:c4:91:68:62:37:35:62:ea:5f:4c:30:
                    25:1a:f4:e7:44:34:eb:d6:96:13:3c:3a:83:9a:91:
                    51:be:e2:50:ca:56:36:7b:01:96:99:c8:b7:8d:8b:
                    61:02:ca:ec:e4:56:c2:2b:6a:13:74:84:ac:66:7d:
                    be:40:1d:36:7c:56:1b:03:c1:72:15:07:ff:11:a9:
                    7c:43:53:75:a1:d1:02:d7:40:15:d5:8e:6d:c1:73:
                    65:ad:2c:99:69:c6:ce:5e:97:88:c8:5f:bd:e7:8c:
                    c4:36:24:ba:0e:d4:c9:f2:24:4a:91:df:59:92:69:
                    a5:1b:04:9a:64:6e:bb:ff:17:56:a5:63:6c:e4:9b:
                    a7:86:d0:b9:64:a3:98:47:3f:2f:92:fb:04:61:3d:
                    f5:92:ed:93:e9:b7:fa:50:cd:a2:46:16:fb:21:73:
                    e5:35:d1:39:93:03:69:43:de:c6:cd:66:59:c7:32:
                    b5:d4:ff:d5:2f:72:11:ff:5b:ba:cf:2a:38:67:44:
                    48:64:9f:49:63:04:3f:6f:38:b3:b1:6a:ab:75:ea:
                    18:f2:ef:37:ec:0c:26:4a:29:c6:41:83:39:06:8f:
                    5e:3d:48:b9:d7:d5:66:33:bc:16:37:4d:60:3c:87:
                    d3:27:49:7f:da:15:53:79:bb:48:61:1c:90:cb:38:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:0B:77:5C:27:6B:FC:F3:A6:10:11:19:61:60:F9:34:AB:39:57
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:fe:38:62:40:a8:f7:02:7c:e4:8f:ab:92:b7:37:d8:70:
         d1:c5:58:34:19:27:90:e0:a6:c5:ae:7d:37:27:e7:50:97:fb:
         99:f8:ad:93:9a:7e:bc:39:eb:56:c8:e9:45:20:29:b8:57:ac:
         46:9d:f5:78:17:af:dd:10:d7:f2:81:b8:2c:47:53:57:c8:4c:
         02:a7:6a:35:e4:97:71:df:db:8b:51:30:78:b9:e8:2d:3c:8f:
         ea:53:eb:a6:50:47:d3:8a:c8:cb:c2:d1:4f:ed:e1:06:29:fa:
         2c:a4:a9:db:5b:fd:94:3b:c3:95:9a:28:ff:85:71:f3:bf:8b:
         2a:0d:e8:93:93:5b:ad:68:4e:51:a6:45:13:7a:68:40:a8:9a:
         da:48:d9:61:d5:db:16:7a:ac:cb:7c:a0:f8:b1:06:20:cd:ba:
         ec:d8:12:8c:2d:4e:59:1e:ae:4e:2e:38:7e:f7:f3:f9:b7:46:
         4a:d4:e2:7d:a3:3e:01:ec:00:81:41:57:dc:23:76:4f:fc:c8:
         9e:c9:df:10:bb:83:a0:1b:f2:0a:36:34:0b:4c:a0:17:c3:9a:
         00:4c:68:34:5a:f4:e3:75:df:ea:0b:a9:a8:28:a7:bf:bd:ff:
         a0:fb:a1:e2:88:32:74:8a:76:97:3e:56:d5:16:5e:25:35:f7:
         84:5b:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:30:58 2025 by rpki-client