Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa
File:                     3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          CLFR3jwiBQkeY/GItdBCmlbjIUOwtJaxgKZR60b5yPk=
Subject key identifier:   3E:7B:9D:E2:B3:1D:87:49:D1:D1:96:0A:BA:F2:AB:3C:31:DE:E9:33
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       6EA047BE17891E1912C1B76F963FBBF51BEA2BDF
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:49 +0000
ROA not before:           Mon 16 Jun 2025 14:05:49 +0000
ROA not after:            Mon 15 Jun 2026 14:10:49 +0000
asID:                     262729
IP address blocks:        168.197.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 19:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:47:be:17:89:1e:19:12:c1:b7:6f:96:3f:bb:f5:1b:ea:2b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:49 2025 GMT
            Not After : Jun 15 14:10:49 2026 GMT
        Subject: CN=3E7B9DE2B31D8749D1D1960ABAF2AB3C31DEE933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:80:de:29:00:8f:55:80:07:3d:05:0d:9c:
                    af:0e:f5:ac:c8:f6:b4:c0:67:2e:7d:c9:bf:45:78:
                    c4:3a:e6:2b:ee:18:a4:7d:45:b8:55:44:59:04:9b:
                    f3:80:e1:31:19:33:5e:fe:74:18:2e:5b:2d:88:89:
                    c9:fd:90:a9:ae:8b:b1:1f:9d:0b:3f:61:3a:0a:97:
                    c5:34:50:78:c4:53:87:f1:aa:50:41:3a:29:bd:85:
                    8d:8d:a4:3d:0b:9c:a6:0c:7a:22:69:3b:42:4a:f4:
                    c4:b1:42:a6:11:ce:af:96:c5:ed:f2:9e:5a:30:e1:
                    3b:63:ff:e1:32:76:4f:0f:89:87:07:d6:2b:e5:27:
                    c1:97:17:1a:8a:d2:60:44:ed:b2:f8:f6:fa:79:fb:
                    cc:9f:e7:f9:55:7b:d5:a9:09:2d:97:a7:df:db:73:
                    83:c3:ad:2d:b2:b3:60:9f:b4:76:52:b8:f4:a7:fb:
                    37:8d:76:a5:81:80:f0:be:7e:eb:5d:75:6c:92:f5:
                    1a:dd:7e:36:62:d9:fa:86:64:75:42:53:a5:a0:e1:
                    00:5c:41:6d:14:70:36:cc:2d:38:a9:05:10:83:f0:
                    00:47:0e:7e:d5:27:3c:84:a6:96:52:67:48:fe:ee:
                    5f:b9:5a:1e:6c:a7:d9:65:0b:e4:39:e2:a5:fe:47:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7B:9D:E2:B3:1D:87:49:D1:D1:96:0A:BA:F2:AB:3C:31:DE:E9:33
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:25:59:49:fd:49:c7:6c:4e:5c:dd:51:ba:54:d5:77:0a:79:
         95:82:0e:b2:7d:17:83:03:25:cf:ef:ce:f6:f4:7a:0c:b2:59:
         8d:35:a6:6d:87:4e:ff:30:30:27:e2:a6:13:1b:6c:1d:95:7e:
         08:19:c3:16:cf:ba:74:d0:f1:2f:0b:ff:93:23:37:1b:69:49:
         eb:65:42:d7:e9:30:7c:44:37:34:d2:f7:50:92:f3:86:ad:e1:
         7a:81:bb:ac:ce:17:91:ab:63:8e:1e:e3:a9:5e:86:09:74:dd:
         7c:eb:8b:53:c3:c8:fd:f8:9b:eb:b8:1f:42:e1:39:61:38:cd:
         50:e6:b6:fb:25:16:74:84:52:68:ad:cd:31:2c:3b:e9:c2:26:
         03:0e:e9:2e:71:6f:06:0e:c1:52:ce:97:12:d2:6c:fe:c6:c9:
         95:f4:9c:d8:39:4f:f9:3a:94:7f:e6:50:33:1c:c6:d4:05:51:
         de:36:5c:cb:d2:84:46:2d:57:aa:fe:07:e6:b4:4f:13:0d:79:
         55:11:e2:64:95:b6:c3:66:3c:2b:c5:b8:02:76:aa:54:0a:dd:
         54:b0:65:5c:9c:ba:27:26:78:70:f4:a4:af:2b:29:d5:8a:18:
         94:ab:38:34:56:f3:12:18:1e:12:ad:dc:36:f1:da:33:68:2a:
         99:17:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:14:42 2025 by rpki-client