Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          7NHH2IkJdlnwn0cdyHgLAHMtnyDris8C51kEaLEZKTE=
Subject key identifier:   74:63:48:C4:4E:AD:3B:D2:79:3D:BB:4A:D3:8A:75:5B:F6:7B:6F:5A
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       4011123D043A79CD3E4FE00EEB1CBEF7FE74098B
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa
Signing time:             Wed 11 Jun 2025 11:54:41 +0000
ROA not before:           Wed 11 Jun 2025 11:49:41 +0000
ROA not after:            Wed 10 Jun 2026 11:54:41 +0000
asID:                     265465
IP address blocks:        168.196.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 17:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:11:12:3d:04:3a:79:cd:3e:4f:e0:0e:eb:1c:be:f7:fe:74:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: Jun 11 11:49:41 2025 GMT
            Not After : Jun 10 11:54:41 2026 GMT
        Subject: CN=746348C44EAD3BD2793DBB4AD38A755BF67B6F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:97:85:e2:72:fa:8c:94:bd:80:66:a0:80:
                    e0:b2:92:9b:e4:44:19:02:60:3e:f0:ea:15:52:71:
                    51:2d:a9:3b:00:19:4d:84:77:af:58:42:36:27:aa:
                    ca:15:1f:1d:89:ce:ff:1f:9c:d2:80:93:42:a5:22:
                    a3:82:32:2c:8d:cf:38:9c:73:bc:52:a7:0d:4a:98:
                    1f:e9:8b:a7:0d:f9:3d:55:6d:5d:3a:ca:54:df:fd:
                    dd:77:2d:40:9a:25:c9:47:77:27:5b:7f:54:91:6d:
                    88:c7:b8:5f:73:39:db:f5:dd:bf:0c:d1:39:78:0a:
                    85:ff:db:5f:ef:ca:d2:6d:58:04:f9:61:a1:c6:e3:
                    38:65:29:2d:67:91:f7:53:7b:70:b8:8b:d8:f4:eb:
                    1c:d9:f1:13:a4:4a:72:95:69:56:c6:42:e8:45:d9:
                    d7:4b:8b:d3:4a:4e:a9:19:c3:cf:94:a3:bd:b9:c2:
                    13:b7:d7:39:5f:f5:fe:19:6a:b7:7a:f1:d0:ad:6c:
                    bf:48:58:b9:01:41:7c:20:e4:d0:9b:f1:41:47:46:
                    05:3d:b2:10:df:73:98:cd:e7:2b:e7:d4:cd:2b:c7:
                    0b:6a:43:c3:d1:f9:a1:8f:e5:00:11:b3:eb:dd:67:
                    dc:2d:b3:ce:9c:fc:c0:70:71:15:90:66:71:7b:90:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:48:C4:4E:AD:3B:D2:79:3D:BB:4A:D3:8A:75:5B:F6:7B:6F:5A
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:82:73:56:e7:31:5d:99:fe:a5:ac:02:63:90:c2:88:d8:4a:
         81:32:23:42:2c:cc:9d:c7:e3:92:7b:11:be:4b:d1:c8:72:a6:
         75:76:d3:79:7f:37:a9:82:4c:f0:6c:00:65:ff:54:37:11:3c:
         56:61:d4:10:d9:91:1f:7d:61:92:da:fc:0d:32:a1:f8:07:d3:
         3f:18:c6:24:d8:62:ad:a8:9b:30:63:0b:88:f8:23:80:e2:04:
         5e:d1:2a:8b:f2:3f:67:a8:78:01:a2:14:38:f6:ed:34:c5:40:
         b7:d9:05:fa:2a:b7:6d:81:b0:f2:5b:7a:51:90:90:3f:e3:6b:
         bb:68:a2:be:a3:b0:fa:fe:64:6f:5a:71:5b:ba:e7:62:0b:92:
         0a:ca:11:d0:69:3a:2a:3c:37:8d:b5:46:8f:54:e0:e8:e1:5e:
         57:f5:66:f8:65:b8:36:21:68:ee:06:54:0e:ef:7a:ff:8c:32:
         a8:af:aa:b7:42:6e:c4:a6:dd:a2:b4:77:16:8d:37:fc:44:c6:
         de:7f:4e:4c:55:8f:dd:74:91:2d:7f:b9:42:4a:bc:7e:6f:fc:
         d4:da:99:54:bd:de:d2:82:51:5f:c1:2b:45:41:45:ac:83:93:
         94:d2:93:a6:cf:ad:24:f8:40:e7:fe:26:d6:1f:c5:3d:0f:d3:
         cc:3d:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:22:54 2025 by rpki-client