Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          SD9DY6vxRGPoVcf+XUCZOlF+qOvp/92aNQ55/7PYSMM=
Subject key identifier:   33:C5:5A:70:BB:07:DC:E4:B0:FF:10:AF:34:17:C7:E6:F7:75:B4:9B
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       211079CEE84EB165E60A79DE6A5980B83E8200B5
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa
Signing time:             Wed 11 Jun 2025 11:55:03 +0000
ROA not before:           Wed 11 Jun 2025 11:50:03 +0000
ROA not after:            Wed 10 Jun 2026 11:55:03 +0000
asID:                     265465
IP address blocks:        168.196.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 17:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:10:79:ce:e8:4e:b1:65:e6:0a:79:de:6a:59:80:b8:3e:82:00:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: Jun 11 11:50:03 2025 GMT
            Not After : Jun 10 11:55:03 2026 GMT
        Subject: CN=33C55A70BB07DCE4B0FF10AF3417C7E6F775B49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:79:f1:59:6c:67:d3:97:4e:2c:45:b2:6c:
                    ad:3e:2f:3a:24:65:32:69:12:85:b9:0f:65:31:d0:
                    57:25:50:ee:88:88:1a:52:63:f9:14:5d:27:a2:94:
                    f6:2d:f2:00:a7:97:08:71:ca:91:ef:43:88:f9:35:
                    30:f9:4f:fb:1d:ac:44:59:ba:0e:24:4c:2f:8c:e5:
                    cb:ca:4d:be:00:43:e2:33:46:79:cc:6c:e4:b7:aa:
                    66:f6:53:ff:23:81:d9:9d:7e:16:20:45:47:88:3f:
                    12:91:23:a3:f5:ce:ea:d1:e8:cf:f1:a6:8d:fe:50:
                    d9:4d:32:9f:83:35:ce:95:af:07:fb:a5:05:df:c7:
                    83:41:09:72:10:5c:0a:0d:d0:a7:39:8e:96:93:16:
                    f7:8f:2d:b5:b4:1f:ee:aa:db:63:ca:b0:3c:d0:9f:
                    63:14:79:63:54:0e:6e:bc:e4:28:d5:4a:19:df:9e:
                    53:3f:de:3c:54:03:9e:91:6d:41:eb:a9:91:00:0f:
                    84:91:cd:02:c6:36:9d:70:ef:96:d0:b4:4c:08:33:
                    a7:51:9b:65:ae:24:bd:17:9d:8a:27:42:d6:ac:3b:
                    b8:75:0e:c6:57:91:02:cc:07:da:f0:10:e1:ea:de:
                    f7:3d:99:9d:32:31:a5:c2:da:7e:c0:39:6e:e9:cd:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C5:5A:70:BB:07:DC:E4:B0:FF:10:AF:34:17:C7:E6:F7:75:B4:9B
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:36:4b:48:86:7c:a8:d5:40:cc:c0:6b:ce:4c:52:40:03:
         15:05:ef:f1:7f:86:70:ee:f8:b8:a9:ee:e6:2d:d5:66:9b:ce:
         00:a1:61:50:76:ad:62:23:de:e8:a8:42:fa:30:98:d9:3f:85:
         24:e6:14:34:16:d2:3b:47:ec:0d:94:27:f6:f9:9f:21:7e:c2:
         20:ef:2c:42:8c:63:8d:5d:8c:e2:b0:b9:66:65:95:7c:f9:6b:
         0b:ec:a6:2e:a3:a4:70:fc:cc:0f:44:8c:52:97:51:dc:d9:a9:
         de:a1:b5:dd:fd:46:a4:92:c5:49:13:ba:5e:f6:08:30:e0:57:
         ef:82:4f:fe:2d:2b:6d:c9:8e:82:06:13:bd:bd:f7:96:9e:8a:
         88:f0:94:7e:09:26:df:d0:cb:6b:43:e5:31:07:a5:3f:f3:8f:
         cd:db:0e:33:5d:ef:88:82:0c:d0:31:4e:8d:18:b7:ae:f4:98:
         4b:19:50:68:98:23:11:1e:0d:b6:09:12:69:b8:02:7f:ac:5b:
         ba:62:9b:f9:7a:c1:3e:22:e5:87:df:c6:8c:95:ec:6f:0c:2e:
         11:29:41:18:3a:3f:ef:cd:0a:d7:c0:81:cb:34:41:d3:f9:0a:
         13:ed:71:51:32:ed:85:2b:ec:b4:8a:2b:9e:f0:c0:b0:05:04:
         b4:a1:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:25:05 2025 by rpki-client