Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136332e302f32342d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136332e302f32342d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          PiyMnz7UvtfNvP5rAhF6iTLaGwSmVGh/mVx/1ujS4Io=
Subject key identifier:   8F:5C:D9:85:D2:DB:33:69:B4:50:90:20:07:01:4E:70:3D:E9:3B:9C
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       4E4726705DFF0E50893C56C079ED2F4639F96981
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136332e302f32342d3234203d3e20323635343635.roa
Signing time:             Wed 11 Jun 2025 11:53:35 +0000
ROA not before:           Wed 11 Jun 2025 11:48:35 +0000
ROA not after:            Wed 10 Jun 2026 11:53:35 +0000
asID:                     265465
IP address blocks:        168.196.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 17:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:47:26:70:5d:ff:0e:50:89:3c:56:c0:79:ed:2f:46:39:f9:69:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: Jun 11 11:48:35 2025 GMT
            Not After : Jun 10 11:53:35 2026 GMT
        Subject: CN=8F5CD985D2DB3369B450902007014E703DE93B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:78:de:53:51:c4:b1:0c:e3:74:14:dd:49:
                    93:32:81:de:43:42:f4:10:28:49:b7:63:10:21:a9:
                    f5:18:a3:bb:4c:68:28:f9:01:7d:71:2e:86:6f:51:
                    ca:6c:63:43:7f:a6:a5:50:70:b9:7f:22:fb:70:b8:
                    59:bc:e4:ea:f4:42:16:39:dc:4f:6d:fe:55:6a:e9:
                    58:2e:f6:ae:8d:95:ce:00:e8:07:fa:40:b2:5b:ce:
                    50:67:36:7d:4d:e5:0b:55:fe:e7:61:23:02:c1:55:
                    c1:3d:1b:b2:ad:04:52:d5:47:b8:67:a5:5a:e1:7a:
                    fa:05:56:9c:2e:7f:db:50:9b:d4:10:42:18:cd:2e:
                    0a:ac:e7:26:da:e7:84:35:5f:25:35:2d:63:18:ac:
                    83:99:cb:0c:25:2d:46:a6:d5:8a:8a:27:e3:ed:ac:
                    99:28:5b:c6:39:db:cf:2d:48:d9:80:8e:e3:7a:37:
                    9c:32:df:aa:68:36:8b:73:0f:12:0b:2f:9c:a2:76:
                    87:af:94:19:a7:d9:c4:af:49:a3:62:fe:6b:f0:b5:
                    fc:24:30:1e:73:b7:c6:ca:a0:05:dd:68:2e:7a:b3:
                    7d:3c:ce:db:2a:ba:af:cf:fd:8b:2a:77:ff:14:1f:
                    24:09:8e:63:23:27:b7:89:5b:6a:bd:3c:02:51:60:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5C:D9:85:D2:DB:33:69:B4:50:90:20:07:01:4E:70:3D:E9:3B:9C
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136332e302f32342d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:be:22:8a:10:0d:7e:67:ef:25:68:2a:51:5f:75:27:d1:
         32:40:ce:34:6e:ee:87:08:3c:0a:29:56:32:b7:25:47:02:cf:
         6a:c9:77:bf:02:65:cd:e2:90:66:cd:1a:6d:38:4b:5f:b1:55:
         4b:f3:84:33:96:71:c1:b6:4f:e2:cd:92:a3:97:67:d3:f5:ac:
         cb:a7:4a:79:05:dc:da:c6:fc:4e:1f:f4:26:9f:17:d1:04:c3:
         1f:ee:cc:42:2f:79:36:28:7f:0c:e9:70:8e:2a:5e:6d:97:c8:
         03:ef:e4:0c:09:81:db:1b:1b:27:cc:13:8b:48:8b:9e:47:72:
         cf:5c:99:ad:78:5e:0a:55:04:d9:b7:82:e7:12:01:20:b8:3c:
         bc:ea:7d:43:c8:99:73:eb:a7:ce:73:38:b3:7d:22:96:dd:2f:
         16:7f:77:26:84:40:ca:e0:2b:23:73:be:bc:49:5b:d5:e6:2b:
         20:76:44:34:a3:0a:62:97:ad:8c:66:73:95:34:54:bd:62:56:
         d2:cf:fa:83:10:38:c1:81:9c:36:55:22:b7:5c:ba:71:73:e1:
         eb:90:b5:3a:db:e6:21:db:58:0c:04:d8:9b:86:e0:30:10:7b:
         6d:b6:60:3b:5c:d3:95:df:e7:94:be:0d:76:1d:fa:83:b8:32:
         d7:0d:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:20 2025 by rpki-client