Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa
File:                     3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          IdsmlnUIH4r8p18vC5CqYfDqzhec7kfm76eomhB+HYY=
Subject key identifier:   DB:1B:3C:91:6A:B7:8C:F3:96:42:22:9B:CD:F1:88:00:DB:D4:7A:7A
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       0103CBDA8EEFEC4B3A4B3550646613915BA4AD97
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:10 +0000
ROA not before:           Thu 05 Jun 2025 16:59:10 +0000
ROA not after:            Thu 04 Jun 2026 17:04:10 +0000
asID:                     265281
IP address blocks:        168.90.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:03:cb:da:8e:ef:ec:4b:3a:4b:35:50:64:66:13:91:5b:a4:ad:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:10 2025 GMT
            Not After : Jun  4 17:04:10 2026 GMT
        Subject: CN=DB1B3C916AB78CF39642229BCDF18800DBD47A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:12:4f:05:3c:56:f0:ca:53:7b:90:9c:96:
                    73:14:d2:57:c9:c3:d9:80:72:ab:be:04:2e:03:03:
                    47:56:6e:7b:d2:e3:26:b6:ec:30:08:8b:70:f8:72:
                    8f:b8:7e:9f:38:bb:bf:ea:aa:07:98:70:63:51:a6:
                    78:7b:19:57:49:a5:98:de:fa:c1:03:02:21:88:94:
                    a7:d3:79:6c:df:3c:92:62:a2:8a:5a:cb:55:34:24:
                    eb:08:be:89:46:2d:da:c6:9f:06:3e:ae:07:da:d5:
                    2f:94:a6:b4:c2:f2:91:46:4f:a0:da:10:ce:37:c7:
                    7d:22:17:01:f4:a1:e0:63:54:b0:7b:fb:90:73:a4:
                    6d:50:cf:90:30:53:19:84:93:5b:98:ab:22:e3:bc:
                    7b:81:1a:b7:37:f6:70:a2:ae:a4:1c:d7:75:61:10:
                    15:59:f4:2d:40:63:05:3f:b0:6a:e2:ca:bc:7f:3e:
                    b9:5a:95:5c:85:1d:f1:7b:cc:95:d8:a6:69:23:24:
                    fa:c1:e7:6b:81:53:aa:1e:e3:cb:b3:83:b1:49:c8:
                    20:e5:bd:5e:fc:b5:e0:09:25:09:dc:12:8f:7b:e0:
                    ad:96:de:1e:5b:c0:f5:71:0a:e9:8b:b1:f3:f8:af:
                    fe:73:11:90:58:b5:7c:8b:58:85:69:58:fd:75:e4:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:3C:91:6A:B7:8C:F3:96:42:22:9B:CD:F1:88:00:DB:D4:7A:7A
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:d5:15:d6:e5:6e:1d:d9:a4:91:81:b8:e8:27:6d:ec:df:
         95:60:bb:66:b2:55:cb:a5:34:50:4d:13:5a:75:23:81:ad:1e:
         2c:2b:36:6d:38:56:dc:4b:40:2a:19:a8:52:46:c2:58:6d:f6:
         4b:e1:47:73:91:4c:80:9f:ca:cf:82:95:4d:db:0d:bf:31:e9:
         c2:f2:58:6e:c5:e5:10:b4:9b:31:e5:cb:91:71:4c:d6:b2:3f:
         85:65:98:81:3f:c8:63:51:e2:0d:ec:d2:25:13:8a:f0:51:59:
         0a:cf:eb:f7:96:b7:87:19:d2:7a:7f:7b:96:8f:d9:1f:0c:32:
         27:a5:7b:7d:ba:b8:26:57:66:64:83:ef:11:ff:14:94:2f:11:
         27:69:03:54:91:dd:b5:7e:f2:b0:77:d7:d1:e0:04:e9:15:78:
         e1:6c:85:5a:91:74:f7:cd:64:cb:51:24:84:9a:02:15:30:47:
         4a:ac:00:98:cc:7d:b5:21:80:c4:50:4a:62:2f:4b:21:8e:ca:
         e0:52:58:70:a5:46:32:e9:bb:8c:3f:0a:b1:bb:14:a2:44:2e:
         09:82:ca:94:55:79:2e:a8:fd:6c:2f:84:26:c2:16:df:53:25:
         83:09:d6:9b:80:25:a3:85:c5:89:20:3c:40:57:5f:68:af:b2:
         c4:fd:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:13:31 2025 by rpki-client