Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa
File:                     3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          IAaVQ+/TCH4zNzwSm9cewgIAV164mrU9z2ZUbA7SAIc=
Subject key identifier:   14:17:58:55:79:9D:4D:82:3F:95:7A:BF:81:13:22:2B:7B:21:19:89
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       1066CA82BAC2C1AC3684DF21ADAE0CAB98224015
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:11 +0000
ROA not before:           Thu 05 Jun 2025 16:59:11 +0000
ROA not after:            Thu 04 Jun 2026 17:04:11 +0000
asID:                     265281
IP address blocks:        168.90.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 21:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:ca:82:ba:c2:c1:ac:36:84:df:21:ad:ae:0c:ab:98:22:40:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:11 2025 GMT
            Not After : Jun  4 17:04:11 2026 GMT
        Subject: CN=14175855799D4D823F957ABF8113222B7B211989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:ba:0d:28:3b:8e:fd:d0:6d:ad:d7:0b:00:
                    f8:ba:cb:97:52:08:90:cc:a5:5e:f6:56:0b:a4:3c:
                    8a:93:3f:5a:96:0e:7f:14:81:10:94:02:5e:f3:f5:
                    62:00:e0:87:ea:45:16:55:c2:d2:59:56:a6:69:02:
                    ec:74:d5:ff:24:5d:57:b3:3b:52:4e:de:32:3b:de:
                    4c:ba:6b:76:f0:ab:48:6c:ba:89:36:f8:69:36:d8:
                    a8:58:17:c5:b7:1a:22:d1:5f:2b:20:fa:e6:8e:2a:
                    c3:df:3e:8c:09:cb:55:74:f6:b5:42:dc:6e:ab:09:
                    9c:44:a1:11:91:fe:b7:d3:60:d0:e2:eb:44:be:6d:
                    f5:f2:92:da:30:2f:d3:50:56:db:9b:5a:27:87:c3:
                    54:8d:63:2a:0a:a0:ea:79:8a:14:d7:59:32:e6:5e:
                    9e:6a:2a:cc:1f:f8:23:3f:20:b0:c0:21:c5:72:33:
                    7a:04:c8:3f:8a:5f:0d:94:2a:08:07:30:09:d8:24:
                    c1:13:64:e2:1c:7c:6f:d5:47:21:b6:b3:b7:32:f2:
                    21:e9:fd:a3:ef:47:9e:0a:59:6d:0c:c4:82:21:e4:
                    95:ca:51:a7:a4:ad:9c:8b:af:86:b6:7c:b4:80:62:
                    55:d3:74:e6:3f:5e:ec:36:f2:7f:75:de:26:58:ee:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:17:58:55:79:9D:4D:82:3F:95:7A:BF:81:13:22:2B:7B:21:19:89
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139332e302f32342d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:9a:14:5a:ad:d0:45:ca:b4:4f:2b:e3:2a:a7:d6:5a:a2:18:
         35:22:07:a3:e6:a8:ae:ed:44:d3:cc:a8:02:6d:b8:50:32:bb:
         a5:d5:1a:31:bb:e2:c9:5e:5b:fa:ac:5a:e5:c9:16:42:71:75:
         ca:9b:87:7b:70:26:1f:e8:e6:8a:7f:f2:2d:da:86:07:e5:97:
         4d:74:50:18:5f:91:8a:ff:be:fe:02:07:b4:f7:6f:bb:34:a2:
         f3:14:c7:34:8e:5d:10:f2:6c:e2:3d:14:a8:f6:56:1b:f6:5b:
         25:8f:a4:4d:f1:79:11:e1:f2:e4:04:95:3a:0b:b3:33:06:7a:
         5e:aa:a9:aa:79:88:01:71:08:fb:1b:dd:27:6a:b6:99:78:d1:
         9a:cc:ab:04:ba:e1:53:53:a1:bb:3f:92:e6:4f:74:51:ba:d5:
         bc:48:f9:d9:5f:5a:df:45:06:1b:a7:00:d6:23:02:57:75:42:
         a4:fa:99:d7:0e:09:69:0c:c7:a2:0a:93:3f:aa:94:d1:ce:c5:
         f1:34:ac:43:65:ce:b1:3d:dc:c6:4e:87:93:73:7c:ca:66:2d:
         01:8f:68:5d:01:c8:90:38:f0:26:76:ee:66:61:43:09:df:1b:
         a4:43:2d:cb:77:d4:56:c7:e5:44:3f:e5:0c:24:4d:3d:16:b7:
         0b:64:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:37:24 2025 by rpki-client