Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139342e302f32332d3233203d3e20323635323831.roa
File:                     3136382e39302e3139342e302f32332d3233203d3e20323635323831.roa (raw, json)
Hash identifier:          h5bCNVW0pSGirvyYTKNfPnsZyk0ub/scmuMA+jBfObA=
Subject key identifier:   4D:8B:30:33:4F:9F:49:E3:80:57:62:39:C1:D4:63:7C:24:4F:D6:1B
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       17FA704420D9FFD522D95D55A8408A6A0318F6C4
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139342e302f32332d3233203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:09 +0000
ROA not before:           Thu 05 Jun 2025 16:59:09 +0000
ROA not after:            Thu 04 Jun 2026 17:04:09 +0000
asID:                     265281
IP address blocks:        168.90.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fa:70:44:20:d9:ff:d5:22:d9:5d:55:a8:40:8a:6a:03:18:f6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:09 2025 GMT
            Not After : Jun  4 17:04:09 2026 GMT
        Subject: CN=4D8B30334F9F49E380576239C1D4637C244FD61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:71:24:e7:2f:90:38:eb:5b:b7:dd:66:01:
                    e5:2b:21:18:cf:29:46:45:ca:01:99:cb:41:91:e3:
                    15:72:15:ca:8a:90:91:d5:70:e2:e2:69:5d:79:72:
                    16:ef:76:8f:44:6b:67:99:93:69:22:f8:3b:04:b0:
                    3c:c1:86:5d:ae:db:22:6f:7a:ee:d6:ee:1d:d3:c7:
                    0b:5d:7d:5a:8c:3f:d9:6f:61:df:f2:2b:8a:4d:d2:
                    09:c9:5f:fd:b0:dc:0a:8b:12:1d:e4:03:7d:c9:ad:
                    21:05:0a:6f:d2:e2:85:98:2f:04:76:7d:46:a0:25:
                    11:b1:91:ee:b5:2e:d4:83:aa:72:dc:24:72:a6:31:
                    0f:bf:f7:2b:3d:9b:7c:35:a7:6d:1e:60:12:97:77:
                    c6:b4:be:d3:85:47:4a:2f:f2:16:24:7e:d4:b0:ab:
                    ce:1c:33:b4:db:1b:ab:d3:69:59:d7:54:c0:b6:e4:
                    21:45:1c:50:f9:a1:bf:ca:47:b3:48:e2:f8:36:63:
                    56:fc:ed:90:4e:53:78:95:7f:74:cf:52:01:81:59:
                    65:1b:cf:b8:5d:a5:6c:df:2a:41:c6:7c:c0:62:6c:
                    3b:9a:3b:5d:bb:4b:b7:05:a1:d3:64:7c:9a:4f:0a:
                    60:2e:ea:42:87:15:bc:1f:4c:1d:fc:0c:7e:8b:0e:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8B:30:33:4F:9F:49:E3:80:57:62:39:C1:D4:63:7C:24:4F:D6:1B
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139342e302f32332d3233203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:e2:6f:39:eb:0f:81:34:a4:9a:32:26:b9:5a:93:d1:1d:
         60:5e:3a:d8:36:c8:e1:11:66:80:0e:b7:36:20:5c:8c:7f:4f:
         3a:62:4e:7c:f3:52:26:90:85:8d:48:b6:39:37:57:54:16:be:
         ed:4b:67:68:0e:fe:6e:ec:7b:54:ce:f0:51:43:e2:54:7d:f3:
         7a:84:16:a8:41:73:73:c2:1a:21:17:8e:cc:8c:5d:ea:7e:85:
         59:f1:47:3d:67:9c:58:c9:c9:4c:b6:65:fc:0a:6f:1e:d0:8b:
         5a:aa:9f:f5:b8:c8:0f:77:ea:75:10:a4:0e:09:75:58:4f:88:
         ba:fe:ca:78:de:7d:8e:6c:0f:88:ce:4b:68:98:1b:81:bb:cc:
         2e:9a:45:fb:0f:94:14:5c:19:95:27:20:28:b2:64:72:1d:5e:
         de:1e:ac:b1:71:d6:e5:93:50:f9:44:cd:42:bf:8d:a5:32:15:
         29:d5:d1:45:9f:a7:57:61:53:c1:1f:83:28:65:33:53:81:4a:
         2a:4c:5b:d8:21:8e:68:bf:a9:62:c8:fd:20:bd:ad:d9:f9:0f:
         e9:6c:68:40:4a:46:ec:cc:9b:37:e9:cf:20:c7:fd:7b:04:88:
         5a:cd:cd:c4:19:d8:c9:f1:aa:2c:ec:c6:96:36:d7:b4:84:86:
         9b:94:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:10:16 2025 by rpki-client