Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139352e302f32342d3234203d3e20323635323831.roa
File:                     3136382e39302e3139352e302f32342d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          KB/zrTx0YANgVAsh59FaM3Zpm7Df/anyHlTatA1Qf90=
Subject key identifier:   4F:01:9C:DB:48:60:01:76:B4:F7:92:32:A2:2F:93:01:A9:90:36:C2
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       5C0F444CD784F728902BCDC0C254A0C5EB7B859D
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139352e302f32342d3234203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:10 +0000
ROA not before:           Thu 05 Jun 2025 16:59:10 +0000
ROA not after:            Thu 04 Jun 2026 17:04:10 +0000
asID:                     265281
IP address blocks:        168.90.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 07:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:44:4c:d7:84:f7:28:90:2b:cd:c0:c2:54:a0:c5:eb:7b:85:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:10 2025 GMT
            Not After : Jun  4 17:04:10 2026 GMT
        Subject: CN=4F019CDB48600176B4F79232A22F9301A99036C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:25:18:d0:ae:46:72:7f:e6:50:49:1e:ef:
                    30:6e:98:c6:c7:44:38:61:82:58:08:1b:6f:0f:c7:
                    04:28:ed:86:3f:c3:aa:28:45:bf:79:ec:52:bb:b7:
                    26:68:c2:51:fb:ae:b6:f8:b9:17:b0:bb:67:68:5d:
                    02:36:14:ad:92:de:6f:1e:4f:9a:82:28:6f:0f:ba:
                    aa:02:0b:13:63:33:c8:16:a1:16:64:77:e2:39:45:
                    e2:90:8d:fe:82:e2:76:2a:bd:da:8d:cb:c9:ef:f8:
                    09:b0:2c:61:81:1f:10:b6:a2:a6:05:53:31:6f:71:
                    e3:84:61:0d:3c:12:1d:74:c1:81:00:59:3c:c6:3f:
                    2c:38:90:80:ab:0f:e6:f9:6e:fe:ac:49:dc:f5:b8:
                    9e:e5:46:79:dc:af:25:71:67:ad:34:46:db:72:b5:
                    c7:f6:b5:4e:9e:5d:6b:6c:83:29:90:69:7b:66:e9:
                    c5:18:1e:4b:86:ef:07:80:4b:d5:7b:b9:6c:90:19:
                    56:f2:83:52:0e:83:e6:f3:1c:b6:8d:7e:d5:41:90:
                    49:24:3b:af:ff:ca:84:7a:06:15:68:c4:79:6b:21:
                    12:26:60:4d:a1:98:d4:71:86:3c:27:86:50:09:45:
                    07:6b:76:01:cc:70:f6:88:9a:55:c4:dc:55:5e:e0:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:9C:DB:48:60:01:76:B4:F7:92:32:A2:2F:93:01:A9:90:36:C2
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139352e302f32342d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:a8:ac:6c:c2:78:3f:70:bc:ff:83:70:56:88:95:9a:ec:
         3e:ea:48:02:92:fe:13:77:20:0b:20:66:8f:5e:14:14:94:6a:
         53:d1:c9:07:40:08:f9:cd:3b:c9:b7:96:34:1b:f7:0e:8d:df:
         62:dc:ac:23:05:44:08:87:24:41:c3:3a:d8:2a:0e:eb:f6:db:
         41:d6:d5:9e:89:3f:29:fb:5b:a6:5d:2f:7e:9b:ef:1d:a5:1f:
         77:bf:45:61:8d:5a:0c:bc:ac:01:5c:00:39:ac:f2:8e:05:4a:
         c2:cf:42:8d:94:65:21:fd:1a:fa:6f:c9:62:89:ff:be:d8:f9:
         5b:e7:20:53:6a:b4:07:92:7b:f2:8d:cf:73:c7:51:e2:4a:a7:
         5b:81:49:1a:ec:84:b8:9d:18:00:80:4c:bb:ee:9a:63:52:88:
         07:88:05:73:f1:1c:99:be:dc:8b:84:24:46:86:7f:73:86:99:
         af:59:91:8e:b6:82:eb:28:ff:36:97:e7:83:9f:c0:5b:ce:4d:
         63:e7:b3:b7:43:cc:05:47:c5:6d:bf:7d:98:99:b6:a4:75:19:
         6e:cd:55:41:78:c6:f5:f2:4c:e0:c5:a0:a2:e1:aa:cc:6e:f9:
         51:5d:3e:3f:e2:23:2f:f3:49:f2:6b:83:dd:5b:ed:d6:dc:16:
         75:3c:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:22:46 2025 by rpki-client