Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          nANj/iZaLTUZkSJxcZG/KQ5YOh7gFhXZHewwVNg53ps=
Subject key identifier:   ED:A4:0F:C8:2E:01:32:DF:5C:E0:9A:10:59:9B:4D:A8:A6:0B:99:86
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       729ADDCF6CD6D0F8A4AD2E808F4DE02E0B785B99
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa
Signing time:             Tue 03 Jun 2025 00:27:04 +0000
ROA not before:           Tue 03 Jun 2025 00:22:04 +0000
ROA not after:            Tue 02 Jun 2026 00:27:04 +0000
asID:                     264936
IP address blocks:        168.232.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9a:dd:cf:6c:d6:d0:f8:a4:ad:2e:80:8f:4d:e0:2e:0b:78:5b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun  3 00:22:04 2025 GMT
            Not After : Jun  2 00:27:04 2026 GMT
        Subject: CN=EDA40FC82E0132DF5CE09A10599B4DA8A60B9986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:6d:a4:fe:22:fc:50:0e:86:3e:ae:81:de:
                    29:2e:e5:ec:26:a5:d0:70:77:ae:42:7c:e3:ae:ba:
                    21:96:be:26:63:62:df:56:e1:4a:10:d8:2b:48:ce:
                    05:32:e6:54:01:62:1b:c3:4d:f7:02:b9:a2:3e:80:
                    c1:ea:4b:cc:db:48:5e:5b:1a:5a:1f:67:e2:cb:05:
                    8a:3f:df:28:99:fc:55:f3:91:30:5b:30:72:5a:b5:
                    02:19:1d:ec:f0:96:f0:34:dc:66:3d:55:1f:46:ee:
                    ea:d4:39:74:f7:a1:1b:c4:0d:2f:97:d1:af:52:9b:
                    f9:dc:11:d0:51:bb:de:15:9a:84:2b:e1:3c:a5:e2:
                    4b:b8:13:b6:b7:ad:7b:50:d8:61:0d:97:9a:c4:6b:
                    c6:b4:bd:39:2e:68:13:94:67:bd:41:38:4d:b8:34:
                    ae:ff:fc:c5:c8:88:80:69:b6:0e:a3:89:9c:8e:01:
                    91:18:8c:77:2a:0c:dc:c2:91:ac:52:ca:5c:67:71:
                    ac:67:e7:f9:35:23:12:e5:b8:5f:e4:94:d0:29:00:
                    c9:e4:b2:af:a6:a8:ea:bd:8f:ea:bf:9a:23:ee:cf:
                    66:2d:19:46:4d:2a:dc:08:f4:bd:b0:48:c6:78:0f:
                    58:59:12:32:fb:1b:65:28:7e:a3:b3:b3:78:4e:4c:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:0F:C8:2E:01:32:DF:5C:E0:9A:10:59:9B:4D:A8:A6:0B:99:86
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:51:36:8e:fd:a7:d8:5b:9c:94:c8:f5:05:00:14:f4:96:
         e9:d3:1b:81:e0:2a:5d:6b:b0:84:09:e3:03:7c:53:c8:c9:04:
         98:d1:e4:ca:56:2b:6c:1b:79:5b:f0:b4:0a:4a:b1:f9:27:6f:
         fe:32:db:47:a0:32:67:16:ca:cd:3d:79:9a:a1:1a:75:47:5e:
         b9:7e:f6:1b:46:35:5e:bf:7f:3f:b0:cb:3a:9c:11:e1:88:8d:
         eb:99:88:52:fd:c1:3f:55:ac:40:93:7b:24:05:fc:f0:30:a0:
         56:f9:79:56:e0:e1:7f:f7:94:4a:7a:48:68:24:49:c0:69:49:
         50:7c:7f:35:74:83:d8:50:c2:fc:20:84:2e:5e:76:48:a0:c6:
         33:94:3c:a0:84:1d:cd:95:df:44:6a:06:27:c5:d1:24:39:b0:
         9d:a2:44:e5:e6:9f:b6:6b:dc:b2:94:fc:6d:df:c4:8a:d2:b0:
         18:f7:10:ba:a7:52:96:84:be:0e:84:76:07:e0:90:f4:c8:50:
         86:54:f1:9a:ac:53:e0:a2:fc:ee:37:39:ed:be:85:f2:37:a0:
         5b:c6:a0:fe:d1:86:ae:e2:3f:84:ca:7e:dd:e6:f8:93:a9:de:
         c9:0d:21:92:23:87:9c:bb:ad:00:ed:5f:b9:a3:8a:43:53:c1:
         57:e9:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:38:25 2025 by rpki-client