Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          NBPbxPnHN4E9eb0mtFjEp5tkbH3cR5vE7pnSJ/2+DQM=
Subject key identifier:   C4:94:20:AC:EF:EA:A4:00:2A:B1:94:54:25:E7:F1:B8:12:B3:34:7A
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       50271A654A013A4CCF8435631576490950454A95
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
Signing time:             Tue 03 Jun 2025 00:27:04 +0000
ROA not before:           Tue 03 Jun 2025 00:22:04 +0000
ROA not after:            Tue 02 Jun 2026 00:27:04 +0000
asID:                     264936
IP address blocks:        168.232.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:1a:65:4a:01:3a:4c:cf:84:35:63:15:76:49:09:50:45:4a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun  3 00:22:04 2025 GMT
            Not After : Jun  2 00:27:04 2026 GMT
        Subject: CN=C49420ACEFEAA4002AB1945425E7F1B812B3347A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:84:57:6f:70:c4:4e:68:0c:d1:6c:7f:cd:
                    fe:59:19:a5:13:f7:d4:af:90:33:af:5a:90:47:50:
                    c8:70:4a:e5:3b:8c:c1:42:b5:88:c3:5e:86:5e:f3:
                    0a:3c:90:6e:10:04:1a:aa:a6:2b:fc:61:67:50:95:
                    e0:75:c3:d0:d8:f2:90:e6:22:fa:33:3a:ef:d3:f7:
                    ec:70:26:fa:79:41:3e:02:f9:99:d5:ce:a2:b4:5b:
                    b2:3e:39:5f:28:6b:92:ee:61:b5:0f:00:c3:ac:ba:
                    13:be:7e:3d:93:cf:b7:a2:a4:94:6f:c3:2e:0c:5a:
                    9d:a5:21:4c:ca:0e:29:fc:59:11:d6:21:5b:ee:8f:
                    68:d6:8c:c4:52:c5:fe:c3:16:94:67:bf:c6:56:6b:
                    a3:cf:c6:bc:e0:2c:bf:4f:1e:34:50:9e:3d:38:43:
                    0d:bb:a5:15:28:3e:3e:e5:6a:5c:93:b3:40:ff:fa:
                    a6:75:6f:1e:58:b3:69:16:b8:14:99:bf:fb:4e:7f:
                    ed:57:f8:94:29:db:74:85:62:59:b4:be:6d:a7:7f:
                    9b:a1:53:e6:42:9a:2d:41:bb:77:ec:aa:c2:4f:61:
                    4f:d4:2e:a6:b0:8d:7e:92:b2:e9:17:9e:49:98:0f:
                    2f:eb:05:05:79:a4:ef:80:c0:24:33:0b:a9:9f:bd:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:20:AC:EF:EA:A4:00:2A:B1:94:54:25:E7:F1:B8:12:B3:34:7A
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:da:30:e5:c7:3c:6e:b3:57:da:39:89:c4:19:3d:80:f6:7f:
         96:b8:69:bf:1f:f9:3a:e5:e1:08:ee:37:4b:af:ad:67:55:a0:
         3f:4b:c3:1f:94:dc:56:f3:e8:15:76:15:3f:f6:ce:65:b5:c8:
         12:08:7b:02:ed:2f:e6:e7:9c:98:c3:1a:c2:0c:70:12:3d:00:
         87:e9:17:71:f6:c6:0b:8e:0e:21:2d:0d:00:d3:ae:79:31:ba:
         31:49:14:df:7a:2e:31:1b:35:e8:6a:49:09:dd:82:9c:ce:0f:
         ef:86:82:37:a2:09:11:af:61:74:94:5c:9a:d4:02:4b:13:9e:
         76:b6:61:80:0c:d4:67:5f:f6:71:7b:ea:0e:a4:fd:3b:e1:5b:
         f4:cc:89:53:c5:23:9a:c0:22:8c:f1:d2:d3:52:56:49:16:7f:
         cf:5c:d0:48:3d:7f:fd:e4:fb:c4:7f:d5:da:55:9b:2c:1a:a8:
         9f:7f:01:1e:61:16:71:3a:ec:e0:11:f9:6e:fd:78:f6:7e:05:
         dc:b6:55:e7:9d:9e:48:b7:b3:17:65:0f:83:1c:2a:c4:d0:d2:
         99:dc:73:d3:04:9b:96:9c:41:b1:7c:ec:49:eb:6c:86:bd:d5:
         d6:9b:ba:f3:fb:61:0c:cc:e9:01:48:d5:de:23:56:ad:20:a0:
         5a:2a:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:53:51 2025 by rpki-client