Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa
File:                     3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa (raw, json)
Hash identifier:          xdwwxOAusqXilLSOgJfE7kptJAn1ftlT1qU4Y3nCifI=
Subject key identifier:   E1:82:F3:FD:27:84:79:9F:2A:4D:8C:75:7C:46:09:B7:FB:91:62:D6
Certificate issuer:       /CN=252608E1AF372BD4691CB17C734D43ADB468E835
Certificate serial:       509E9D5AE56B7C77CB6937787C73A4270BCAAF04
Authority key identifier: 25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa
Signing time:             Mon 26 May 2025 13:58:54 +0000
ROA not before:           Mon 26 May 2025 13:53:54 +0000
ROA not after:            Mon 25 May 2026 13:58:54 +0000
asID:                     265342
IP address blocks:        168.181.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9e:9d:5a:e5:6b:7c:77:cb:69:37:78:7c:73:a4:27:0b:ca:af:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252608E1AF372BD4691CB17C734D43ADB468E835
        Validity
            Not Before: May 26 13:53:54 2025 GMT
            Not After : May 25 13:58:54 2026 GMT
        Subject: CN=E182F3FD2784799F2A4D8C757C4609B7FB9162D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:ef:8f:48:96:78:e6:08:b8:19:b0:c5:f4:
                    bc:98:eb:ef:fd:ee:7a:b8:18:fb:d5:1e:0a:aa:2a:
                    ed:97:97:4a:bc:53:c0:de:f3:f7:3f:5a:2c:63:95:
                    f5:90:c9:52:33:36:fe:7f:84:3f:a4:7d:43:2c:3e:
                    56:73:95:80:c5:d0:96:45:72:c8:63:0d:38:55:8c:
                    f8:3b:01:ae:1b:c4:65:65:ab:82:bf:22:e8:4e:cf:
                    1f:2a:69:37:60:cc:34:0b:49:a8:6d:bc:3e:73:d4:
                    3d:e4:f7:e4:99:19:ee:f4:19:82:2a:d8:d7:d1:8a:
                    90:27:bf:33:10:27:3d:17:a6:d7:bb:05:61:13:71:
                    35:13:ed:ce:a8:9f:03:d6:6a:66:76:f1:40:97:24:
                    a1:1f:ec:45:ae:76:47:a1:6d:6d:c2:5a:50:2c:8b:
                    3b:46:5b:64:36:69:b5:3f:04:61:28:2a:87:5f:75:
                    3f:a0:61:5f:05:fe:58:96:41:6d:9d:68:70:91:c9:
                    34:98:09:ff:70:8b:17:36:5a:33:79:b8:a5:04:d0:
                    ba:c4:ac:5b:23:1b:78:93:7c:df:11:58:a0:a2:e3:
                    65:75:5a:92:eb:b8:81:bb:3f:a8:8f:b4:98:47:5c:
                    c4:aa:71:54:c7:3a:6e:f5:e1:00:40:2d:85:02:f8:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:82:F3:FD:27:84:79:9F:2A:4D:8C:75:7C:46:09:B7:FB:91:62:D6
            X509v3 Authority Key Identifier:
                keyid:25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32322d3232203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:79:97:b8:1a:e4:8c:d2:a5:49:80:f0:f0:28:eb:68:14:52:
         b0:54:bd:c3:6c:0e:f3:6a:3a:ea:c5:bf:ff:29:2d:b3:ea:ce:
         52:90:3f:d7:48:d2:ca:06:da:bd:cd:47:ef:04:95:d2:0f:14:
         86:18:81:7e:50:df:45:de:46:a6:ee:6b:aa:17:c3:20:55:31:
         92:b0:8d:ae:97:99:2a:6c:2a:2c:4b:3e:32:d8:fb:df:df:d2:
         85:31:42:93:bd:e6:a6:35:5e:24:57:a5:1b:0e:cb:8c:80:be:
         e1:84:86:5c:ba:ca:10:76:8b:30:dc:14:63:87:f6:62:1d:b7:
         5f:93:f8:3b:b7:53:14:92:e8:15:9a:84:f4:68:b5:40:44:7e:
         62:1e:b1:2e:22:24:58:aa:b6:fe:77:69:36:98:28:d4:11:51:
         64:6e:04:04:0d:af:3d:ac:27:a6:3d:bb:95:21:2d:a6:f9:af:
         29:23:39:79:2b:da:a1:79:bc:25:c5:4b:14:92:26:91:4e:ca:
         1a:07:1b:99:eb:17:0b:23:29:25:d4:34:e7:96:d1:86:03:f0:
         8a:11:b8:6a:0d:6c:17:ca:9e:6d:16:50:a7:6f:83:00:0e:6c:
         6c:ff:56:22:71:66:f4:a6:0b:93:1c:ca:a3:d9:9b:7d:46:dd:
         9e:d7:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:51:35 2025 by rpki-client