Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          W1r3cqlSD4iszTyfEwFtM3nfuxGeUvQVX838l9i2eGg=
Subject key identifier:   5B:55:13:DE:72:AD:7A:60:AE:3D:46:4C:62:B7:A9:99:CA:27:16:2E
Certificate issuer:       /CN=252608E1AF372BD4691CB17C734D43ADB468E835
Certificate serial:       17F8CA961720B8A36FD0FA7632E622335A162D41
Authority key identifier: 25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa
Signing time:             Mon 26 May 2025 13:58:54 +0000
ROA not before:           Mon 26 May 2025 13:53:54 +0000
ROA not after:            Mon 25 May 2026 13:58:54 +0000
asID:                     265342
IP address blocks:        168.181.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f8:ca:96:17:20:b8:a3:6f:d0:fa:76:32:e6:22:33:5a:16:2d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252608E1AF372BD4691CB17C734D43ADB468E835
        Validity
            Not Before: May 26 13:53:54 2025 GMT
            Not After : May 25 13:58:54 2026 GMT
        Subject: CN=5B5513DE72AD7A60AE3D464C62B7A999CA27162E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:1f:2e:16:b5:4c:97:17:28:5e:a8:91:0a:
                    76:2f:e6:4f:ef:09:6e:52:6f:5b:17:ae:42:0d:49:
                    71:bd:ab:50:40:98:8e:45:47:5c:1d:1d:6d:6e:42:
                    33:cd:2f:88:c7:b9:42:10:ab:d7:aa:42:02:f5:36:
                    ff:b7:b9:f5:8e:dc:00:15:ff:14:4e:50:a1:55:d7:
                    04:92:e1:71:87:ce:3d:f7:c5:58:a5:7f:99:d4:38:
                    19:d1:c4:4b:c6:4b:8b:ed:00:67:cf:92:a8:ba:55:
                    28:5d:38:c3:26:d1:2c:8d:16:dc:9d:ca:ae:04:b8:
                    fa:d7:5b:35:20:dd:0c:fe:bf:bd:07:dc:59:78:f5:
                    7e:77:53:7c:5e:87:01:93:a0:d9:49:09:3b:99:22:
                    10:1e:e5:46:2b:8e:91:18:cd:58:f8:f3:06:b2:21:
                    2d:8f:10:16:43:82:75:e6:2b:e7:ea:7d:f2:b7:9a:
                    25:00:75:91:02:15:99:5d:a6:f9:b0:a2:bd:9d:cd:
                    e4:97:0f:0f:96:dd:a4:f7:e1:59:8f:4a:74:8a:a4:
                    62:74:16:fc:b5:3b:0b:68:57:b3:c2:2e:a5:b3:7b:
                    f7:c0:db:df:25:e0:43:18:77:d2:ce:1d:90:38:64:
                    b7:f3:de:9f:d8:9b:ba:ea:5d:67:bf:69:d3:d1:f8:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:55:13:DE:72:AD:7A:60:AE:3D:46:4C:62:B7:A9:99:CA:27:16:2E
            X509v3 Authority Key Identifier:
                keyid:25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137322e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:a6:3d:ba:ae:cc:b4:f2:5d:da:7e:75:46:4b:01:bd:38:
         c7:1e:74:ea:54:76:09:a8:1e:e9:0c:c1:6f:37:51:b6:1b:86:
         3d:d2:1d:76:3f:e6:32:65:62:34:35:a6:29:df:45:e1:07:a9:
         7b:7f:d8:f0:80:6a:d7:e8:34:ff:0b:c7:fb:80:44:c7:d7:4b:
         df:34:71:18:64:3d:f5:e3:f1:8b:d9:b9:cd:50:8a:e9:63:04:
         a1:53:73:8b:77:c4:45:ca:a8:34:53:9d:7e:96:ed:ca:c1:12:
         35:67:49:04:d8:17:a4:b6:04:27:f7:a2:b9:64:58:e9:58:e0:
         24:8f:a5:04:ff:02:63:12:00:41:12:2d:d8:f2:ea:5a:a9:03:
         1d:b8:43:35:aa:77:6d:35:4f:74:c8:e3:e5:c8:cb:44:0a:36:
         98:4e:9d:42:5f:e4:1c:0a:c2:19:20:ad:df:cd:9c:ff:00:28:
         6b:b2:a3:74:63:07:a2:2e:66:c3:e2:c1:4a:b2:70:87:a5:05:
         5d:c2:24:b6:94:ec:3d:0a:b6:a5:c2:ee:10:4e:03:71:d0:17:
         aa:3e:02:cf:a1:02:e8:8c:f5:f8:ad:84:a4:29:d2:8a:cc:c6:
         d6:83:f3:26:12:6f:54:96:5f:a6:b0:0e:da:9e:1e:be:a4:8d:
         09:eb:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:10:35 2025 by rpki-client