Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          7B7Fy3quN27cshIlcaDrsnodPpLBg3roEuqA5m5s2YM=
Subject key identifier:   8D:DD:0F:13:9F:0C:40:28:D6:C3:4E:3A:45:BC:56:29:92:0F:70:AB
Certificate issuer:       /CN=252608E1AF372BD4691CB17C734D43ADB468E835
Certificate serial:       16C6EEDA104A276B879A09A5D84DEE5FEDE16702
Authority key identifier: 25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa
Signing time:             Mon 26 May 2025 13:58:54 +0000
ROA not before:           Mon 26 May 2025 13:53:54 +0000
ROA not after:            Mon 25 May 2026 13:58:54 +0000
asID:                     265342
IP address blocks:        168.181.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c6:ee:da:10:4a:27:6b:87:9a:09:a5:d8:4d:ee:5f:ed:e1:67:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252608E1AF372BD4691CB17C734D43ADB468E835
        Validity
            Not Before: May 26 13:53:54 2025 GMT
            Not After : May 25 13:58:54 2026 GMT
        Subject: CN=8DDD0F139F0C4028D6C34E3A45BC5629920F70AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:53:e8:33:84:0f:d8:b5:49:23:d0:a7:a1:
                    77:a3:03:bf:7f:1b:c5:d7:da:bd:b0:0a:5a:be:22:
                    50:cc:12:3d:60:c9:2b:ab:bc:da:83:0b:38:80:d6:
                    77:5f:ee:48:0b:02:2a:46:af:58:6c:7f:84:f9:cf:
                    ca:7d:eb:b2:55:04:56:b5:48:72:f3:e4:3d:5a:0d:
                    b4:50:fc:6b:d4:2d:72:8d:b6:5a:ba:79:a9:18:32:
                    86:16:07:e6:12:d4:9e:5c:16:14:29:64:84:bf:df:
                    cf:97:30:2a:e1:9e:df:c4:c1:29:bf:73:ce:8d:d3:
                    be:d6:b4:aa:c2:43:c1:0b:f6:55:ad:8c:1d:62:dc:
                    97:e5:1d:7f:d7:31:b4:a1:7a:63:3a:17:95:b6:c1:
                    7d:56:eb:ab:c8:12:c4:a8:cd:65:bd:e1:00:fe:9d:
                    88:ca:8f:21:06:dd:3b:f9:6e:19:cf:e6:48:9e:eb:
                    aa:87:cf:b6:57:45:6d:c6:dd:3d:ba:10:84:d9:c5:
                    a5:77:c4:37:42:f0:24:7d:98:64:7e:fe:ab:9f:82:
                    b3:d2:6f:93:b1:92:14:c6:7f:13:9d:85:ee:ef:62:
                    71:6d:d6:0f:6a:d6:29:15:bc:3e:fe:07:c0:35:16:
                    13:64:04:bc:43:e8:cd:0c:98:74:3c:77:70:a4:e3:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:0F:13:9F:0C:40:28:D6:C3:4E:3A:45:BC:56:29:92:0F:70:AB
            X509v3 Authority Key Identifier:
                keyid:25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:fe:b3:5a:8f:fd:9e:54:4c:2e:b1:bf:89:2e:4d:bd:5b:
         db:ec:aa:57:3e:b0:4c:a3:ba:6b:50:43:da:76:f9:32:20:dd:
         92:fe:f1:55:69:06:0a:15:3c:e9:62:2d:ef:c3:3b:ed:d5:5d:
         7b:87:7a:2e:84:21:de:ba:59:2b:6f:df:3f:59:d4:bf:d0:85:
         94:96:ef:eb:93:54:5b:3d:44:fd:3d:9e:e4:bb:05:3a:98:d4:
         23:21:9e:ef:ef:01:80:ba:f9:1a:6b:3a:a9:e4:51:35:27:66:
         22:5a:37:3c:b9:ab:7d:5c:6f:5f:8b:22:f9:cc:fa:9d:00:3c:
         8f:aa:a4:b5:7a:98:d5:08:07:61:46:c5:42:5d:e8:65:4c:64:
         55:33:fc:e4:cd:5b:31:9e:cb:12:fb:5f:ed:ce:c7:a5:86:2b:
         86:86:a2:8d:23:23:19:b9:7b:07:5e:03:72:99:7c:0f:2e:f4:
         d3:4f:3f:96:80:89:67:65:7b:c0:bc:cf:14:44:00:a4:a0:7b:
         de:43:a1:5c:01:29:ac:c0:ab:3c:ba:cf:01:9e:e6:e2:b8:3a:
         63:f9:98:36:38:2e:fb:d7:63:3f:8a:41:34:ad:d5:08:37:99:
         82:04:ed:35:e6:57:dc:ad:9f:9e:e3:95:d6:92:6c:dc:9d:d0:
         5f:dc:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:01:34 2025 by rpki-client