Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          UK2z9xxTgPogu0qpsBJxYqR0jx8XvRIjKHQBz7H/neM=
Subject key identifier:   14:F2:48:63:1D:7E:09:4D:B9:4E:FA:5A:2A:1E:E8:E7:EC:66:C7:D7
Certificate issuer:       /CN=252608E1AF372BD4691CB17C734D43ADB468E835
Certificate serial:       7AEE1BFD62190D2039DC007B964740C3EE6971C8
Authority key identifier: 25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
Signing time:             Mon 26 May 2025 13:58:54 +0000
ROA not before:           Mon 26 May 2025 13:53:54 +0000
ROA not after:            Mon 25 May 2026 13:58:54 +0000
asID:                     265342
IP address blocks:        168.181.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ee:1b:fd:62:19:0d:20:39:dc:00:7b:96:47:40:c3:ee:69:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252608E1AF372BD4691CB17C734D43ADB468E835
        Validity
            Not Before: May 26 13:53:54 2025 GMT
            Not After : May 25 13:58:54 2026 GMT
        Subject: CN=14F248631D7E094DB94EFA5A2A1EE8E7EC66C7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:1a:bf:c4:64:ea:64:9f:98:09:cb:47:a5:
                    c3:83:ff:32:68:b4:3f:42:de:a7:d1:1b:cb:94:6e:
                    98:1e:86:97:22:43:6c:e2:8d:6f:90:02:ad:55:e8:
                    54:c5:1b:f0:f5:a8:4a:fe:db:76:48:72:80:f1:8b:
                    6d:ff:00:a6:df:60:1b:68:14:21:c3:42:37:d1:55:
                    a2:27:bb:48:da:7d:a4:25:36:2e:b3:1b:d4:24:ed:
                    cd:18:de:ea:d5:5c:27:82:47:e2:bc:20:45:5f:59:
                    65:de:e6:6d:6c:c5:69:4b:ea:ac:03:76:33:03:24:
                    82:c9:4f:60:51:a9:0f:1a:a3:86:bd:8d:5d:c3:3e:
                    f0:28:e7:2b:79:da:79:07:7a:e3:a8:2f:bc:5d:c5:
                    9c:e4:6c:3e:03:46:ad:f7:1e:0f:ca:29:8f:1e:b5:
                    12:57:19:5c:ac:a2:3b:e4:0f:d0:ec:fd:26:06:27:
                    b0:29:cc:57:66:2a:b9:1a:38:da:db:81:34:b5:16:
                    8d:33:05:8d:37:5a:40:27:22:ee:f1:54:87:b6:49:
                    fd:2f:87:e3:1e:71:b5:c5:ed:66:17:0f:7d:7f:78:
                    8e:33:b1:79:4d:a5:85:db:92:31:06:1f:e1:ef:45:
                    c9:d6:c0:55:da:bd:c8:ce:1f:21:bb:1d:02:d8:40:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F2:48:63:1D:7E:09:4D:B9:4E:FA:5A:2A:1E:E8:E7:EC:66:C7:D7
            X509v3 Authority Key Identifier:
                keyid:25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ea:3a:1f:96:b0:1c:57:0f:7a:f9:a4:4b:e4:25:45:1d:b2:
         06:80:84:41:05:60:c3:d7:5e:d1:86:00:db:0f:72:78:90:2f:
         19:35:3d:df:3c:1f:77:c5:b4:73:07:9b:28:56:1e:3b:0b:e9:
         9f:9a:dd:5b:32:6a:e0:9e:2f:c6:7b:9e:0e:15:a3:af:9a:04:
         24:fb:b3:ec:cc:73:cb:78:3d:56:02:6e:d4:1f:06:ae:f3:6a:
         ce:04:d6:7a:32:31:09:e5:5f:b6:90:13:21:3b:7e:a3:c0:86:
         0e:d7:09:14:88:f9:2d:2c:94:34:31:76:09:f5:9e:90:29:ef:
         4d:b0:06:0f:8c:8f:5e:bc:e1:08:e0:1f:2b:ac:00:cd:75:ef:
         56:f8:fd:05:21:16:ca:42:43:4c:aa:23:8e:16:28:5b:8b:22:
         fe:f6:ab:7d:b1:1b:9a:32:3d:71:62:e7:83:32:29:3e:0a:bf:
         6d:1d:22:cb:53:02:33:95:41:3f:cb:10:dc:9b:29:25:6b:70:
         71:e8:32:fd:40:70:da:3f:d4:d1:08:7d:1d:75:5f:14:44:f8:
         dc:27:b8:fc:db:ef:00:c3:ee:28:88:e7:13:7a:d4:c7:19:aa:
         e9:0e:26:b6:0b:82:20:70:f4:f6:d2:87:fd:48:e0:97:55:aa:
         fc:cb:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:33 2025 by rpki-client