Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa
File:                     3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa (raw, json)
Hash identifier:          aUS/7J4Pj67EwEZgX/yZhudJTgk7N6LVXjibvG+tpX0=
Subject key identifier:   CF:66:16:21:1A:CD:AD:B1:C5:4D:EA:E6:04:96:A6:0B:75:BC:E4:B6
Certificate issuer:       /CN=2E870BD5A2AEB5F6053B769848A273709E6B62AD
Certificate serial:       5F0E493443EEE98A602076527E012A56F161548B
Authority key identifier: 2E:87:0B:D5:A2:AE:B5:F6:05:3B:76:98:48:A2:73:70:9E:6B:62:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa
Signing time:             Mon 19 May 2025 19:23:48 +0000
ROA not before:           Mon 19 May 2025 19:18:48 +0000
ROA not after:            Mon 18 May 2026 19:23:48 +0000
asID:                     265356
IP address blocks:        168.181.124.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0e:49:34:43:ee:e9:8a:60:20:76:52:7e:01:2a:56:f1:61:54:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E870BD5A2AEB5F6053B769848A273709E6B62AD
        Validity
            Not Before: May 19 19:18:48 2025 GMT
            Not After : May 18 19:23:48 2026 GMT
        Subject: CN=CF6616211ACDADB1C54DEAE60496A60B75BCE4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:ec:7a:c0:a0:e3:8b:a5:8a:74:cc:60:44:
                    26:af:4e:08:06:5e:6e:ce:55:86:b7:4a:3b:38:f9:
                    2d:f0:06:1c:50:0a:18:56:69:0e:bd:c3:fa:d8:a2:
                    be:b0:6e:a6:83:92:43:ed:85:8c:94:53:af:5d:49:
                    c8:f2:1e:da:7e:b8:8b:7c:d1:72:cd:36:2d:b1:c2:
                    3a:c4:de:fc:2e:55:20:dd:72:22:80:32:d9:88:0b:
                    97:95:03:16:bd:c2:12:cd:d5:34:16:b6:fe:ca:44:
                    52:b3:37:a9:cb:1c:45:3c:c2:d5:b0:5a:f8:c0:8d:
                    09:45:a8:c3:43:90:3b:17:50:d5:bf:da:c0:fe:fb:
                    1b:62:51:8a:15:e2:3e:49:d0:f7:a2:90:99:a9:a7:
                    27:35:be:16:42:9a:b8:26:9d:94:06:22:89:91:61:
                    b8:a0:98:16:5f:63:a2:0e:1f:57:d5:dd:de:08:7c:
                    fe:a5:e1:19:1a:fb:80:36:0b:71:4a:78:a8:54:37:
                    fd:7e:47:4f:0c:97:bd:a3:2b:f6:ce:9d:c0:6c:9e:
                    f0:d7:a7:40:15:d2:10:33:97:a5:3f:95:99:e0:0a:
                    46:83:ea:b7:4c:2b:bf:60:ea:f5:2f:0a:80:32:a4:
                    74:c9:ab:04:d0:50:a7:50:7f:25:cd:34:b0:46:50:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:16:21:1A:CD:AD:B1:C5:4D:EA:E6:04:96:A6:0B:75:BC:E4:B6
            X509v3 Authority Key Identifier:
                keyid:2E:87:0B:D5:A2:AE:B5:F6:05:3B:76:98:48:A2:73:70:9E:6B:62:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:47:13:88:43:29:35:65:2e:83:f7:53:72:53:b0:9c:a2:
         05:06:89:20:3c:69:9f:57:11:01:e2:61:34:35:6e:66:48:14:
         fe:8a:f8:c4:5a:61:ca:7f:20:03:57:0c:b0:9a:23:1e:f8:51:
         c0:41:2a:60:b7:f6:f5:27:91:21:83:c5:fc:1c:db:8c:76:ad:
         99:e9:bf:9d:92:ff:43:30:db:6f:55:2b:95:6f:2c:39:37:75:
         29:67:cd:9f:eb:02:d3:16:6b:e4:58:28:b6:da:0e:5c:61:fe:
         da:2d:2a:19:cc:62:5f:d4:91:fc:8e:6d:c2:94:1d:40:fd:93:
         6a:d0:73:81:39:8c:14:4f:dc:5e:2b:0f:64:0b:7f:50:4e:18:
         64:c9:2c:fd:27:90:7a:f1:fe:38:9e:64:09:08:27:1d:2c:84:
         0f:60:7f:98:e2:b7:59:a1:7f:14:ee:f3:2e:cd:b7:65:a9:11:
         1b:fa:41:0f:da:22:10:32:9b:e8:2a:db:9e:c5:fc:39:0d:84:
         13:d5:7f:a6:89:31:dd:9d:40:0d:b8:00:22:52:c0:7f:83:e8:
         6c:89:73:42:e8:cc:98:9f:ca:3f:51:50:33:19:01:d1:58:ae:
         bd:56:ca:f0:1e:05:90:f4:b7:12:66:64:51:56:91:d1:2c:d3:
         9e:57:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:10:35 2025 by rpki-client