Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136382e3139362e342e302f32322d3234203d3e20323634353038.roa
File:                     3136382e3139362e342e302f32322d3234203d3e20323634353038.roa (raw, json)
Hash identifier:          +aZvaW0UF/TiWgTM4PsCd55b6l7vX+zMulPHEnXbCgo=
Subject key identifier:   16:37:36:EE:0E:3E:3B:6F:37:86:FB:F8:41:5A:D4:C7:9F:03:A5:E7
Certificate issuer:       /CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
Certificate serial:       7D9B17E58E22B40C4A77715CC3D1848727FA504C
Authority key identifier: E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136382e3139362e342e302f32322d3234203d3e20323634353038.roa
Signing time:             Mon 28 Apr 2025 22:18:37 +0000
ROA not before:           Mon 28 Apr 2025 22:13:37 +0000
ROA not after:            Mon 27 Apr 2026 22:18:37 +0000
asID:                     264508
IP address blocks:        168.196.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl
                          rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 05:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9b:17:e5:8e:22:b4:0c:4a:77:71:5c:c3:d1:84:87:27:fa:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
        Validity
            Not Before: Apr 28 22:13:37 2025 GMT
            Not After : Apr 27 22:18:37 2026 GMT
        Subject: CN=163736EE0E3E3B6F3786FBF8415AD4C79F03A5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:32:37:63:fd:de:b1:9d:b1:b4:8f:f6:5f:
                    b1:9b:18:01:8c:32:75:ab:e0:71:c9:68:0b:0c:e3:
                    75:79:a5:3d:87:ba:21:5c:4b:b3:e4:1a:36:44:da:
                    18:b8:9b:21:d1:6b:33:b6:9b:8d:51:e6:41:49:fb:
                    51:dc:84:c8:e0:c3:f2:fc:fe:79:1d:bb:1a:0a:1a:
                    b1:ee:dd:1c:bc:5b:62:60:66:47:59:5b:36:3b:59:
                    f6:33:e1:e2:ee:75:ef:1c:1f:73:8d:17:7c:e3:62:
                    87:59:a6:27:cf:c8:41:2d:b3:e6:03:ca:0a:64:90:
                    18:24:76:84:1a:17:e4:61:e1:84:18:ea:dd:cd:68:
                    54:ab:ef:3e:9e:f2:ca:cf:8a:7a:11:72:df:c4:d8:
                    bb:5b:ec:a5:a8:5f:3d:a4:c2:8b:20:63:c3:b6:99:
                    08:f8:c4:d7:46:2a:fc:02:8c:88:42:6a:62:f6:da:
                    42:36:26:81:17:a0:5f:7f:4b:7c:90:bc:49:e0:73:
                    32:68:0f:2a:fa:bd:4a:57:97:ab:17:7d:26:d4:47:
                    f0:67:f7:8e:62:ca:6a:9b:1d:93:fa:fb:ea:63:86:
                    2d:5f:e5:2e:2a:69:be:28:98:db:45:b4:fe:e0:fa:
                    11:ca:d2:fe:1b:c4:a9:ef:1d:eb:36:24:b1:3d:35:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:36:EE:0E:3E:3B:6F:37:86:FB:F8:41:5A:D4:C7:9F:03:A5:E7
            X509v3 Authority Key Identifier:
                keyid:E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136382e3139362e342e302f32322d3234203d3e20323634353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:7a:93:61:54:cf:2b:0c:f2:5e:e1:38:f1:69:84:cf:22:
         86:db:8f:19:d3:aa:94:c2:7b:41:1f:79:9d:ed:1a:61:74:07:
         b5:e2:fa:a4:ff:89:3d:e5:4b:6a:a2:72:08:b8:7e:9d:fa:1b:
         b5:b3:ac:90:47:7a:ab:84:3a:40:d6:2c:84:c1:8b:f6:13:a4:
         65:2d:bf:3d:ba:be:a1:50:4a:f6:49:b3:11:cf:ac:d5:fd:ae:
         bf:bf:45:00:20:44:15:8d:10:38:df:74:5e:88:3c:ef:3d:dd:
         13:a5:60:a0:cd:7d:5d:20:33:df:ad:2e:37:74:f7:14:3b:09:
         4e:75:a6:81:6b:9b:9e:06:02:04:d8:07:05:e3:ca:da:51:28:
         82:03:ba:8a:1d:e3:f6:76:bd:ec:48:6a:22:9f:ab:0e:8c:19:
         45:65:66:59:b3:0b:87:5a:1e:f9:84:da:f8:6b:98:b7:8f:93:
         3d:07:7a:de:47:60:0c:06:5f:38:3c:55:94:64:4f:09:a1:f9:
         73:0f:13:47:86:45:5f:71:5e:49:b2:f7:4f:39:c6:57:83:6f:
         d6:20:39:19:cf:ff:dd:34:95:47:05:48:ce:72:ea:4a:18:c6:
         16:e4:c9:6f:69:33:b9:6f:b2:d5:18:01:3f:c8:cd:df:4d:16:
         ec:74:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:56:41 2025 by rpki-client