Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3234203d3e20323635323239.roa
File:                     3136382e302e35322e302f32322d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          94PbAC9QCVjSyj+1KqtdXSNRQLAOxvMZWYxmLMpo9y0=
Subject key identifier:   5D:72:E4:3D:42:A3:BC:98:F4:E4:3B:04:76:37:55:6F:34:32:4B:8A
Certificate issuer:       /CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
Certificate serial:       425A1303B265E3A173A382D25485DB92C8001EDB
Authority key identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3234203d3e20323635323239.roa
Signing time:             Fri 30 May 2025 22:09:05 +0000
ROA not before:           Fri 30 May 2025 22:04:05 +0000
ROA not after:            Fri 29 May 2026 22:09:05 +0000
asID:                     265229
IP address blocks:        168.0.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl
                          rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 14:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5a:13:03:b2:65:e3:a1:73:a3:82:d2:54:85:db:92:c8:00:1e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
        Validity
            Not Before: May 30 22:04:05 2025 GMT
            Not After : May 29 22:09:05 2026 GMT
        Subject: CN=5D72E43D42A3BC98F4E43B047637556F34324B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:5d:c5:29:3d:83:ec:14:56:07:c4:7f:8b:
                    8a:20:71:89:c9:4e:6c:24:3b:82:12:a6:f0:40:c9:
                    7f:4b:04:50:73:0e:4e:cc:c9:01:93:78:20:50:1f:
                    a7:72:90:23:5c:64:09:db:67:1e:c5:fe:ac:3b:aa:
                    7f:d1:50:94:c8:f3:cb:9f:1a:62:a9:65:1f:16:07:
                    71:fd:8e:34:65:11:db:2f:f5:42:07:4f:0d:0b:56:
                    4e:f5:95:9f:85:70:20:60:88:dd:0b:a5:3a:86:e0:
                    b6:0f:69:ca:bb:0a:cf:f0:59:e5:31:0c:8c:cd:14:
                    b5:44:6d:84:43:65:28:76:ed:9a:91:af:c2:9d:0c:
                    e3:6f:3a:70:68:8c:a2:22:d3:37:c4:c1:f3:4c:dd:
                    d4:2b:b5:53:22:46:09:23:0a:0e:fd:06:a5:b7:b0:
                    63:c9:c3:59:eb:8d:69:07:2f:74:d9:18:3b:7d:5d:
                    02:d5:1e:a6:d4:2c:b6:12:6a:c2:f0:64:5e:aa:9b:
                    62:ba:66:95:c8:1e:5f:c0:57:79:26:a8:5e:ae:8c:
                    43:b2:9a:2e:a3:28:59:74:d4:6a:fa:91:e9:b3:dd:
                    5a:77:fe:f8:30:44:47:b4:94:e7:94:05:72:4b:14:
                    19:13:18:ee:58:63:81:9c:5d:5d:8d:19:77:b8:0b:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:72:E4:3D:42:A3:BC:98:F4:E4:3B:04:76:37:55:6F:34:32:4B:8A
            X509v3 Authority Key Identifier:
                keyid:62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:75:40:66:af:a8:5f:43:31:e9:74:52:b8:af:56:8d:14:89:
         e0:4d:69:ee:05:a5:2a:27:c3:34:0e:a2:bd:5a:d7:0d:b2:df:
         e2:2c:16:76:8a:e5:3c:a2:3b:f6:51:a8:4d:83:ed:19:01:cc:
         33:9f:15:56:4c:9a:18:87:1f:9f:fe:ae:3f:2d:f7:b1:5c:ab:
         72:9a:d0:11:39:18:af:a8:30:74:45:a0:a6:78:c0:97:75:58:
         9e:4f:28:c3:61:d1:47:89:eb:3c:fb:60:20:d6:43:cc:74:af:
         54:a4:b5:f4:98:3a:20:a6:81:b8:e0:95:c6:2b:45:39:9e:72:
         55:f7:d8:d9:24:e2:28:05:54:8f:f4:7d:74:bf:71:dc:8c:a3:
         3a:ae:73:78:e9:14:f5:63:2e:42:c2:7f:f9:68:42:3b:1b:e6:
         7f:6e:bd:e7:2c:3e:98:4f:27:7b:59:4f:d9:5a:90:6f:03:bc:
         4d:8a:14:90:cb:bb:82:79:4e:63:7c:53:7a:2c:0d:7d:62:fa:
         4b:ba:19:1c:06:1a:e8:c6:4e:b7:21:cf:59:f3:8f:06:21:ea:
         3a:6e:f7:90:f3:dc:9d:58:1d:e6:9d:74:8e:59:c3:bc:75:f9:
         64:ab:39:e8:28:08:00:1f:f8:6b:21:04:db:bc:2c:6c:76:fd:
         52:01:e7:b4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUQloTA7Jl46Fzo4LSVIXbksgAHtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFM0RBRjJCQTBBRjg4RjEzRTZEOEI4QTZCNDZBMzE4
MjI2NjU2QTAeFw0yNTA1MzAyMjA0MDVaFw0yNjA1MjkyMjA5MDVaMDMxMTAvBgNV
BAMTKDVENzJFNDNENDJBM0JDOThGNEU0M0IwNDc2Mzc1NTZGMzQzMjRCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQF3FKT2D7BRWB8R/i4ogcYnJ
TmwkO4ISpvBAyX9LBFBzDk7MyQGTeCBQH6dykCNcZAnbZx7F/qw7qn/RUJTI88uf
GmKpZR8WB3H9jjRlEdsv9UIHTw0LVk71lZ+FcCBgiN0LpTqG4LYPacq7Cs/wWeUx
DIzNFLVEbYRDZSh27ZqRr8KdDONvOnBojKIi0zfEwfNM3dQrtVMiRgkjCg79BqW3
sGPJw1nrjWkHL3TZGDt9XQLVHqbULLYSasLwZF6qm2K6ZpXIHl/AV3kmqF6ujEOy
mi6jKFl01Gr6kemz3Vp3/vgwREe0lOeUBXJLFBkTGO5YY4GcXV2NGXe4CwfJAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUXXLkPUKjvJj05DsEdjdVbzQyS4owHwYDVR0j
BBgwFoAUYuPa8roK+I8T5ti4prRqMYImZWowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRV
LzAvNjJFM0RBRjJCQTBBRjg4RjEzRTZEOEI4QTZCNDZBMzE4MjI2NjU2QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MkUzREFGMkJBMEFGODhGMTNF
NkQ4QjhBNkI0NkEzMTgyMjY2NTZBLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
QTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRVLzAvMzEz
NjM4MmUzMDJlMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTMyMzIz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqgANDANBgkqhkiG9w0BAQsFAAOCAQEAbnVAZq+oX0Mx6XRS
uK9WjRSJ4E1p7gWlKifDNA6ivVrXDbLf4iwWdorlPKI79lGoTYPtGQHMM58VVkya
GIcfn/6uPy33sVyrcprQETkYr6gwdEWgpnjAl3VYnk8ow2HRR4nrPPtgINZDzHSv
VKS19Jg6IKaBuOCVxitFOZ5yVffY2STiKAVUj/R9dL9x3IyjOq5zeOkU9WMuQsJ/
+WhCOxvmf2695yw+mE8ne1lP2VqQbwO8TYoUkMu7gnlOY3xTeiwNfWL6S7oZHAYa
6MZOtyHPWfOPBiHqOm73kPPcnVgd5p10jlnDvHX5ZKs56CgIAB/4ayEE27wsbHb9
UgHntA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 03:22:34 2025 by rpki-client