Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/3136382e3233322e3138382e302f32322d3234203d3e20323634323735.roa
File:                     3136382e3233322e3138382e302f32322d3234203d3e20323634323735.roa (raw, json)
Hash identifier:          eepfNPif+o/kS3Bydt5ST2D6jnf/fTrhDBk9GCilxx0=
Subject key identifier:   29:0B:74:0E:68:E8:E8:80:B2:FC:7D:AD:4E:83:45:32:3A:A4:08:05
Certificate issuer:       /CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
Certificate serial:       7A60944F2D5D4E19D8F8C259A49C29866765BBD7
Authority key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/3136382e3233322e3138382e302f32322d3234203d3e20323634323735.roa
Signing time:             Wed 15 Jan 2025 23:06:57 +0000
ROA not before:           Wed 15 Jan 2025 23:01:57 +0000
ROA not after:            Wed 14 Jan 2026 23:06:57 +0000
asID:                     264275
IP address blocks:        168.232.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl
                          rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:60:94:4f:2d:5d:4e:19:d8:f8:c2:59:a4:9c:29:86:67:65:bb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
        Validity
            Not Before: Jan 15 23:01:57 2025 GMT
            Not After : Jan 14 23:06:57 2026 GMT
        Subject: CN=290B740E68E8E880B2FC7DAD4E8345323AA40805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:1f:80:b6:39:5e:dd:b8:11:bd:1d:99:d3:
                    55:af:11:ed:dc:5e:7e:14:07:18:6f:e7:f6:0c:69:
                    4b:7e:4d:35:29:44:23:fb:fe:a7:a6:72:46:84:49:
                    03:3e:cd:57:6b:df:c8:5c:8f:1c:32:43:74:60:c7:
                    4a:95:45:d3:b6:a9:f3:6e:40:1c:e7:5e:d2:8b:8a:
                    70:95:aa:a7:ce:44:ba:18:2b:f0:f1:ed:42:49:5d:
                    ae:19:ec:25:c7:ee:d2:3e:f3:05:26:94:b1:b2:42:
                    a5:bc:3e:2f:2b:c9:af:fa:08:06:5d:8f:d0:3f:82:
                    a1:e6:79:6f:c9:eb:1d:21:a8:f9:ff:42:14:5b:16:
                    8c:bf:70:55:c5:8e:51:3a:b9:5a:ef:96:dd:77:e6:
                    d1:35:60:3e:2c:81:db:92:88:40:57:3f:0e:b2:06:
                    79:24:fb:43:cb:f8:67:86:aa:7f:de:09:36:9c:e7:
                    e9:87:93:c9:6a:51:a1:49:b3:74:99:a2:4b:b4:2a:
                    7b:dd:f7:f5:73:48:0a:c7:7f:7b:10:29:d5:12:7c:
                    3b:c0:16:ae:cf:70:06:f2:43:f9:56:98:70:e4:eb:
                    f3:69:d3:35:d2:4c:b9:71:30:ed:98:14:bc:2f:d6:
                    f6:69:93:b7:30:47:f3:73:a6:17:95:94:48:5c:c6:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:74:0E:68:E8:E8:80:B2:FC:7D:AD:4E:83:45:32:3A:A4:08:05
            X509v3 Authority Key Identifier:
                keyid:D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/3136382e3233322e3138382e302f32322d3234203d3e20323634323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:ff:ac:e2:e4:1a:2f:b1:69:fd:07:09:a2:e6:d3:54:ff:
         3e:91:1b:c8:a3:3a:06:18:74:b0:a8:c3:65:13:25:36:38:dc:
         b2:b0:ae:71:e8:ce:2a:ad:d9:f2:da:5c:ba:75:6d:c8:fd:9e:
         13:16:2f:02:e4:f9:48:35:73:89:9a:e7:fb:40:18:a5:f7:8d:
         42:0b:a2:a7:df:75:82:2c:fd:b9:88:31:44:2c:4e:6f:dd:7f:
         b4:9f:46:9f:e3:8f:60:e6:23:f7:3e:54:dd:b7:84:64:96:03:
         2c:f1:af:12:ae:09:88:f8:37:f1:42:c1:80:37:d8:9f:9f:2c:
         35:09:48:90:54:80:cf:a3:49:48:d3:38:81:1c:a0:5f:81:a4:
         74:e2:e2:fe:cc:c2:a5:eb:67:b0:13:26:d3:2e:d4:e6:1e:f6:
         ab:25:2c:f1:77:c0:7d:6e:50:2e:b3:49:b8:9a:ed:51:b2:16:
         c4:db:21:80:40:27:3c:90:fb:17:7b:a3:7d:ab:15:a5:bf:eb:
         ff:a2:8c:5d:90:84:8e:0a:17:c2:52:15:14:a6:5e:45:5a:7c:
         67:be:34:3a:bd:c8:5f:85:65:65:a4:23:9f:09:36:f6:62:b7:
         73:23:4b:59:11:2b:17:40:6d:28:ef:85:8a:20:09:6c:54:53:
         50:3d:95:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:24:17 2025 by rpki-client