Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3136382e39302e32302e302f32322d3234203d3e203532353733.roa
File:                     3136382e39302e32302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          zFPxVEXlcoIKmTZJkD3G+PQtSlW1wmxQ2j951LxxjVk=
Subject key identifier:   5C:AF:49:3A:27:1B:EB:CD:3E:E3:B9:A1:6F:81:0D:FD:55:46:DE:26
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       0348FCC9D3F29DBEFCD927B895E349A97DDE7AEB
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3136382e39302e32302e302f32322d3234203d3e203532353733.roa
Signing time:             Sat 31 May 2025 14:17:05 +0000
ROA not before:           Sat 31 May 2025 14:12:05 +0000
ROA not after:            Sat 30 May 2026 14:17:05 +0000
asID:                     52573
IP address blocks:        168.90.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 16:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:48:fc:c9:d3:f2:9d:be:fc:d9:27:b8:95:e3:49:a9:7d:de:7a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: May 31 14:12:05 2025 GMT
            Not After : May 30 14:17:05 2026 GMT
        Subject: CN=5CAF493A271BEBCD3EE3B9A16F810DFD5546DE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:5a:da:96:ce:1b:2a:2b:31:27:cf:a2:da:
                    36:2f:af:3c:c5:69:03:e5:68:ce:f6:ce:68:5f:45:
                    d6:2e:76:8e:00:c6:35:fe:9f:88:24:d3:26:6c:7c:
                    3a:06:61:db:5b:ec:45:05:bd:fa:ae:b4:50:e1:c4:
                    75:b4:6e:f7:22:b7:e4:32:de:ad:a7:c2:f6:30:d4:
                    88:59:f9:98:ab:52:c8:74:8e:e6:26:17:40:ec:8d:
                    cc:3a:94:3d:19:c8:c2:08:f7:83:63:fc:37:a0:43:
                    53:77:f3:1c:48:16:88:74:68:6c:f6:69:e0:76:ef:
                    e4:1d:1d:a7:3a:96:fe:7e:12:a5:69:a3:e0:3f:6e:
                    92:ee:86:67:f8:1b:e5:66:e3:b2:f0:3b:30:d9:af:
                    8a:75:8c:b4:a7:8b:b6:43:62:de:30:c1:42:6e:a0:
                    50:1c:30:d5:93:2c:0f:1b:f5:9c:c2:a3:08:cf:63:
                    0b:bb:59:52:71:00:a4:a3:5a:53:91:9b:9c:24:b1:
                    42:ec:4e:ae:bf:a2:c9:f5:df:8a:1f:44:c3:e5:d5:
                    d7:bf:61:bd:a2:13:68:81:dc:32:e7:38:b4:6f:67:
                    3f:bb:b2:95:94:f6:00:8c:49:79:cc:b4:4c:db:b1:
                    88:98:b6:ec:bb:b7:ea:7f:1b:fd:c4:54:93:3c:d4:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:49:3A:27:1B:EB:CD:3E:E3:B9:A1:6F:81:0D:FD:55:46:DE:26
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3136382e39302e32302e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:85:62:4b:f5:e0:63:98:73:57:9a:ad:96:82:b4:28:ec:5a:
         ac:87:c3:81:d2:02:cb:bc:fe:55:4e:17:23:d8:f7:b3:04:42:
         71:87:3b:06:18:94:01:28:b5:5c:fd:c6:6f:b1:cc:d1:e2:ac:
         94:18:29:03:5f:fd:19:53:0a:de:97:db:a3:f7:51:78:d4:71:
         66:44:eb:95:d1:46:c8:48:24:8b:b5:ce:91:0a:af:66:df:5b:
         cb:25:0a:e4:d9:c2:4a:ef:96:ac:52:5c:9a:f1:4d:ef:37:90:
         aa:ce:3b:71:cc:73:34:20:11:a7:9e:df:11:f5:cb:a6:26:be:
         1d:82:a6:9c:12:45:01:b0:6b:59:a7:0b:e2:d1:e7:e8:83:7b:
         b5:d8:46:5c:3f:b8:7e:7f:13:8a:a1:c2:81:48:c5:ad:37:13:
         40:91:70:38:cf:1e:09:9f:ea:63:f9:d3:91:74:bb:57:3f:9c:
         c0:24:3e:56:be:b5:d3:27:c0:3d:99:89:41:2a:6c:36:c5:63:
         ee:f2:b7:a5:a5:eb:4e:94:a4:e5:29:07:1a:43:ac:f5:c0:43:
         ec:d9:41:9f:6a:be:b6:73:c7:28:fb:f9:52:42:c8:f3:a1:42:
         01:33:ff:69:28:66:53:03:0a:f1:1c:51:4a:76:03:46:30:23:
         d3:b9:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:52:44 2025 by rpki-client