Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa
File:                     3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa (raw, json)
Hash identifier:          DgU+aV4lyYzJWrOKhPbfHrAjbM8lWCqrM2sZoTQA3qI=
Subject key identifier:   94:C4:D5:AB:0C:6E:7A:D1:0D:B8:C4:4F:A2:E8:02:D9:9F:D3:1C:9B
Certificate issuer:       /CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
Certificate serial:       54F5C682ABCA4DFFCC1BDBB832930AC03E768DBC
Authority key identifier: 7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa
Signing time:             Thu 06 Mar 2025 09:16:58 +0000
ROA not before:           Thu 06 Mar 2025 09:11:58 +0000
ROA not after:            Thu 05 Mar 2026 09:16:58 +0000
asID:                     265937
IP address blocks:        164.163.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl
                          rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f5:c6:82:ab:ca:4d:ff:cc:1b:db:b8:32:93:0a:c0:3e:76:8d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
        Validity
            Not Before: Mar  6 09:11:58 2025 GMT
            Not After : Mar  5 09:16:58 2026 GMT
        Subject: CN=94C4D5AB0C6E7AD10DB8C44FA2E802D99FD31C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:90:1d:a7:65:aa:07:77:1f:3f:30:0f:fa:
                    67:6c:4a:c1:d7:cf:8f:6e:6e:83:60:76:66:dc:b6:
                    f4:17:91:9f:a0:ce:1f:a6:33:3f:e0:d1:3d:75:43:
                    ae:30:b5:46:85:6b:c3:f2:7e:19:1f:59:e4:0e:9d:
                    19:76:9e:c6:43:0e:1d:8d:71:99:e4:84:1f:f4:05:
                    f4:49:a4:b8:58:f3:00:80:1a:42:28:57:be:51:3e:
                    04:ac:28:d2:14:c9:c8:22:ae:ee:66:2e:e1:a7:65:
                    78:a3:85:a9:81:22:76:1c:71:d5:30:cf:df:76:f1:
                    fa:1e:24:cb:b7:15:a3:20:af:38:68:10:3d:1c:d3:
                    49:6c:8a:66:b5:cd:8c:f1:ec:aa:76:d6:e2:16:ab:
                    39:c9:50:8c:f9:fe:c4:ee:09:8d:80:7e:ea:4b:6f:
                    27:94:f6:3f:0e:fa:7f:cb:83:f6:59:43:17:90:6a:
                    a1:52:50:8a:3a:70:d8:17:a0:fd:d6:a6:b9:4f:6a:
                    8a:ee:6b:56:6d:8e:a1:69:ed:14:eb:4f:9e:36:a3:
                    77:76:b4:e7:3f:fe:34:2e:28:58:ee:ec:83:af:32:
                    4f:22:ca:52:85:07:33:48:68:37:79:44:fa:0a:9b:
                    91:39:a5:a1:9f:64:07:26:b6:f9:38:2e:a5:0b:80:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:D5:AB:0C:6E:7A:D1:0D:B8:C4:4F:A2:E8:02:D9:9F:D3:1C:9B
            X509v3 Authority Key Identifier:
                keyid:7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:af:93:84:a7:69:4a:d3:10:2a:cd:40:f0:ef:d0:3b:f9:
         c5:fd:2d:31:92:d7:4c:33:21:d4:ba:8f:37:08:9f:d4:72:05:
         9e:ca:86:8c:fb:0c:43:f8:30:ad:37:96:31:b0:71:0f:91:2f:
         e7:43:c7:e9:46:b0:c0:3d:70:54:63:ab:08:3c:2c:5b:eb:f8:
         fc:f7:fa:11:63:32:a2:01:22:09:4b:04:d7:ea:fa:7f:73:89:
         f6:bb:ce:41:c3:f5:a0:91:e5:e5:e4:82:18:51:e0:29:2d:99:
         9e:aa:50:e6:8b:f2:f4:bf:eb:cc:dc:80:d6:7f:c9:c9:c9:a6:
         2e:ea:7d:40:9d:93:02:09:18:de:22:86:8d:e2:cb:2b:a6:41:
         bc:8e:b3:49:0b:0f:9d:2a:0e:4e:0a:b5:bd:94:10:25:04:a2:
         ca:6a:d1:d6:d9:7a:d1:a2:0d:35:94:d8:45:a6:f5:46:16:c0:
         70:88:89:33:06:18:ea:f5:dd:6e:04:8f:ae:e8:2c:a7:02:05:
         d1:af:be:cc:e6:9e:34:9c:d7:f7:c0:c5:38:73:98:1c:12:87:
         23:ce:d8:c0:f2:6e:23:18:71:8b:c0:f9:d9:46:6a:b8:38:ef:
         df:80:ad:08:dc:7c:1c:87:aa:2d:7a:06:f7:f8:34:48:1b:58:
         3b:56:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:45:27 2025 by rpki-client