Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa
File:                     3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          LGgXA6XC86Esb3HKzqijE5uy0M+CjpaI0iz53Jw3Db4=
Subject key identifier:   B8:C5:46:45:57:9D:CE:23:2A:B8:F5:BA:9F:7F:D7:1D:05:B6:3E:ED
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       3BA7D92DA280DCE4E6F332069F8E19FEEA5C039C
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        168.227.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a7:d9:2d:a2:80:dc:e4:e6:f3:32:06:9f:8e:19:fe:ea:5c:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:75:19:2c:9c:51:86:78:d8:50:93:a6:7d:
                    58:ae:29:47:c0:c1:29:5f:2e:7f:9d:2f:ce:69:97:
                    36:6e:3c:f0:79:25:46:0d:8c:97:da:13:b4:ce:54:
                    a7:f8:31:83:6b:a3:09:14:d1:84:0d:96:33:f4:9d:
                    72:f0:fd:39:44:41:13:19:ae:23:d7:8c:12:b0:05:
                    1a:ea:13:31:e5:6f:45:f8:61:15:ab:f4:04:ec:4b:
                    a2:ba:51:0f:29:aa:b1:19:bd:28:00:c2:81:71:9c:
                    86:b6:93:4a:bd:6e:ff:74:c0:62:3b:b9:07:f0:f2:
                    c5:a0:e0:7c:a9:f1:1b:51:67:d5:78:12:4f:e8:6d:
                    c1:ad:ec:4c:46:f2:79:04:c2:a7:92:e1:f7:3b:b5:
                    81:95:a9:a3:c0:76:dd:08:67:74:7c:8e:9e:90:10:
                    c5:00:98:c3:91:c4:f2:0c:f4:68:0b:74:c7:38:3c:
                    49:95:76:c5:c7:4b:46:23:23:b0:f0:c9:9b:f8:15:
                    12:ae:01:d3:0c:95:01:80:ec:fb:ac:ac:92:6d:13:
                    e8:b4:ee:a8:87:e4:f0:e3:a8:aa:9d:e9:2f:e1:8e:
                    6b:7d:ea:75:79:02:91:2c:e3:5a:ef:e8:20:34:73:
                    e2:10:a5:42:b8:64:9d:67:7d:0d:92:21:71:b6:f7:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C5:46:45:57:9D:CE:23:2A:B8:F5:BA:9F:7F:D7:1D:05:B6:3E:ED
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:36:92:33:17:25:8d:17:1d:59:80:16:85:ba:6d:d4:e2:d3:
         74:39:69:f9:d4:5f:69:ce:9a:2d:da:45:3e:d0:d2:ab:59:ac:
         07:e4:77:e5:0b:24:1d:dc:c8:3e:f8:0c:7a:2e:1f:fa:a9:82:
         12:ae:c1:6b:19:a6:70:fe:34:7c:5e:0f:9c:b4:b3:90:d0:67:
         2b:ee:85:34:77:a6:9f:ad:82:ee:ec:d2:96:62:70:0f:1d:ab:
         c1:86:6e:8f:c8:34:a7:92:04:17:57:53:ee:93:e2:a1:fd:07:
         30:61:85:95:11:73:5a:98:9a:23:b1:22:e9:5e:d2:e4:9b:2c:
         0a:36:5f:58:bf:c2:95:d8:76:e8:ff:a9:80:92:86:b5:d7:b9:
         28:15:9d:9c:e3:92:bf:4a:8d:da:de:c7:48:18:8b:8d:a7:69:
         a3:14:3f:61:d2:11:3e:b6:83:8b:fa:16:b5:9f:0a:75:39:75:
         e5:2d:02:68:f0:49:52:78:0c:f3:fc:d1:c8:7c:61:7a:88:16:
         66:e8:1a:30:a7:70:12:78:3b:8b:d6:87:1b:25:e6:60:5d:20:
         b1:fe:d7:36:56:80:80:8d:ed:ae:6a:74:6a:3f:87:65:2a:c0:
         5f:a9:9b:82:2e:d2:91:97:a7:13:8e:90:6c:b0:43:71:e1:b1:
         53:57:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:49 2025 by rpki-client