Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          6PYAiXgrvuUiVykuJEOX1pk/8PbsQ7oULSVcRfPyKBs=
Subject key identifier:   41:91:62:BE:86:C0:44:87:6E:A8:B8:83:9A:44:37:A9:8A:FF:FF:34
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       08656047C2FD8F60652956E1C5B20FF17EE08027
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        168.227.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:65:60:47:c2:fd:8f:60:65:29:56:e1:c5:b2:0f:f1:7e:e0:80:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:09:13:55:2c:ca:43:53:14:7e:ff:4b:0f:
                    0e:7b:06:97:33:57:ed:c8:70:a9:76:40:a0:f8:fc:
                    11:e7:44:a1:f6:66:ac:fa:ef:6f:29:97:47:0b:d9:
                    c4:08:59:96:ce:d5:7f:1e:45:e2:64:37:9f:99:34:
                    c3:cf:74:7d:b1:4b:3b:93:42:c6:fd:e7:82:bc:fc:
                    fb:ab:38:e1:be:51:d1:d4:f4:dc:b7:6d:b8:10:75:
                    c9:a3:b7:5b:e4:8c:1b:5a:07:30:45:cb:f3:61:8b:
                    af:26:9d:61:7c:fd:b4:14:76:05:a4:bf:4b:ca:d9:
                    b3:df:a3:42:a9:9f:57:dc:80:04:a0:25:cf:30:b9:
                    ea:84:5d:73:f7:4e:e1:43:2f:21:a8:18:85:fd:a9:
                    0b:b5:a1:85:df:d8:1d:4f:4c:da:c7:05:ea:a7:30:
                    48:55:c4:e4:d1:e9:17:7c:51:da:b6:35:b5:62:88:
                    f9:73:71:4f:95:13:0e:81:bd:7a:95:41:d3:fe:48:
                    cd:04:33:7e:9e:0c:bc:94:6a:67:44:dd:1f:bc:3d:
                    4e:a3:fb:a1:be:1a:7f:e4:13:05:4f:eb:14:5c:d5:
                    8f:0a:dc:50:93:6e:77:c5:16:24:25:c9:46:ce:a2:
                    19:ba:ea:e6:f4:50:d5:7c:1a:31:8c:64:de:0a:e5:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:91:62:BE:86:C0:44:87:6E:A8:B8:83:9A:44:37:A9:8A:FF:FF:34
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:08:82:f9:ce:c5:55:26:b3:25:39:e8:09:96:05:09:7b:e5:
         1e:fa:31:93:36:51:1a:91:54:e1:9c:17:25:67:d6:3e:00:58:
         42:f6:94:2c:b8:60:6d:ff:a7:51:43:4b:9a:99:d4:ca:1e:f3:
         4c:e8:f6:57:29:c8:da:78:72:05:ab:17:ab:3d:89:91:2f:55:
         47:02:1a:b0:5a:5a:6c:64:32:c3:6d:a8:d9:60:dc:cd:53:08:
         bb:11:c0:05:8e:30:e2:9f:f8:60:c7:62:d3:5c:0f:08:ae:e0:
         75:a1:d9:14:cc:8a:37:d3:b2:8b:cd:9d:58:65:5f:a4:a1:1d:
         8b:49:56:85:2c:af:7f:d6:1f:87:66:4f:0e:a0:03:c8:5a:e8:
         55:42:eb:06:9e:fe:3f:e2:38:df:9a:93:42:04:cb:35:dc:41:
         87:49:9b:55:a2:f6:66:c6:9a:a5:e2:e0:ac:b6:a7:b5:89:b0:
         f4:d0:01:b8:8e:51:8d:a5:93:c9:0b:6c:3a:b4:a3:06:62:97:
         83:32:98:c3:4a:24:a8:59:29:87:26:d8:32:aa:cc:88:5d:f7:
         8e:1b:2a:4b:c7:ec:08:26:45:64:23:57:39:c0:c6:4a:a2:7c:
         8f:40:79:27:70:10:d5:f9:df:32:3d:9a:4a:d5:95:ea:48:c1:
         e0:a9:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:40 2025 by rpki-client