Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          kRDohx0SbsysDdppjddqEuTdO0yu9nRYWQC8VSL8dTo=
Subject key identifier:   F5:74:5B:D2:93:56:74:B3:5C:30:74:49:42:84:40:AE:4F:E2:D0:FE
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       409836F9FE08A028C9FDD3CA6B895474B5D88B0B
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        168.227.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:36:f9:fe:08:a0:28:c9:fd:d3:ca:6b:89:54:74:b5:d8:8b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:7b:79:09:63:02:5d:d0:e9:50:b7:e0:07:
                    83:57:40:1b:9d:d3:02:82:91:43:76:ae:64:fa:88:
                    dc:60:e9:c3:8e:81:c3:7f:73:3b:4e:ab:0c:51:cb:
                    a4:45:98:9e:f9:23:7a:96:dd:c6:ba:3f:a3:61:39:
                    93:42:94:2a:87:e8:43:8f:02:74:b2:fd:4a:b6:4b:
                    fd:4a:7e:0e:82:df:d9:fc:56:52:f6:34:e1:00:2e:
                    4b:66:53:3a:48:a5:d2:a2:b9:46:41:08:4c:73:72:
                    49:14:a7:7c:a7:7b:de:2e:c5:8e:e7:de:92:c9:7c:
                    47:c7:c8:8e:a9:8e:5c:8b:43:74:65:02:ad:2b:ee:
                    04:90:e6:24:48:8e:7a:ed:8a:72:1f:e5:87:64:10:
                    a8:ff:04:22:81:86:25:a0:c7:79:37:38:49:e9:9c:
                    f4:7e:bf:32:c7:75:af:47:55:36:bd:74:cd:51:7c:
                    a8:78:a2:62:b5:47:0a:d4:1b:a2:44:f8:1f:d0:04:
                    72:d8:54:c8:67:5a:f8:e6:38:38:1f:8d:67:24:eb:
                    78:a6:74:aa:88:c9:60:6d:c1:17:f9:78:ad:bc:8c:
                    b6:20:d2:42:8b:8d:f4:46:14:15:70:df:b0:7f:30:
                    ba:e6:ae:3f:b1:c3:14:30:e0:aa:0d:3c:62:fc:21:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:74:5B:D2:93:56:74:B3:5C:30:74:49:42:84:40:AE:4F:E2:D0:FE
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a7:cf:00:40:ce:2a:88:dd:40:cf:6c:f7:8a:6e:75:26:1c:
         e1:b1:46:27:ef:62:91:b7:02:4d:ab:f4:75:f1:2e:05:95:2d:
         44:6f:3e:7c:06:e7:9f:8c:e7:cc:16:13:3f:2f:c7:df:e3:6d:
         9d:36:2c:ba:9e:77:81:97:70:3b:7b:ac:be:1b:2e:ab:62:3d:
         e3:2d:4b:28:bd:85:4e:09:42:b9:c0:e9:51:1b:f2:32:8a:c8:
         fd:31:08:30:9e:65:3c:5b:4b:64:d5:35:2e:b8:e6:ab:fd:ce:
         5e:bc:59:0b:ef:78:6b:2f:c4:4a:ed:b7:3c:ee:86:c1:b3:9f:
         27:ec:ef:62:90:73:f3:14:fa:9f:e1:7d:64:78:e4:d0:eb:83:
         e6:bd:75:c3:fe:1c:35:53:ef:ef:f0:23:57:c1:24:ea:dc:e0:
         84:7c:01:43:24:34:e2:b3:ac:06:a9:93:b9:bc:bb:f4:7e:cb:
         ec:fe:ea:10:34:04:2f:7c:c6:43:c2:14:71:e2:36:b0:23:72:
         25:c6:4d:5e:e6:93:4c:31:2e:c3:09:3e:d6:9d:78:a6:11:28:
         ae:35:3b:1c:84:24:a6:0b:84:fc:9c:d3:85:f4:cf:71:af:10:
         de:21:90:28:71:ec:d8:dc:79:a3:5a:ca:f5:eb:41:8d:32:23:
         69:af:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:35:19 2025 by rpki-client