Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          ex8ABDNszpd3+4G5SNJFi1TikedpzqqYKWu6hxVuwDE=
Subject key identifier:   6D:98:18:5D:F9:9B:9E:56:5C:34:EC:47:09:79:04:8D:2B:18:C5:C4
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       62DF449724229316D1C936907151FA0E0EDD6F02
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
Signing time:             Thu 06 Mar 2025 10:50:18 +0000
ROA not before:           Thu 06 Mar 2025 10:45:18 +0000
ROA not after:            Thu 05 Mar 2026 10:50:18 +0000
asID:                     263289
IP address blocks:        168.196.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:df:44:97:24:22:93:16:d1:c9:36:90:71:51:fa:0e:0e:dd:6f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Mar  6 10:45:18 2025 GMT
            Not After : Mar  5 10:50:18 2026 GMT
        Subject: CN=6D98185DF99B9E565C34EC470979048D2B18C5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:e6:ec:39:f8:9c:6f:70:36:9b:31:dd:f8:
                    5e:70:c3:ac:c2:4a:1a:55:9c:26:b2:81:ca:df:ef:
                    a3:02:19:68:5f:37:45:9c:3f:c6:68:70:2a:3f:44:
                    64:58:3b:b9:b1:4f:35:fe:d0:87:4b:d1:45:4e:fc:
                    ce:c7:2e:f3:85:87:b6:84:49:41:90:cf:d7:84:b2:
                    eb:23:1b:5e:cb:d4:6b:70:f0:73:c1:0d:3b:d0:f4:
                    81:fb:56:14:25:5c:d6:d9:4f:09:06:4b:19:84:bd:
                    ce:02:fa:d7:5a:15:02:b5:65:71:3e:d4:25:4b:85:
                    15:b1:d5:df:3f:62:e5:a0:77:34:fd:bd:be:b6:31:
                    e9:f5:6c:f6:dc:cc:d0:48:5e:ef:77:cf:a7:7d:07:
                    22:cc:c6:0b:e6:86:35:2f:a2:60:05:6f:3d:d4:5b:
                    ce:71:06:54:ba:c3:1d:a7:63:01:1d:70:00:4a:08:
                    19:14:4e:ec:83:b5:2f:2d:78:f8:a5:d0:2c:a7:10:
                    9a:93:05:a5:32:4e:fe:e4:46:91:66:4a:f2:82:4f:
                    ee:f2:0e:9b:f6:da:93:ae:46:f8:b2:c0:c2:c9:d6:
                    82:d6:25:9c:70:2e:1b:1a:3f:ad:98:61:9f:40:72:
                    f5:d9:76:0b:b6:36:18:15:aa:73:13:4e:0f:39:38:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:98:18:5D:F9:9B:9E:56:5C:34:EC:47:09:79:04:8D:2B:18:C5:C4
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:6a:9d:a5:28:0e:53:07:75:ba:e0:5c:75:9b:d3:e6:c6:
         97:7b:55:d3:37:f9:dd:e3:45:3f:0d:2f:cb:15:1a:43:66:00:
         56:02:7e:a5:3f:9d:e9:d6:5e:f7:c1:dd:6c:5e:1d:67:4e:a2:
         9e:5b:7f:b4:4e:a9:aa:7a:ae:32:d6:e5:82:86:cc:a7:b0:d4:
         88:22:25:21:44:d4:e8:13:5f:3d:bc:83:d8:01:48:82:05:19:
         fa:f9:61:a1:39:34:c5:de:5b:7b:4e:c1:3c:39:37:31:1b:e3:
         18:d5:0f:1a:b3:9a:7d:be:2b:9a:a9:89:70:7c:2a:3e:ae:b6:
         a1:62:ad:43:3f:15:6f:04:1a:c3:a3:ef:fc:34:3c:7c:e3:82:
         a3:f2:63:a4:61:54:6c:3d:77:62:4a:d1:9f:04:33:6e:d6:77:
         41:d2:d5:bc:4d:73:5f:6a:57:cc:28:36:a2:ec:33:a4:9f:bb:
         d5:7f:15:de:21:78:91:72:b5:ba:12:72:65:23:c5:6a:a3:a5:
         de:09:d4:ca:6f:78:38:a3:e4:e4:87:0a:a8:60:cf:0c:ba:75:
         24:97:a9:54:f9:20:32:4a:28:c7:e4:01:c3:1a:f0:98:23:6c:
         c8:c1:d1:10:3c:cb:c8:dc:64:e5:45:ca:77:34:f5:a2:93:04:
         94:cd:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:52 2025 by rpki-client