Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          ZroRQ/ROgMXTh8ogCYTid73JjcDkgHBbYe2ujjkQGm4=
Subject key identifier:   C8:6F:A1:8A:5F:9D:96:89:64:0B:A1:24:22:BB:7F:DA:93:65:C5:14
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       27C3ECBA8F721644E785AEAED6E7EB6D4AE8ED96
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa
Signing time:             Thu 06 Mar 2025 10:50:17 +0000
ROA not before:           Thu 06 Mar 2025 10:45:17 +0000
ROA not after:            Thu 05 Mar 2026 10:50:17 +0000
asID:                     263289
IP address blocks:        168.196.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c3:ec:ba:8f:72:16:44:e7:85:ae:ae:d6:e7:eb:6d:4a:e8:ed:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Mar  6 10:45:17 2025 GMT
            Not After : Mar  5 10:50:17 2026 GMT
        Subject: CN=C86FA18A5F9D9689640BA12422BB7FDA9365C514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:df:f4:82:ef:11:bd:e8:4a:05:0d:ec:9f:
                    fd:43:72:ed:9b:c6:f7:31:d6:67:ab:13:fa:6f:e4:
                    05:27:58:a8:2c:a6:26:c2:75:a0:11:af:ed:7e:e8:
                    f0:ed:0e:be:3c:0c:ca:d0:27:e5:5e:5f:d9:e1:f2:
                    79:c0:af:0e:92:b4:a6:13:02:d1:4d:f4:d4:1c:cd:
                    77:c3:fb:da:25:42:f0:da:aa:17:76:b5:8a:dd:54:
                    79:59:b0:3a:0a:86:79:0e:ab:a4:b0:49:0f:d2:13:
                    1f:1e:5b:f0:c9:74:fb:68:f0:20:09:71:d6:fc:b4:
                    c2:cd:e5:e1:6b:ff:83:9c:06:8c:bb:cb:d4:a0:5f:
                    6c:b8:9a:87:af:f5:33:ee:b7:d3:a0:47:61:ac:98:
                    92:02:d2:71:4e:92:8a:0c:44:7b:e2:f3:ba:ce:f2:
                    d2:67:0e:70:a8:76:0b:0c:cd:2d:aa:e3:9c:54:fc:
                    96:e4:52:ac:4c:b4:d4:fb:ec:d7:be:8f:c4:0d:3f:
                    47:e1:aa:a2:03:d9:9a:49:84:31:1d:a6:c9:f8:c7:
                    ac:b4:fd:21:a6:16:53:02:c5:a9:83:22:f6:14:ef:
                    b8:fb:c4:7e:6b:83:81:d7:96:2a:7b:01:1a:75:8c:
                    87:f1:af:39:9f:6f:1c:e0:e9:5b:e5:70:d7:db:ce:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:A1:8A:5F:9D:96:89:64:0B:A1:24:22:BB:7F:DA:93:65:C5:14
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:0c:dc:9d:16:be:5f:5f:af:16:1e:35:51:8f:4c:c2:c6:
         28:c8:6b:3d:32:1b:40:d9:65:3b:1e:80:29:a9:ec:f2:c6:18:
         a7:95:ea:5e:02:c5:2e:18:5f:81:8a:b0:3a:ea:84:74:6b:b7:
         a6:a0:10:cb:1d:79:94:d8:5f:78:57:c6:f2:c2:72:50:26:5b:
         02:74:29:68:35:dc:bf:2a:fe:dd:9b:d4:f2:29:2d:34:d8:6c:
         38:d6:bd:8c:0f:c0:80:94:1d:db:a7:e5:66:59:2f:33:9c:ff:
         87:92:8e:23:42:f8:7f:93:0c:30:b8:65:22:02:54:a8:1a:02:
         4e:25:e0:c4:5e:7f:bd:1f:4a:3e:c2:42:11:da:6a:96:7c:74:
         c3:26:17:fb:a8:6b:e4:59:13:3b:51:d4:e0:ac:75:2f:0a:6d:
         f0:d5:87:c1:87:20:19:22:4f:bf:ee:52:f0:c1:2c:62:81:ef:
         47:e7:a6:a1:fc:fd:d5:02:f1:0d:bf:88:bf:13:9f:8b:8e:dd:
         79:f2:fa:5d:b9:17:55:62:66:2d:fb:a6:f2:45:f0:aa:9e:79:
         44:66:2d:51:f6:9c:74:39:c7:48:16:71:c7:d4:0d:37:9d:7a:
         23:88:d1:a1:e4:81:83:36:02:29:7b:0e:2a:35:c1:ce:7b:30:
         11:c1:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:19:26 2025 by rpki-client