Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          vH2KJUjWjWIdYq8dXRQcQTlWtMYjk6cuJloQz89Txlk=
Subject key identifier:   57:2A:1C:C6:D2:DF:5B:DC:B3:17:B5:1B:74:3F:7B:99:BD:9C:61:EF
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       12E53BA12DCD4E2B41C6AF9FFAB53EA6D23C2D71
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:32 +0000
ROA not before:           Mon 31 Mar 2025 17:52:32 +0000
ROA not after:            Mon 30 Mar 2026 17:57:32 +0000
asID:                     262296
IP address blocks:        168.181.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:3b:a1:2d:cd:4e:2b:41:c6:af:9f:fa:b5:3e:a6:d2:3c:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:32 2025 GMT
            Not After : Mar 30 17:57:32 2026 GMT
        Subject: CN=572A1CC6D2DF5BDCB317B51B743F7B99BD9C61EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:b8:1a:8b:3c:7d:da:f1:ac:2f:b8:b2:01:
                    7c:0a:ee:d3:e3:20:a1:0c:5e:00:5a:64:08:36:97:
                    77:96:3d:49:05:b6:e4:95:75:14:2a:82:c5:cb:c7:
                    01:99:97:44:1d:6c:24:dd:a2:f5:80:ac:ca:81:ff:
                    db:93:fa:ff:a0:d3:34:76:89:92:e7:ae:db:41:29:
                    24:2d:63:36:a4:86:ae:90:6a:cf:91:2b:75:02:a8:
                    92:db:39:0d:ce:0a:ba:49:51:c3:e8:4b:68:af:7c:
                    0d:6b:d0:6a:ff:dd:00:78:b0:aa:5a:7c:a6:cb:de:
                    36:9c:1c:70:cb:dd:c0:7b:27:76:09:f7:d2:f2:ce:
                    cf:ab:a3:63:a4:00:6f:53:d3:50:2b:6f:8e:c5:a1:
                    75:10:02:ff:4f:ef:39:f6:f3:4d:f1:ed:82:ee:5f:
                    a0:e7:cf:ce:77:f6:8d:03:75:3f:fe:2f:75:6b:70:
                    9e:05:bd:b6:7c:05:c8:92:a4:ec:46:4a:11:63:6f:
                    10:0e:48:44:fa:e3:c3:33:ef:f9:65:72:81:82:34:
                    2b:51:b9:6d:25:6a:ea:6a:44:1b:e3:14:17:43:3e:
                    06:31:ea:d3:1d:27:56:c0:67:2c:51:50:a5:23:fe:
                    96:f0:5a:36:96:cc:b5:40:8e:45:20:14:c2:2b:c3:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:1C:C6:D2:DF:5B:DC:B3:17:B5:1B:74:3F:7B:99:BD:9C:61:EF
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:b6:35:6f:23:b2:e1:d7:2b:5f:e0:77:98:80:ab:10:f7:
         e5:58:4e:0d:d7:73:a6:8b:e8:17:5d:75:32:0f:a7:b6:1d:ae:
         a5:43:c3:2a:52:38:1e:31:21:9b:6e:b7:21:28:7b:8b:2e:77:
         f8:12:67:6d:c2:fe:de:44:0d:ba:27:2b:74:ac:7d:98:39:70:
         d7:dc:3a:ca:00:a7:3d:ee:89:e3:1a:17:3d:5e:05:32:a7:c0:
         7e:a4:b5:53:18:d4:bb:67:a7:62:07:b8:e7:c6:f6:5f:5c:ee:
         c3:09:71:37:17:ac:11:80:e6:15:0f:d7:3f:2e:b2:0c:35:fc:
         ef:7c:c5:c0:00:ba:d5:db:e2:4e:96:10:5b:45:24:a8:f3:b9:
         ee:9b:43:e0:ea:1b:d6:d7:a7:4e:51:49:6f:8e:18:80:94:96:
         aa:57:18:ea:c6:8f:15:e8:e3:ee:3e:dc:29:a7:79:af:57:e9:
         4e:03:1c:7e:7b:1c:9c:79:3a:6c:09:8d:2b:04:99:b4:9d:e0:
         2c:71:d7:35:e9:8e:d9:27:a9:ed:04:c1:d7:ec:a0:83:10:bc:
         1f:64:15:ec:f9:6d:f2:aa:1d:16:18:73:40:81:1b:1c:43:07:
         18:9c:a5:9d:a8:98:4d:2d:cb:39:26:a2:27:80:0d:ff:b2:89:
         40:03:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:04:31 2025 by rpki-client