Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          M0A5vHjk2YEUTg89BA6AE31nT0dX2Hg41uhzFlnT/Qk=
Subject key identifier:   DB:10:FB:70:34:85:15:05:71:D7:4E:F8:77:40:BE:DF:D3:75:AC:BB
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       3694FDCC0E84C2CECF014045ADBEF70BD8A9A56C
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:29 +0000
ROA not before:           Mon 31 Mar 2025 17:52:29 +0000
ROA not after:            Mon 30 Mar 2026 17:57:29 +0000
asID:                     262296
IP address blocks:        168.181.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:94:fd:cc:0e:84:c2:ce:cf:01:40:45:ad:be:f7:0b:d8:a9:a5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:29 2025 GMT
            Not After : Mar 30 17:57:29 2026 GMT
        Subject: CN=DB10FB703485150571D74EF87740BEDFD375ACBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:b5:d0:73:03:ed:21:95:97:09:c3:5f:cb:
                    d3:94:30:f3:aa:ce:98:80:a5:03:48:e5:7a:d8:fe:
                    4a:2c:90:2a:bf:6b:fb:48:7c:b1:57:97:ea:92:03:
                    6d:e4:35:ad:f8:1e:d3:ed:48:44:be:02:98:f4:40:
                    df:00:4d:90:c0:f4:98:46:2a:4a:59:4e:ed:ba:df:
                    23:74:63:e9:74:0f:1b:20:e3:be:a8:b8:7c:26:f6:
                    b8:10:7c:ea:61:cf:97:db:7e:f0:26:fc:1a:e8:0a:
                    73:8b:46:45:b5:bf:71:88:c5:db:e9:fb:a7:67:73:
                    9f:2e:e9:bf:88:82:34:2d:6f:e9:3b:d1:cf:42:26:
                    3d:33:60:dd:94:0b:03:dd:9f:9e:2c:73:33:ea:a7:
                    62:18:21:10:1b:48:db:05:d3:e3:ba:e4:ea:e8:21:
                    9b:04:a6:4e:4e:81:97:2a:16:24:58:ee:02:71:ca:
                    58:17:dc:09:0d:f8:38:1d:e3:90:5e:05:84:8b:af:
                    ff:77:c1:56:da:1b:76:f9:45:6e:cd:a2:b0:ed:f5:
                    39:09:2c:c4:d2:c5:1f:45:fa:45:82:d6:af:4f:4d:
                    32:a8:84:46:ff:93:8a:ca:94:7c:bf:42:24:34:a6:
                    cf:97:f3:4f:be:d2:6b:05:9a:0e:22:56:b6:35:f3:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:10:FB:70:34:85:15:05:71:D7:4E:F8:77:40:BE:DF:D3:75:AC:BB
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:0e:36:af:2d:73:dd:2b:73:a1:81:d6:51:3e:27:de:e0:
         f1:78:fa:c5:a9:86:ec:06:0a:de:9c:f0:87:ff:a4:69:d5:94:
         5c:30:84:d9:db:da:e1:d9:75:29:57:d1:b8:15:0a:59:15:f1:
         de:f6:2d:09:b3:39:09:6a:d2:ca:f2:6f:5c:d1:e5:e0:aa:77:
         00:bb:c3:7b:dd:79:69:86:fd:df:b6:f3:42:ab:85:92:71:e6:
         19:54:37:3b:84:74:07:47:10:3a:f8:20:77:4f:8f:d4:8d:1c:
         7e:75:17:8c:ae:a8:e6:84:81:66:df:06:fd:d0:64:af:39:6b:
         ed:10:24:c5:a7:a3:10:c7:0a:40:5d:a6:0b:b8:a4:e7:e1:a6:
         3d:02:92:c4:72:8f:7f:06:75:73:8c:10:e2:d6:9e:bb:cf:bf:
         3c:b9:4c:7e:18:c6:3c:e2:18:27:83:fd:cd:3d:bb:f8:a3:c3:
         f7:15:17:fd:ba:6f:bd:af:9a:f8:d4:dc:3f:cd:5d:d2:b5:c5:
         ba:a3:d3:5c:4b:67:ff:38:34:a9:cb:06:05:7f:2e:c7:c0:d0:
         61:0b:b4:c0:31:a8:96:95:57:3a:c2:1b:be:c6:ec:06:b3:28:
         db:52:b4:a5:f7:78:32:5d:61:9d:79:9a:ae:87:89:0b:40:35:
         07:a1:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:06:46 2025 by rpki-client