Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa
File:                     3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa (raw, json)
Hash identifier:          PYNyriI+LgOMeAHqzV6RhBRJ8g4JrKI+L5Kit7oddIg=
Subject key identifier:   CD:90:70:A4:6E:B4:91:2C:51:C6:A8:43:C0:CD:9F:83:9A:8C:DA:61
Certificate issuer:       /CN=A823754A25B666811A7A3D363B66B25C14736772
Certificate serial:       18DDE177FB5CD168D65D81FB9A8FE1EFF1BF1877
Authority key identifier: A8:23:75:4A:25:B6:66:81:1A:7A:3D:36:3B:66:B2:5C:14:73:67:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa
Signing time:             Mon 03 Mar 2025 20:26:03 +0000
ROA not before:           Mon 03 Mar 2025 20:21:03 +0000
ROA not after:            Mon 02 Mar 2026 20:26:03 +0000
asID:                     265178
IP address blocks:        167.249.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.crl
                          rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dd:e1:77:fb:5c:d1:68:d6:5d:81:fb:9a:8f:e1:ef:f1:bf:18:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A823754A25B666811A7A3D363B66B25C14736772
        Validity
            Not Before: Mar  3 20:21:03 2025 GMT
            Not After : Mar  2 20:26:03 2026 GMT
        Subject: CN=CD9070A46EB4912C51C6A843C0CD9F839A8CDA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:63:a5:79:a0:5c:8e:59:de:f7:c1:fd:d6:
                    c4:7e:7f:a7:13:80:eb:b7:14:9a:e5:d2:30:9c:0b:
                    c0:4f:1d:4d:76:8f:c7:ee:63:ee:82:9d:9a:40:5e:
                    b6:eb:1b:5d:36:a7:5e:82:de:70:16:c1:9f:4c:ff:
                    d4:56:df:09:b2:70:4d:48:46:7c:68:ff:78:13:aa:
                    64:d4:84:38:09:1e:ef:18:4f:b4:7b:6f:18:21:d7:
                    82:44:99:20:9d:a1:cc:1b:ac:1b:3c:f2:c6:f5:a3:
                    f5:d2:86:74:1a:5d:c5:e3:14:85:33:4e:b8:88:a2:
                    fd:fe:4f:83:55:d3:97:b7:4e:fa:7b:9d:24:47:9f:
                    67:94:6f:8e:70:17:8f:9d:ff:da:e1:0a:27:62:fb:
                    ec:8d:33:9c:92:95:3a:42:06:17:ee:a7:08:91:ef:
                    3e:fe:b8:ab:7b:61:10:28:c2:51:47:65:90:48:d2:
                    b0:bd:f1:4b:ad:8b:bd:2f:4e:bf:c6:29:55:62:04:
                    29:43:8d:44:b8:88:79:f6:65:78:6f:67:42:f0:40:
                    5f:0f:8f:28:fc:59:3c:0e:87:c3:c7:25:1c:10:3f:
                    61:23:14:ec:44:d7:df:af:bb:b7:33:76:60:02:eb:
                    20:a0:75:4d:ea:46:ac:4a:f4:51:d5:98:b9:ed:3e:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:70:A4:6E:B4:91:2C:51:C6:A8:43:C0:CD:9F:83:9A:8C:DA:61
            X509v3 Authority Key Identifier:
                keyid:A8:23:75:4A:25:B6:66:81:1A:7A:3D:36:3B:66:B2:5C:14:73:67:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:63:0c:9d:c6:05:23:8d:d2:b2:09:e9:a5:7a:e2:85:79:cf:
         c9:ca:b4:42:30:5f:8e:0c:b3:06:a1:50:87:4a:97:54:28:fb:
         a2:f5:78:a9:a2:dd:57:b1:ef:58:4b:ea:08:f3:50:64:b7:63:
         79:1f:e4:08:9b:33:20:4a:0e:47:74:5e:25:3c:e8:36:57:59:
         5b:a8:28:39:5a:4d:fd:ea:4a:cb:87:bf:f9:30:fd:7a:25:2f:
         79:ea:9f:5e:61:fb:37:90:54:c2:fd:6e:10:00:f8:6d:9e:8c:
         96:24:2d:bc:d4:ce:42:fe:77:11:a5:42:0f:37:ef:3d:b6:13:
         e2:2c:78:28:da:1f:b7:67:83:a0:ef:8a:48:91:1a:5b:78:be:
         d4:8f:2c:00:02:e9:16:12:ea:a7:b4:8f:9f:3f:e6:48:e2:fc:
         de:3c:bd:29:85:b1:ef:40:fd:f1:23:5d:b9:43:d1:2e:c0:31:
         e8:94:44:4e:00:f6:2d:34:94:1f:ed:f0:b3:3a:c1:57:2c:c3:
         39:6d:c0:19:a4:c5:43:1c:cd:7a:11:77:76:d9:af:0e:95:f1:
         cf:fb:75:96:69:05:9e:8a:8e:ac:36:48:ee:a9:82:c5:ed:18:
         00:ef:b2:a2:0c:d8:cd:9e:9f:9e:0c:99:d9:13:44:56:17:1a:
         85:ef:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:04:32 2025 by rpki-client