Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
File:                     3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          pEk0KQoE7f77MQAbwfk7qGFRwrltMIR7LKZ4VNuosJ4=
Subject key identifier:   DE:C0:60:30:AA:63:20:FE:32:43:F8:D8:15:1D:CB:E3:BD:91:C3:70
Certificate issuer:       /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
Certificate serial:       7DA0ACFAC4F833367901F754AEF0BCC555E42FC5
Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263145
IP address blocks:        168.205.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl
                          rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a0:ac:fa:c4:f8:33:36:79:01:f7:54:ae:f0:bc:c5:55:e4:2f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:3b:cb:8d:ab:43:62:71:c5:68:bc:54:20:
                    81:92:de:1b:6e:4b:fc:10:ef:46:fa:1d:68:1a:2b:
                    96:f6:c7:c8:ce:41:05:77:85:bf:b7:18:a3:e0:9c:
                    c5:7d:84:1a:af:9a:95:73:a2:58:2c:59:2f:7f:47:
                    31:53:72:09:3b:09:c9:6a:20:c2:ec:1c:2b:d1:81:
                    0e:e7:a2:5f:a9:d2:da:3e:2f:0d:32:22:48:91:70:
                    7c:0b:b7:e1:fe:a2:b4:bf:cd:cc:4e:4b:0a:59:83:
                    6f:95:c4:4e:62:0d:16:4e:a7:97:cc:e0:0d:c5:d3:
                    e8:bb:13:8d:13:6d:f3:90:cd:0e:6e:0d:c1:25:e8:
                    50:fb:dd:2e:ee:51:80:7f:9e:0b:0f:6f:02:51:2c:
                    ce:db:9c:ef:7d:77:7c:fd:68:28:12:92:d5:9a:53:
                    4c:ce:f8:06:0c:53:61:79:6c:cc:83:fe:2e:0a:8e:
                    5a:fa:a8:6c:23:82:7b:d9:a6:71:2c:e3:e2:f3:63:
                    b6:60:86:39:b9:3c:51:14:f0:d8:d7:84:9e:ec:de:
                    fd:d0:c5:2b:49:ed:cc:de:89:f2:39:3a:bc:51:39:
                    06:82:24:fb:0c:49:5b:f1:4b:3f:d3:73:b7:5c:e7:
                    3f:0e:61:2a:10:95:24:a4:06:81:8b:70:d0:d8:e0:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C0:60:30:AA:63:20:FE:32:43:F8:D8:15:1D:CB:E3:BD:91:C3:70
            X509v3 Authority Key Identifier:
                keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:f2:fb:15:de:d7:2d:21:59:9b:7d:50:ee:3b:95:bc:a6:
         86:f4:3e:38:7d:1c:d0:1a:2e:f4:d0:a0:00:40:17:c4:7d:72:
         a3:de:9b:51:ed:f1:45:d5:8d:4e:d5:84:31:2f:67:6c:98:2e:
         df:de:71:12:13:ed:c7:f3:5c:0e:9c:c6:92:e8:4a:3e:a9:9e:
         fe:a0:b9:a5:98:a9:68:b7:79:70:f8:84:66:1b:8b:7e:3b:dc:
         ea:7f:17:5b:fe:ac:f8:d6:0b:a7:7d:bf:5c:51:3a:87:0b:3e:
         64:bf:d5:71:cf:a8:97:a6:65:63:0a:e5:73:20:9d:9c:65:d7:
         75:cb:d3:7e:65:7b:97:a7:8d:ae:b7:f7:1a:bf:d8:27:3e:38:
         91:38:4f:e3:0e:3f:78:05:61:53:ed:02:41:66:38:3c:d9:fe:
         ed:9f:08:e6:c3:ea:56:bf:0a:11:12:98:ac:76:5f:0a:59:0c:
         44:16:ad:d3:10:98:2d:86:20:84:82:48:ce:0e:83:72:05:6b:
         45:84:d3:25:5c:52:83:c8:27:da:c0:33:48:86:fc:3c:1e:f4:
         52:36:a8:cd:30:17:60:25:ce:07:bb:0d:3b:89:4d:1d:f3:fc:
         a7:6c:98:c9:2e:f1:f5:38:50:d3:e3:d5:ef:e1:29:1d:25:b3:
         a4:d4:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:06 2025 by rpki-client