Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
File:                     3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa (raw, json)
Hash identifier:          L6xNVLbwqtlv6InsrELDmYcAtU2m9w0o8bkywZE6L/U=
Subject key identifier:   C8:3A:FA:3E:3F:91:BA:7D:52:CD:BE:68:3B:48:B4:88:65:95:4C:53
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       71D8B6EF469842D69CF52834EA84F40189E549D9
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
Signing time:             Thu 06 Mar 2025 14:54:08 +0000
ROA not before:           Thu 06 Mar 2025 14:49:08 +0000
ROA not after:            Thu 05 Mar 2026 14:54:08 +0000
asID:                     263563
IP address blocks:        168.232.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d8:b6:ef:46:98:42:d6:9c:f5:28:34:ea:84:f4:01:89:e5:49:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar  6 14:49:08 2025 GMT
            Not After : Mar  5 14:54:08 2026 GMT
        Subject: CN=C83AFA3E3F91BA7D52CDBE683B48B48865954C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:ff:4d:f7:0d:87:22:60:67:8a:ef:1e:b1:
                    f1:37:78:37:57:bb:0e:3b:cf:5e:3d:7e:0f:eb:76:
                    ad:8f:af:de:27:cb:d9:cb:57:55:9b:06:ea:5b:51:
                    57:21:65:3f:68:62:ef:02:6c:4e:79:b5:2a:59:60:
                    31:ff:2d:a3:8b:f8:d7:db:6f:e7:86:12:f1:01:90:
                    40:26:f6:4a:45:a0:d3:ec:06:73:08:04:d8:e4:80:
                    13:72:ca:90:e0:43:b6:74:e9:2f:c2:90:91:48:2d:
                    b1:91:14:ae:cd:2d:89:7d:14:c9:d1:9d:07:52:e8:
                    24:f9:48:d6:44:3c:d4:f1:1d:67:34:07:11:2f:26:
                    7c:fc:b8:1f:62:37:56:09:48:32:97:d9:d6:36:4f:
                    9d:30:16:78:44:85:52:25:04:e4:fc:58:f2:4c:6b:
                    fe:b9:b4:00:96:6b:cb:ab:54:e6:98:d5:45:fa:2c:
                    09:52:d7:67:3c:05:4e:35:a8:d5:58:6e:5f:97:63:
                    de:db:23:20:03:8f:f1:76:ec:7f:be:7a:31:5d:0a:
                    6b:9f:c5:88:5b:6d:b8:5b:a4:68:f4:43:24:10:07:
                    d0:4b:d3:36:9a:91:07:a4:a5:37:e6:7e:95:7b:5f:
                    3f:48:07:d5:ed:8b:6c:f4:c6:2b:1f:55:32:42:7f:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:FA:3E:3F:91:BA:7D:52:CD:BE:68:3B:48:B4:88:65:95:4C:53
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:1f:ec:1a:61:26:10:6a:1c:e7:7b:25:e4:a2:24:54:8b:
         4f:b9:3d:bf:58:5d:f0:78:5c:40:b8:a6:76:15:dd:36:ab:fd:
         61:99:fd:d2:7e:f4:26:07:f2:3f:3d:e6:be:ac:8a:c8:40:c5:
         11:73:40:c7:17:cb:76:26:46:8a:b6:52:d1:e3:7d:f7:ee:51:
         5c:42:28:7a:5d:85:2f:8f:c2:f3:bb:4b:26:3f:b1:4a:14:b2:
         14:20:82:e1:1f:4e:73:e7:6a:92:01:64:b7:ec:ee:6c:c4:bb:
         9d:1d:64:7c:58:61:0c:ce:4e:c4:8e:c1:cd:95:5a:90:47:e4:
         69:3f:71:cd:74:3c:b5:78:24:be:6a:a7:b3:5b:ea:37:91:ce:
         97:27:07:48:dc:a4:26:36:24:cb:65:cb:73:21:00:c9:e9:fd:
         7c:8e:8e:67:8f:9f:63:d1:c5:9e:8e:f7:3b:1e:fa:f3:41:13:
         f8:57:63:e9:36:06:7c:7f:97:f9:6b:6c:64:bb:ae:a7:42:5c:
         65:87:5a:ce:86:1f:5b:b8:eb:04:76:1f:f4:f8:8a:f0:d1:a0:
         9f:c0:36:e2:f3:a3:8c:0b:8a:6e:2e:d1:3a:3e:68:b5:ab:8a:
         43:b1:9c:db:a7:d0:a8:76:c6:9b:c1:2b:8b:91:4e:62:89:f4:
         18:59:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:53:49 2025 by rpki-client