Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          LO1ik9g8nSHTwisi94xQHPbDASrI0utul2j1iJMsGsc=
Subject key identifier:   22:B3:49:FF:A7:65:BB:2C:8F:DF:28:7D:5D:D6:12:ED:69:B7:6E:AC
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       766EDAC52DC02FE0E1E4130F08226BBCF71BFA69
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa
Signing time:             Thu 06 Mar 2025 03:13:47 +0000
ROA not before:           Thu 06 Mar 2025 03:08:47 +0000
ROA not after:            Thu 05 Mar 2026 03:13:47 +0000
asID:                     267455
IP address blocks:        164.163.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6e:da:c5:2d:c0:2f:e0:e1:e4:13:0f:08:22:6b:bc:f7:1b:fa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Mar  6 03:08:47 2025 GMT
            Not After : Mar  5 03:13:47 2026 GMT
        Subject: CN=22B349FFA765BB2C8FDF287D5DD612ED69B76EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:a9:f5:d9:09:3d:bb:9b:a9:a5:35:82:97:
                    ab:9c:03:76:c0:cd:68:ce:d2:28:a8:49:bd:5f:94:
                    ce:1b:65:77:99:94:04:fd:2d:5a:0e:af:ca:4e:9a:
                    49:03:1c:93:6d:50:30:6e:42:f7:d7:30:91:b5:c2:
                    00:8d:3a:3c:19:6a:4b:49:6b:1e:92:b3:60:95:aa:
                    f2:8e:91:c5:75:a0:ce:9e:3c:dd:a5:04:fc:9c:1e:
                    df:e9:8d:0b:96:c8:0c:f0:96:f9:b2:25:11:11:ae:
                    21:77:e0:e9:35:84:3b:c2:ec:94:d3:9d:30:90:1d:
                    8f:0d:18:fa:a5:26:c3:a3:34:45:a5:1d:3c:cb:70:
                    16:1c:78:42:56:b5:ea:c9:43:b4:78:5c:f8:f1:4c:
                    f2:a1:dd:72:0e:47:53:20:fd:c4:76:87:f8:ce:a8:
                    5e:7d:7f:bd:8d:dd:2e:d2:1d:22:f4:31:5c:ac:d5:
                    87:e7:d7:c2:fb:10:e2:b0:bb:06:01:e6:a7:70:3c:
                    ab:80:2f:d8:ea:87:a0:60:6c:e7:a1:97:d9:9e:d7:
                    aa:3f:77:85:85:62:5e:92:e5:2d:40:f8:d7:28:58:
                    70:02:9c:ab:4f:07:7c:d4:c4:f1:01:b9:d5:ae:e6:
                    37:f3:4d:c9:6c:0b:9c:c7:1b:bf:9f:6d:8d:ae:5d:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:49:FF:A7:65:BB:2C:8F:DF:28:7D:5D:D6:12:ED:69:B7:6E:AC
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ab:ca:4c:8b:0a:fa:4a:55:dd:9c:6f:d7:74:a9:7f:a6:47:
         03:43:49:78:86:01:6b:ba:a3:35:f0:bf:5e:f4:a4:b8:e3:d3:
         1c:f8:9f:cc:86:0a:f4:93:fd:d2:e0:b7:99:2f:af:32:e3:d4:
         95:ff:6d:ea:e7:97:88:45:44:97:e6:e0:53:c4:e9:d7:43:3e:
         55:6a:ca:2e:ab:11:44:87:93:a7:61:d6:b5:b6:0a:e7:aa:76:
         ac:a4:82:07:c3:f8:38:32:de:2e:9b:72:54:5d:6c:b3:31:c2:
         d9:90:7e:88:ef:d1:0e:e6:f9:69:d5:ed:3f:56:c2:de:b5:74:
         f7:25:2b:60:ee:da:46:d2:04:a9:ab:22:ce:f1:51:89:66:8e:
         03:32:bd:a3:79:fa:da:09:0c:a5:2c:a5:1e:30:42:e3:e9:ed:
         a5:d2:fd:b8:ab:21:2e:7d:7f:10:3b:71:4f:39:69:88:b2:e4:
         27:e8:94:f5:8a:86:c4:cd:ef:26:bd:6e:24:c1:65:d5:be:54:
         bb:11:d7:39:2a:02:7e:8b:3b:14:ca:99:61:2d:83:f7:96:09:
         d7:98:90:cd:f3:0c:f6:3a:79:2b:fc:cd:ef:0c:9b:f4:37:dd:
         f7:a7:aa:c5:90:0c:1c:d0:a9:91:e0:25:81:94:4d:b5:d8:0f:
         25:7c:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:42 2025 by rpki-client