Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa
File:                     3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (raw, json)
Hash identifier:          bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=
Subject key identifier:   DE:53:2F:E4:13:5F:88:41:BF:D8:7F:7E:9D:A1:D8:4E:EA:1D:FB:D4
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       7BB2CCDF4B15F0148E78FB20348BC0FCB2C44E0A
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa
Signing time:             Fri 23 May 2025 15:05:51 +0000
ROA not before:           Fri 23 May 2025 15:00:51 +0000
ROA not after:            Fri 22 May 2026 15:05:51 +0000
asID:                     265451
IP address blocks:        168.196.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 09:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b2:cc:df:4b:15:f0:14:8e:78:fb:20:34:8b:c0:fc:b2:c4:4e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: May 23 15:00:51 2025 GMT
            Not After : May 22 15:05:51 2026 GMT
        Subject: CN=DE532FE4135F8841BFD87F7E9DA1D84EEA1DFBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:7d:3b:9a:7a:d0:b3:2b:bb:a4:a9:6d:b6:
                    b0:db:6e:9c:23:65:04:76:be:88:1f:75:0c:19:2f:
                    89:03:6b:6b:0e:0c:6f:bf:c8:27:18:48:bb:58:15:
                    b5:7e:e6:61:72:37:fe:51:f9:3f:82:e4:09:e3:2c:
                    3f:de:1d:51:c7:97:1f:13:03:e2:98:e5:51:b1:49:
                    be:ec:ce:7b:38:84:68:f8:de:ad:ae:02:da:d3:fe:
                    f3:f3:fd:ab:b3:9d:15:ae:77:9c:25:62:cf:1f:f5:
                    5b:4c:ba:01:ef:d8:9c:dc:5a:54:2a:07:75:d0:1f:
                    99:93:eb:60:b2:65:4f:bb:65:ce:58:0b:55:dd:9d:
                    64:01:d2:cf:7b:75:f3:c2:d7:3e:2f:b7:0c:a2:54:
                    5a:ed:81:10:25:3e:7e:79:46:93:b6:99:01:d6:4c:
                    aa:99:5c:4e:02:1c:45:f6:36:fc:d3:fd:72:0c:49:
                    b5:ec:b4:bc:76:61:64:23:40:ab:80:58:db:9f:e9:
                    83:97:34:9d:7a:3e:27:00:b1:a6:9b:4b:6f:ea:1f:
                    d3:eb:eb:01:06:c8:b2:14:aa:e3:08:d8:46:1d:4a:
                    01:57:00:31:d3:24:36:72:27:71:9d:19:b4:cb:63:
                    eb:5a:21:d5:0b:a1:df:b1:ae:da:91:ba:9c:f8:eb:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:53:2F:E4:13:5F:88:41:BF:D8:7F:7E:9D:A1:D8:4E:EA:1D:FB:D4
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:68:b7:9b:c7:4d:75:18:2e:85:c7:d7:ac:85:aa:c7:af:94:
         06:15:8e:b6:89:bd:c2:17:64:72:38:44:9f:6c:7d:04:1a:8f:
         38:72:07:85:67:d7:ce:e6:c8:bb:01:0b:45:98:e0:2a:7e:27:
         b6:90:01:f2:bb:e6:cd:d4:9e:82:dd:4c:a5:d8:5f:0f:bd:ed:
         ec:39:38:8d:8b:07:f4:7a:5b:bf:e6:72:40:1c:ff:bb:c2:73:
         07:62:94:2a:3f:de:5a:71:13:a2:eb:a0:84:58:e0:de:ff:10:
         25:7a:88:a9:43:ce:a3:37:70:c5:cf:1c:ac:62:e3:32:b9:8a:
         7c:13:1d:c3:00:2a:2d:5e:b5:da:6f:a4:31:f9:19:dd:72:b3:
         54:cd:ce:72:a8:32:ad:ca:b7:f5:09:07:c8:0d:c4:dd:40:a9:
         fd:4e:02:b2:ea:d6:3e:ff:cc:73:b6:fa:03:bb:94:f4:d2:96:
         82:50:66:07:3e:40:c1:e1:3c:ff:79:9b:dc:6a:84:95:94:75:
         d2:32:58:f3:49:4b:72:62:f3:08:03:63:31:3b:67:61:ad:13:
         59:64:c9:c0:d3:fe:97:3b:e1:45:07:47:a2:62:1c:67:d0:d9:
         3e:bc:de:67:ad:d4:54:b0:3e:e4:ec:6e:44:56:75:ef:cd:4d:
         82:b4:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:26:28 2025 by rpki-client