Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3136382e3132312e3232382e302f32322d3234203d3e20323632333934.roa
File:                     3136382e3132312e3232382e302f32322d3234203d3e20323632333934.roa (raw, json)
Hash identifier:          UtGvG2OMPS2KkJqrasD6dN65BLhsRidK2uf11MouokM=
Subject key identifier:   EC:C9:99:18:22:A6:3B:40:51:43:E0:B1:7B:2F:F4:D7:18:54:71:10
Certificate issuer:       /CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
Certificate serial:       13FD9F5D609BAF2113B49A8522F4F6D276B174B2
Authority key identifier: 7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3136382e3132312e3232382e302f32322d3234203d3e20323632333934.roa
Signing time:             Thu 06 Mar 2025 18:06:06 +0000
ROA not before:           Thu 06 Mar 2025 18:01:06 +0000
ROA not after:            Thu 05 Mar 2026 18:06:06 +0000
asID:                     262394
IP address blocks:        168.121.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl
                          rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:9f:5d:60:9b:af:21:13:b4:9a:85:22:f4:f6:d2:76:b1:74:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
        Validity
            Not Before: Mar  6 18:01:06 2025 GMT
            Not After : Mar  5 18:06:06 2026 GMT
        Subject: CN=ECC9991822A63B405143E0B17B2FF4D718547110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:37:d5:c9:71:8a:b6:85:70:41:26:55:67:
                    df:12:b4:26:74:32:3f:62:9e:da:ea:19:05:7c:d6:
                    83:53:d2:43:58:90:3a:bf:85:eb:0b:19:f1:8c:fe:
                    2a:5e:8d:47:7f:4b:39:af:a1:5d:ab:7f:24:f4:4d:
                    5f:c2:eb:e4:9f:19:70:59:e9:4b:70:00:be:4b:e0:
                    d6:74:a8:50:9b:23:e3:92:63:d7:13:22:8b:67:a3:
                    4c:46:2e:dc:99:f4:21:f3:39:3a:60:8d:a7:1a:da:
                    6c:aa:19:41:5a:51:c5:38:72:d6:3c:4b:3e:c1:f8:
                    73:ff:55:cb:4d:62:ad:d2:b9:58:d5:dc:66:7d:b5:
                    40:da:e3:22:50:5f:12:16:7b:82:59:eb:4f:a9:40:
                    71:57:b1:32:b9:c7:1d:7b:e9:99:a3:6c:d0:99:c5:
                    c8:68:97:18:c3:f3:24:59:7e:ec:29:2a:19:31:4f:
                    91:da:77:a0:52:cb:8c:42:e1:59:c6:81:50:fd:1e:
                    f8:d1:a9:20:58:3b:03:4e:56:06:58:d4:f5:30:9c:
                    92:72:dd:04:fb:03:06:56:50:11:ea:69:3f:48:94:
                    bb:dd:9f:1f:8c:35:6f:a5:c8:01:0d:a6:24:47:d3:
                    73:4e:61:26:24:8d:86:2a:38:ec:31:0b:e5:8b:2e:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C9:99:18:22:A6:3B:40:51:43:E0:B1:7B:2F:F4:D7:18:54:71:10
            X509v3 Authority Key Identifier:
                keyid:7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3136382e3132312e3232382e302f32322d3234203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:67:3a:58:fa:bb:e3:f1:c1:2a:9c:43:1a:49:17:fc:ae:8b:
         d7:1d:72:09:4c:b0:19:2a:62:19:88:71:8b:fe:bd:4c:91:f9:
         3a:83:33:36:04:18:8f:9e:73:65:82:4a:14:c9:32:76:aa:c0:
         b9:02:b6:3d:59:d4:2b:6f:fe:37:6c:1b:f2:57:7a:df:5f:00:
         0c:91:f9:67:65:ac:9a:f5:2d:34:d5:7d:e6:dd:ab:77:92:9c:
         c7:6d:1a:e8:71:a1:01:65:15:ed:1a:60:48:31:44:f2:37:67:
         da:99:fd:cc:2a:39:72:ab:89:d6:38:88:ce:9a:4a:1f:25:05:
         82:e5:b2:7d:03:07:3a:79:5e:3c:42:2b:41:a4:af:6a:4a:c7:
         b6:9a:12:88:bc:f7:8e:fd:37:c0:97:c2:da:a7:74:1b:0f:06:
         b7:58:b8:c6:a7:c5:72:4d:59:90:b5:c7:fe:e3:e3:1f:b4:b1:
         2c:30:94:f9:01:d9:b9:0c:78:9b:fb:cd:96:2c:15:ad:b8:79:
         9e:b7:24:6d:db:d0:a4:ea:9b:61:3c:4e:05:5e:00:b1:f0:45:
         97:f1:27:35:96:8f:99:46:cd:0d:7c:82:09:3e:a6:8d:5c:bb:
         27:e4:86:ac:f0:79:61:39:57:64:d0:2f:28:4b:13:b2:45:d6:
         3b:c3:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:07:28 2025 by rpki-client