Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3136382e39302e33362e302f32322d3234203d3e20323634323336.roa
File:                     3136382e39302e33362e302f32322d3234203d3e20323634323336.roa (raw, json)
Hash identifier:          HtqSGu9dBb0YYZ+ZbVBsu0Qzj5D0doY+P8Xbw0oRSSY=
Subject key identifier:   0E:D8:39:57:EB:C4:8D:60:BB:6B:EE:92:A9:17:5B:AE:6B:AC:AB:76
Certificate issuer:       /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
Certificate serial:       76FF40428D3309382995ED38515CEE61A5C76F6C
Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3136382e39302e33362e302f32322d3234203d3e20323634323336.roa
Signing time:             Wed 04 Jun 2025 14:23:02 +0000
ROA not before:           Wed 04 Jun 2025 14:18:02 +0000
ROA not after:            Wed 03 Jun 2026 14:23:02 +0000
asID:                     264236
IP address blocks:        168.90.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl
                          rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 19:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ff:40:42:8d:33:09:38:29:95:ed:38:51:5c:ee:61:a5:c7:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
        Validity
            Not Before: Jun  4 14:18:02 2025 GMT
            Not After : Jun  3 14:23:02 2026 GMT
        Subject: CN=0ED83957EBC48D60BB6BEE92A9175BAE6BACAB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:7f:1b:7b:6e:37:a9:7c:3d:08:36:13:ef:
                    e6:71:98:99:4e:00:68:a5:e2:93:cf:65:36:13:35:
                    4d:b5:83:f1:24:f6:3c:82:2c:cc:fb:9c:cc:0e:a4:
                    56:45:42:e1:82:5f:46:94:f3:fb:1e:4d:33:4a:83:
                    f4:20:b6:d6:35:95:94:c3:a0:42:4d:bc:1c:80:44:
                    3e:72:d5:8e:06:07:52:86:69:14:12:2c:43:af:41:
                    d3:9f:1c:74:ee:5c:fe:7a:35:60:26:2b:a3:f3:ca:
                    ba:53:3a:17:b1:80:bb:7b:4c:72:a7:47:e4:65:3b:
                    75:50:8c:8e:97:56:1e:cb:ba:bf:23:bf:04:90:e5:
                    6f:c5:13:1c:03:8f:86:17:19:51:98:71:d8:f4:04:
                    e3:21:74:70:f3:9c:27:c8:e0:3e:af:71:1a:d6:fc:
                    3d:ea:58:ad:e8:4e:21:2e:da:4c:ba:02:76:74:34:
                    94:5e:ee:05:81:f8:2f:7e:ac:f6:a2:3a:1a:51:30:
                    68:66:0b:7d:5c:a8:3e:a0:a5:f7:d6:bb:67:d2:12:
                    9d:76:9b:c5:01:33:40:f9:df:78:53:c5:d9:ae:67:
                    f4:52:ef:b1:3e:c9:41:c1:27:41:27:5b:a1:ad:a2:
                    c4:0e:3b:4b:81:3e:19:47:c3:bc:3e:7f:96:c9:6b:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D8:39:57:EB:C4:8D:60:BB:6B:EE:92:A9:17:5B:AE:6B:AC:AB:76
            X509v3 Authority Key Identifier:
                keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3136382e39302e33362e302f32322d3234203d3e20323634323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:23:b0:cb:a8:d9:6c:85:d7:4e:96:4f:66:b1:56:a0:f6:ac:
         ca:1a:c1:cb:17:d1:e3:d0:6f:cd:f5:be:4d:ec:0f:bb:bb:f5:
         6e:fb:02:dd:d0:ea:2e:aa:ec:67:31:30:97:97:20:4b:8d:29:
         a7:ca:d0:fb:42:29:74:af:fa:73:d8:07:6a:b0:eb:4c:24:dd:
         aa:1d:30:da:e5:6f:d2:fe:24:5c:e5:71:ed:5a:59:10:24:36:
         08:70:84:18:f8:00:51:cb:2c:bd:1d:79:21:7b:e3:c5:10:4d:
         92:bc:62:dc:5f:c2:99:2f:b0:d4:07:81:de:98:e1:32:2a:ca:
         28:c2:e0:d2:82:88:16:7b:8a:bd:53:f7:d8:e5:bb:1f:cc:c5:
         00:c2:dc:ad:30:3e:a7:66:5b:65:5d:39:d3:67:80:6d:00:bc:
         c0:ee:2b:be:77:06:83:3d:4a:2f:ed:8f:1e:53:37:2a:97:bb:
         96:05:b6:74:bf:68:2d:8c:4d:56:ac:4e:68:d2:1f:3c:aa:c2:
         df:d3:f4:70:92:65:81:fd:c7:57:56:4b:bd:eb:c0:8b:a4:b6:
         f2:b8:0d:6b:5b:77:26:b5:07:c6:a8:41:39:5f:62:f6:c2:0f:
         5b:3e:c6:0c:a3:66:61:9f:5e:48:6b:b0:f4:c0:a2:3e:12:1e:
         98:9d:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:18 2025 by rpki-client