Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (raw, json)
Hash identifier:          FSsGN+HO/Zej0yrB1pNYsEFT0GVE+OEY9UUk6Wk220A=
Subject key identifier:   94:57:4C:E9:59:6C:96:75:13:F8:6F:D2:6F:BC:FE:8E:1B:49:19:4B
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       0DCF5C9AD8A4BA84BFCF1A9ADA54B00F49D16651
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265425
IP address blocks:        168.195.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 20:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cf:5c:9a:d8:a4:ba:84:bf:cf:1a:9a:da:54:b0:0f:49:d1:66:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=94574CE9596C967513F86FD26FBCFE8E1B49194B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:b8:53:ae:1f:66:e5:30:a3:b7:b8:c2:3d:
                    99:10:1c:d2:b0:da:05:a6:77:88:e8:c4:c9:e7:55:
                    3c:f0:40:85:4c:7e:7d:e8:ee:b5:91:fe:1f:01:2e:
                    44:7e:af:65:3e:c3:20:4d:cc:7f:2f:48:ec:83:34:
                    fe:6a:a6:2f:5f:6b:ea:3e:42:77:ff:b3:25:8a:9b:
                    f7:6c:8d:05:ce:fc:74:c8:e2:66:45:80:68:6f:87:
                    7c:ee:9c:a4:b0:09:d0:49:74:16:e0:99:3d:72:6f:
                    86:87:ae:f2:9b:5f:5f:a0:18:53:a0:cb:82:c1:06:
                    18:db:98:19:aa:b1:14:98:c0:d0:8b:23:b2:c5:14:
                    a8:fd:aa:c8:5b:cb:b5:39:7f:e2:93:50:6e:7c:3c:
                    ad:c9:c0:3b:93:9d:72:40:84:57:b5:c5:cb:32:3c:
                    f6:94:ee:a2:8f:01:16:4e:3c:45:3e:00:a8:ac:20:
                    e8:c7:b9:f0:1e:c3:41:db:cd:1d:dc:c8:7d:89:bd:
                    73:09:9f:26:38:93:df:84:48:50:df:62:98:7d:57:
                    d8:8e:3c:70:9b:48:12:ef:94:f9:02:57:f2:bc:e3:
                    85:68:ef:54:35:7b:06:c9:5a:32:28:5d:a7:cc:36:
                    fa:96:49:81:b5:9e:7a:7c:03:ac:60:21:bf:bb:eb:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:4C:E9:59:6C:96:75:13:F8:6F:D2:6F:BC:FE:8E:1B:49:19:4B
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:97:51:10:52:3c:4d:63:7a:ac:0b:66:ca:f0:0a:d1:47:77:
         bb:f2:3a:c9:3e:b0:82:5b:c9:0d:b2:e6:d0:7d:b8:fb:63:26:
         26:b8:b4:15:69:87:3b:bf:22:72:42:6b:ea:48:ee:b5:b8:11:
         13:63:60:f1:3c:33:65:7a:34:f8:fe:50:95:2f:21:41:e5:eb:
         5f:f5:15:3e:5b:64:4c:21:34:e7:b5:51:cd:9e:19:44:a1:70:
         0d:95:60:26:08:60:d1:98:96:eb:d7:06:3d:d2:45:0b:31:66:
         8c:51:92:9a:2f:e1:d7:b8:2e:73:b1:71:b2:f9:f2:ca:b8:2e:
         30:81:1e:25:f9:d8:81:1c:8c:ab:63:1a:a4:06:a5:b4:99:61:
         8b:94:41:dd:18:07:bc:9f:72:56:9f:e9:75:09:c9:8a:c6:db:
         08:f8:6b:94:ae:55:52:29:99:61:1f:3b:82:10:41:84:e5:37:
         78:cb:1d:02:97:2d:96:4f:24:e8:0a:de:68:0a:e5:10:c5:60:
         ea:08:74:2a:5d:f0:d4:d7:f0:6a:62:95:76:e8:02:9c:b5:d2:
         5f:37:50:ab:22:b9:05:bd:cd:87:11:9c:aa:12:fe:ed:46:14:
         11:f3:55:90:b0:7c:39:c1:d6:3c:33:47:39:5a:29:f0:df:fd:
         e9:b4:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:59 2025 by rpki-client