Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa (raw, json)
Hash identifier:          o6B3h4JCDtevLNOy881hwj+OsrM28KkqEeBRF/u/zy8=
Subject key identifier:   D2:18:96:24:47:91:DF:62:BB:F0:8F:A7:18:FF:D7:32:84:F3:D7:08
Certificate issuer:       /CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
Certificate serial:       200E18C2CDDDD035299393D5FB0646E1F3043232
Authority key identifier: E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa
Signing time:             Thu 06 Mar 2025 04:54:47 +0000
ROA not before:           Thu 06 Mar 2025 04:49:47 +0000
ROA not after:            Thu 05 Mar 2026 04:54:47 +0000
asID:                     264949
IP address blocks:        168.232.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0e:18:c2:cd:dd:d0:35:29:93:93:d5:fb:06:46:e1:f3:04:32:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
        Validity
            Not Before: Mar  6 04:49:47 2025 GMT
            Not After : Mar  5 04:54:47 2026 GMT
        Subject: CN=D21896244791DF62BBF08FA718FFD73284F3D708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:53:3c:a2:cb:57:29:23:87:a4:ec:f6:57:
                    44:2e:63:6b:73:2c:12:37:e5:e5:cc:d7:4f:2a:8f:
                    e3:8e:5d:b4:3d:a1:ec:df:5a:b5:d3:16:94:fe:5f:
                    63:e1:26:64:bd:cc:40:26:46:70:8d:26:e5:d2:60:
                    08:39:4e:eb:af:f6:f8:c2:46:f1:e4:72:74:40:6d:
                    20:89:b5:15:73:c7:19:be:22:23:8f:b0:69:c3:09:
                    fa:b2:59:b1:a1:54:97:f6:43:55:0a:32:18:66:b8:
                    a3:40:2b:17:6b:b6:6d:3b:de:28:6f:02:06:94:7f:
                    f8:f4:5b:f3:83:21:8a:b9:58:25:f0:ef:73:2d:d8:
                    1c:c9:48:41:59:53:1f:00:9f:1e:61:03:8b:ce:30:
                    98:67:32:94:61:7e:da:a5:a6:0b:90:b7:92:c3:9d:
                    c1:70:fb:fa:bb:a5:10:5d:f8:c4:ea:db:0c:e8:c5:
                    56:47:6a:c8:dc:72:79:77:73:f7:28:8a:c0:8a:6e:
                    c3:aa:4f:a5:f4:96:52:25:53:d5:82:00:03:72:9f:
                    ea:d6:21:c5:97:ca:84:11:95:21:f8:69:6a:14:42:
                    d4:c7:8b:5d:4f:81:b0:5d:af:8e:3c:58:1f:c8:bb:
                    46:3e:9f:de:d9:d2:1a:e0:a8:d3:97:04:21:c7:b3:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:96:24:47:91:DF:62:BB:F0:8F:A7:18:FF:D7:32:84:F3:D7:08
            X509v3 Authority Key Identifier:
                keyid:E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/3136382e3233322e34342e302f32322d3232203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:22:6a:4a:59:f8:c0:52:18:0e:f4:0c:7b:32:68:49:e1:c4:
         53:c6:4f:4b:a5:da:fa:7c:ab:43:44:03:2f:a0:73:84:cc:2d:
         a8:a6:59:ee:6e:83:0d:b2:84:4d:36:ce:aa:e6:a1:fc:65:72:
         c8:cd:4f:e2:82:79:57:4d:25:f8:54:ea:98:c7:7b:f1:d5:de:
         94:3f:73:a0:eb:fe:99:b7:6a:b2:57:f8:1d:d9:db:e2:94:9e:
         1c:b7:b2:9d:8c:6c:38:c4:2e:8c:93:54:a5:b4:4a:ec:cb:b3:
         07:88:e5:01:68:a2:a3:63:e1:75:bc:a5:a0:55:29:29:58:5f:
         ca:b1:23:c7:9f:e1:b1:f4:49:b6:2a:b8:c3:d4:c7:ac:bd:b2:
         32:7f:3e:fb:e4:70:f5:49:25:4d:eb:56:86:86:71:de:a2:54:
         35:37:f3:00:56:4e:1b:8b:ab:72:f4:1f:65:57:69:33:40:9f:
         58:97:1e:58:a4:13:21:e9:3f:f3:56:b9:87:f6:8d:99:9a:5e:
         a0:80:ca:08:8d:82:9c:0d:83:d7:69:1f:bc:bf:64:49:c2:dd:
         24:c9:b8:42:24:67:cd:74:47:41:90:6f:d8:31:ab:bb:0f:27:
         50:27:ad:c5:21:52:eb:58:22:53:52:e7:09:a2:07:2a:17:85:
         de:3f:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:24 2025 by rpki-client