Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130342e302f32322d3234203d3e20323636393631.roa
File:                     3136342e3136332e3130342e302f32322d3234203d3e20323636393631.roa (raw, json)
Hash identifier:          +4DqVOf4YRhIz9xUsGUmYt9d/39lKvOD3PWOuTGKFyo=
Subject key identifier:   6A:42:C2:E7:69:44:CD:A7:DA:49:DC:76:FC:BA:AD:A0:7A:8B:81:31
Certificate issuer:       /CN=201858301640DA230EDCEE272F949CD407A471E7
Certificate serial:       06749B3983E25A77CD185A4C4D71AB7A6A85AFB7
Authority key identifier: 20:18:58:30:16:40:DA:23:0E:DC:EE:27:2F:94:9C:D4:07:A4:71:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201858301640DA230EDCEE272F949CD407A471E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130342e302f32322d3234203d3e20323636393631.roa
Signing time:             Tue 25 Feb 2025 00:41:44 +0000
ROA not before:           Tue 25 Feb 2025 00:36:44 +0000
ROA not after:            Tue 24 Feb 2026 00:41:44 +0000
asID:                     266961
IP address blocks:        164.163.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.crl
                          rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201858301640DA230EDCEE272F949CD407A471E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:74:9b:39:83:e2:5a:77:cd:18:5a:4c:4d:71:ab:7a:6a:85:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201858301640DA230EDCEE272F949CD407A471E7
        Validity
            Not Before: Feb 25 00:36:44 2025 GMT
            Not After : Feb 24 00:41:44 2026 GMT
        Subject: CN=6A42C2E76944CDA7DA49DC76FCBAADA07A8B8131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:0b:da:a0:23:48:7f:ba:96:36:9b:74:1a:
                    1d:e0:5e:3d:3c:b6:ca:3d:49:8d:50:a7:5f:b9:b2:
                    17:9c:50:dd:62:14:c7:e6:72:ad:59:44:2a:e8:94:
                    12:d2:d2:5d:7d:a2:70:55:bd:87:b9:2c:48:d9:6a:
                    87:41:2a:1a:9f:7c:b2:e7:dc:db:f7:0e:fe:68:b1:
                    87:c2:e5:d1:3b:e3:f5:e2:2b:c4:43:09:48:a8:75:
                    84:7d:96:fb:3c:4a:01:3f:78:ae:3f:a8:49:78:e0:
                    01:37:7d:76:35:c0:ea:ba:fd:4a:6b:05:e6:fc:19:
                    62:d4:ab:8c:ef:4d:78:76:db:40:fc:6d:1c:63:8d:
                    72:b6:07:00:a2:93:7d:81:c2:e8:a5:02:42:80:ed:
                    ca:43:97:70:8a:fd:25:e0:52:01:3b:7b:71:91:23:
                    63:66:3d:e0:00:ab:b8:c0:34:6d:24:62:be:7b:3f:
                    98:44:c9:c6:9f:58:cb:c5:ad:18:d2:11:fa:18:02:
                    d3:19:52:e9:13:ab:d8:81:2f:8a:a3:93:f9:96:b7:
                    d6:79:4e:26:8a:d9:05:45:78:fd:4e:25:28:5e:91:
                    f5:21:6a:bb:0e:cd:ee:3e:55:e6:08:59:5a:7c:3c:
                    0d:31:cb:c9:81:fe:3d:00:77:39:8b:45:bf:60:30:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:42:C2:E7:69:44:CD:A7:DA:49:DC:76:FC:BA:AD:A0:7A:8B:81:31
            X509v3 Authority Key Identifier:
                keyid:20:18:58:30:16:40:DA:23:0E:DC:EE:27:2F:94:9C:D4:07:A4:71:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201858301640DA230EDCEE272F949CD407A471E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130342e302f32322d3234203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:56:2b:2f:db:a4:d8:7c:9e:f3:50:d0:e6:22:4c:e4:69:12:
         2e:e4:2e:ef:de:03:09:5b:b7:4a:aa:80:5b:78:6c:91:f9:59:
         04:f2:ae:e7:36:f3:ab:36:22:cd:6b:b8:ef:59:f1:bc:c3:57:
         ff:07:43:c8:1b:3a:9d:4a:f9:8b:f8:4e:88:76:8e:03:65:97:
         c7:8e:f7:eb:94:d8:9f:4f:e8:63:c1:d9:6b:64:41:8e:bf:7e:
         02:f9:69:61:a9:fd:83:c2:31:44:39:44:64:f5:f3:55:4d:be:
         09:0f:e6:64:4c:51:32:ce:32:ef:90:c3:ac:e5:51:c2:31:b6:
         24:2d:d2:06:5c:e6:aa:e4:0c:5a:5f:2d:56:9e:2b:4c:53:07:
         82:86:fb:a4:c4:e7:19:b9:18:a4:85:10:5a:f8:0f:45:b0:c5:
         6a:b2:40:e2:16:c7:6a:ab:0f:3d:6e:13:62:9a:b7:35:a1:23:
         17:4b:a5:80:5a:0e:00:8c:3c:a5:61:e0:0b:c6:c8:62:df:9f:
         95:7f:ec:60:72:5a:94:af:c6:f8:cb:b0:df:3b:52:c3:57:21:
         17:49:5a:34:bf:56:ce:ff:0f:20:27:9d:d7:fe:bd:3d:d5:99:
         0b:a1:32:f0:a7:4a:12:14:04:4a:b2:52:9b:d8:c1:63:0a:bd:
         dc:9d:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:56 2025 by rpki-client