Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32322d3234203d3e20323635323536.roa
File:                     3136382e302e3135362e302f32322d3234203d3e20323635323536.roa (raw, json)
Hash identifier:          qsDvbi/AGDQTP5jVbSNlWQZ8EyEqOqYajU55WyAjk9s=
Subject key identifier:   F5:1F:1E:EA:32:C6:1E:58:79:76:4C:48:1D:26:FE:4E:00:1F:0D:3D
Certificate issuer:       /CN=79684DFDE931D9553B72CBB4346C66B9C816C683
Certificate serial:       16BE79D4B63377FC46388DE5E438BD5B25E9FFD7
Authority key identifier: 79:68:4D:FD:E9:31:D9:55:3B:72:CB:B4:34:6C:66:B9:C8:16:C6:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79684DFDE931D9553B72CBB4346C66B9C816C683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32322d3234203d3e20323635323536.roa
Signing time:             Fri 14 Feb 2025 15:34:06 +0000
ROA not before:           Fri 14 Feb 2025 15:29:06 +0000
ROA not after:            Fri 13 Feb 2026 15:34:06 +0000
asID:                     265256
IP address blocks:        168.0.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/79684DFDE931D9553B72CBB4346C66B9C816C683.crl
                          rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/79684DFDE931D9553B72CBB4346C66B9C816C683.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79684DFDE931D9553B72CBB4346C66B9C816C683.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:be:79:d4:b6:33:77:fc:46:38:8d:e5:e4:38:bd:5b:25:e9:ff:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79684DFDE931D9553B72CBB4346C66B9C816C683
        Validity
            Not Before: Feb 14 15:29:06 2025 GMT
            Not After : Feb 13 15:34:06 2026 GMT
        Subject: CN=F51F1EEA32C61E5879764C481D26FE4E001F0D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7b:6b:71:66:2f:8f:71:b9:bd:e9:f0:8c:d2:
                    c5:a9:6f:22:29:68:2d:3b:58:52:b4:51:6b:8c:0f:
                    5c:21:d2:b1:76:cf:a7:2c:ab:92:6a:49:42:dc:10:
                    eb:44:9a:71:4e:de:23:bf:b4:36:7b:95:fe:0b:73:
                    12:34:20:72:51:9d:e7:29:d4:ae:c0:f4:8b:a3:8b:
                    57:9f:f1:22:0a:e6:c8:1b:f6:47:f9:7a:22:21:5f:
                    37:b0:c6:65:20:4f:5b:12:9e:56:e7:5e:e3:42:af:
                    10:6f:42:cc:ac:38:0d:d9:66:c9:07:f3:fd:51:2f:
                    f7:fc:6f:ca:40:97:f7:ff:4d:87:19:fb:30:8b:40:
                    bd:6b:1a:67:50:77:63:07:84:36:c2:82:0f:af:be:
                    99:e7:1a:1d:21:eb:30:ef:7e:33:12:93:f9:3a:36:
                    07:8a:d7:99:52:25:a9:86:a6:3e:ad:ea:8e:90:9a:
                    2b:6d:a6:1b:cc:b4:cd:57:11:d4:ea:96:7e:05:11:
                    d2:12:7f:20:3f:6c:34:af:8f:5a:4a:30:c7:58:45:
                    c4:f3:88:90:62:48:eb:90:aa:ba:13:da:d3:e1:bb:
                    ff:58:74:5c:3b:4e:c2:21:eb:1c:c2:59:de:0d:5b:
                    0d:95:5c:2a:41:59:f5:40:11:83:68:89:b5:6c:3f:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1F:1E:EA:32:C6:1E:58:79:76:4C:48:1D:26:FE:4E:00:1F:0D:3D
            X509v3 Authority Key Identifier:
                keyid:79:68:4D:FD:E9:31:D9:55:3B:72:CB:B4:34:6C:66:B9:C8:16:C6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/79684DFDE931D9553B72CBB4346C66B9C816C683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79684DFDE931D9553B72CBB4346C66B9C816C683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32322d3234203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:be:4d:14:09:e2:b0:c0:6d:93:5f:fa:42:cc:9e:8a:59:3b:
         37:7e:cb:8f:f2:bf:ac:9f:a9:ce:4c:7e:fb:bb:19:b9:46:10:
         2f:e5:b6:12:5e:0b:6f:58:9c:d7:2b:e4:b2:d4:6f:ef:3c:53:
         b7:17:7e:92:96:a5:b7:54:03:3a:9b:94:66:3c:6a:11:57:75:
         b1:18:48:38:13:44:ab:39:d5:60:41:76:1c:b4:ca:9b:2d:34:
         13:c0:72:c4:04:d1:2a:a7:93:ee:a3:0b:78:7d:f1:5d:25:9d:
         68:89:dd:40:b5:3b:f8:fa:b3:42:49:74:1e:8d:36:c2:69:62:
         7e:61:9f:cb:86:d1:56:12:10:8d:e1:67:98:d3:71:de:d6:c6:
         d8:d7:01:bf:6c:dc:a9:11:b7:24:4d:0a:d3:bf:63:d4:51:cc:
         aa:d5:d6:0a:7d:07:95:da:fa:34:3a:32:9c:30:1d:53:3d:5c:
         63:9f:26:36:b6:1c:50:05:29:8d:f9:20:06:22:8c:ad:0a:e8:
         16:1d:15:78:22:8f:49:09:8f:6d:fb:6e:f2:b8:20:64:25:ab:
         49:cc:5c:f4:f3:ff:33:6e:79:af:79:ca:27:81:51:79:5b:ec:
         86:7f:56:57:6b:2a:d4:92:81:0c:ee:d0:41:fb:e7:0d:91:e6:
         70:e0:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:35:06 2025 by rpki-client