Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa
File:                     3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          jchDZhefUgtrqdRKQFAIFMMQ0gVYOvk/+hFZGIjCTcI=
Subject key identifier:   EC:F5:C1:29:5D:43:0A:3E:9A:D4:7F:35:33:6E:B1:D8:AB:E2:63:3F
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       4D0CD6C65731AE695C57CE0A69E2EDD3EED45698
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 06 Mar 2025 07:30:52 +0000
ROA not before:           Thu 06 Mar 2025 07:25:52 +0000
ROA not after:            Thu 05 Mar 2026 07:30:52 +0000
asID:                     52968
IP address blocks:        168.194.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0c:d6:c6:57:31:ae:69:5c:57:ce:0a:69:e2:ed:d3:ee:d4:56:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Mar  6 07:25:52 2025 GMT
            Not After : Mar  5 07:30:52 2026 GMT
        Subject: CN=ECF5C1295D430A3E9AD47F35336EB1D8ABE2633F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:85:62:ba:e8:f5:d2:1a:d3:b9:03:6f:db:
                    61:a3:0d:b6:14:22:74:80:70:7b:b1:a3:5d:86:a4:
                    7d:fb:b9:53:c0:42:54:58:85:41:68:06:df:5d:a9:
                    06:5d:8f:00:83:01:86:08:5a:40:22:1c:3a:e5:1e:
                    76:99:fd:50:37:5a:a2:04:5e:0c:0f:10:1a:11:4e:
                    bb:fa:f4:2f:27:cc:d9:a5:b2:54:b8:84:97:8a:59:
                    69:ef:e4:15:83:f0:8e:51:ed:75:bd:72:52:e3:e2:
                    bd:1d:a3:be:c2:dd:7f:36:90:cc:47:ca:61:5e:41:
                    07:18:8a:61:ac:23:02:56:c1:9f:36:5a:69:4b:58:
                    33:90:14:9e:e0:03:a1:b1:ab:4a:e7:e3:dd:b5:86:
                    ba:1a:d3:1c:21:8c:19:59:c9:0e:d6:49:3f:48:d9:
                    4f:7a:c8:c7:6d:b1:52:2c:e2:da:fc:65:a2:69:47:
                    58:57:ce:0f:d0:c2:17:b2:3e:8e:ed:0f:9e:3a:de:
                    ab:b7:77:53:61:87:c2:70:0d:60:2d:21:97:a1:51:
                    e4:7b:f8:4d:7a:c1:31:80:33:86:82:05:8d:b8:a6:
                    e9:cd:c7:e0:d5:17:34:66:e1:7e:99:b7:52:65:cc:
                    4b:b4:e6:1b:a5:c1:f4:00:dc:2a:97:a7:90:1a:9e:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F5:C1:29:5D:43:0A:3E:9A:D4:7F:35:33:6E:B1:D8:AB:E2:63:3F
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:da:13:2b:93:e9:ff:42:ee:03:58:41:ed:97:a6:8e:ab:
         4e:e8:91:39:4e:47:99:ef:59:3e:1c:4f:e4:85:1e:d2:2e:8f:
         2d:63:32:a3:d7:1d:21:40:30:0c:d1:d9:23:e7:56:e1:be:7a:
         92:b4:e2:9d:c8:91:95:21:71:86:98:e4:d7:a1:99:30:22:78:
         03:f0:f0:8b:af:11:e8:bb:10:e6:77:c0:67:84:b2:31:66:5d:
         29:72:01:d4:55:95:77:54:8d:dc:03:4c:ce:2e:78:35:d4:61:
         5d:50:c4:75:5b:57:c8:38:7f:aa:5a:54:95:3f:10:c8:18:29:
         ef:c5:0b:0a:42:be:8d:39:53:12:95:83:de:f1:57:68:3f:d7:
         ee:68:a2:2e:8b:75:50:78:b5:c7:d6:d1:13:12:17:bf:8e:5d:
         b6:a8:f5:8a:43:25:02:43:7c:8c:19:27:ab:c7:be:aa:59:09:
         e3:20:cf:64:0c:7a:d9:c2:de:d1:16:21:e2:81:8c:3b:3b:3b:
         55:f5:a2:c7:7a:c1:ec:85:b6:53:46:64:08:55:50:0b:6e:a8:
         79:b5:14:64:5d:1a:3b:f7:39:77:c1:18:bd:3a:e1:83:d6:d9:
         49:7d:fa:fc:f9:f0:da:9e:f1:6c:ef:1d:7e:0c:dd:14:f9:cc:
         02:f2:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:16:50 2025 by rpki-client