Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa
File:                     3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          u4M8e1QjwCMyfOaYO4uj9b9Wjo0zcVy3efli8m4DiCA=
Subject key identifier:   8E:6C:30:9E:67:8C:0C:10:B0:36:06:88:8D:10:F8:CF:D4:8E:B7:59
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       282AF8BFF2A06F9E99F71E0D7FF97EF3B2F234A5
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 06 Mar 2025 10:33:14 +0000
ROA not before:           Thu 06 Mar 2025 10:28:14 +0000
ROA not after:            Thu 05 Mar 2026 10:33:14 +0000
asID:                     268097
IP address blocks:        168.194.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2a:f8:bf:f2:a0:6f:9e:99:f7:1e:0d:7f:f9:7e:f3:b2:f2:34:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Mar  6 10:28:14 2025 GMT
            Not After : Mar  5 10:33:14 2026 GMT
        Subject: CN=8E6C309E678C0C10B03606888D10F8CFD48EB759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:90:69:93:3f:89:94:85:80:a3:e7:da:0b:
                    38:b8:96:cd:16:4c:13:4d:1a:87:d8:a6:03:4f:5e:
                    ec:a9:fc:39:85:06:b4:09:0b:cd:76:ca:48:da:32:
                    77:a9:5a:4c:87:ff:9f:00:9e:70:db:8d:79:b4:d7:
                    e8:55:fb:00:5f:5c:b1:0b:07:24:8f:e0:4d:aa:e6:
                    fc:22:59:eb:33:bb:03:d5:d4:17:c0:79:2c:6e:e5:
                    61:da:3e:6b:2a:1f:4c:99:df:e6:e8:6c:6c:87:05:
                    96:93:3b:52:17:f3:bf:ea:0c:39:d5:04:e3:c8:4d:
                    90:b3:aa:f7:ae:28:0e:14:9b:2e:64:e6:43:bb:ef:
                    b5:94:40:37:98:53:9a:f1:a6:27:eb:dc:06:e6:c3:
                    67:c0:ab:e0:62:c1:da:83:98:cb:04:a2:99:53:b2:
                    8b:4e:ab:36:76:4e:ee:a3:33:a9:ff:f1:2d:95:0a:
                    21:16:06:00:1a:f2:8b:e9:1f:c2:43:50:72:1d:b4:
                    61:ae:24:54:7e:29:84:aa:e3:7e:1f:68:e4:44:d3:
                    3c:1e:d7:41:1b:04:cb:94:78:02:16:0c:c0:94:b7:
                    8d:3e:2f:c3:54:bd:0a:ca:ad:93:3f:67:49:d1:1b:
                    65:01:59:47:cc:8a:f9:1e:e0:77:e0:c9:3c:1d:96:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:30:9E:67:8C:0C:10:B0:36:06:88:8D:10:F8:CF:D4:8E:B7:59
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:80:c5:6e:08:3e:62:2d:96:ee:30:7e:2f:08:ca:1f:bb:99:
         9c:e6:11:c3:9c:d5:6d:b4:9c:9c:0b:98:0f:ac:79:46:d1:c4:
         23:c0:ea:2c:70:cf:53:f4:8f:e1:26:27:02:be:f2:44:b4:b0:
         ce:81:d4:6c:a5:70:78:4b:66:5d:13:aa:59:b4:c3:dc:78:e3:
         a9:72:d2:df:43:1e:b3:31:11:ae:aa:61:c3:94:d2:0c:9d:4e:
         4b:79:f7:1f:95:3a:53:fe:e3:28:36:21:d3:a6:b9:f8:14:25:
         43:7e:49:90:c4:6f:b8:7c:c2:f3:14:b0:3e:75:91:24:ca:89:
         21:9c:7c:5c:9f:36:30:30:9d:64:2c:51:7f:a4:87:02:66:cd:
         84:6a:1c:22:32:2f:79:21:a9:e5:55:d9:cd:59:0a:29:ef:09:
         fc:d0:92:cf:23:ed:e0:7a:d0:b7:b6:81:f6:fe:62:73:3e:db:
         ef:6c:92:16:71:97:57:58:ce:43:51:c6:50:13:e8:4b:27:83:
         5a:c3:44:bf:7d:c3:ec:d7:80:61:ce:17:d2:60:49:2b:8b:66:
         0b:82:a0:38:55:ba:90:20:9d:30:8c:61:f7:6c:eb:d6:2b:4e:
         9e:df:f5:e4:71:ca:8b:49:9f:cb:94:68:3a:91:c0:e4:68:4f:
         19:c0:e5:04
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKCr4v/Kgb56Z9x4Nf/l+87LyNKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDMkM5QzI2MTc1RjcyMTNBREE3MkQ4QkZGMjk1OUE2
RDY2MUM2MDAeFw0yNTAzMDYxMDI4MTRaFw0yNjAzMDUxMDMzMTRaMDMxMTAvBgNV
BAMTKDhFNkMzMDlFNjc4QzBDMTBCMDM2MDY4ODhEMTBGOENGRDQ4RUI3NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixZBpkz+JlIWAo+faCzi4ls0W
TBNNGofYpgNPXuyp/DmFBrQJC812ykjaMnepWkyH/58AnnDbjXm01+hV+wBfXLEL
BySP4E2q5vwiWeszuwPV1BfAeSxu5WHaPmsqH0yZ3+bobGyHBZaTO1IX87/qDDnV
BOPITZCzqveuKA4Umy5k5kO777WUQDeYU5rxpifr3Abmw2fAq+BiwdqDmMsEoplT
sotOqzZ2Tu6jM6n/8S2VCiEWBgAa8ovpH8JDUHIdtGGuJFR+KYSq434faORE0zwe
10EbBMuUeAIWDMCUt40+L8NUvQrKrZM/Z0nRG2UBWUfMivke4HfgyTwdlgdVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjmwwnmeMDBCwNgaIjRD4z9SOt1kwHwYDVR0j
BBgwFoAUoMLJwmF19yE62nLYv/KVmm1mHGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVTYWtnYUJOdU1MbzNCZG5WZ0RlcHU0OVlMdFd0akZHY0ozdVFoampB
MWgvMS9BMEMyQzlDMjYxNzVGNzIxM0FEQTcyRDhCRkYyOTU5QTZENjYxQzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQzJDOUMyNjE3NUY3MjEz
QURBNzJEOEJGRjI5NTlBNkQ2NjFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1U2FrZ2FCTnVNTG8zQmRuVmdEZXB1NDlZTHRXdGpGR2NKM3VRaGpqQTFoLzEv
MzEzNjM4MmUzMTM5MzQyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzODMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjC0DANBgkqhkiG9w0BAQsFAAOCAQEAYIDF
bgg+Yi2W7jB+LwjKH7uZnOYRw5zVbbScnAuYD6x5RtHEI8DqLHDPU/SP4SYnAr7y
RLSwzoHUbKVweEtmXROqWbTD3HjjqXLS30MeszERrqphw5TSDJ1OS3n3H5U6U/7j
KDYh06a5+BQlQ35JkMRvuHzC8xSwPnWRJMqJIZx8XJ82MDCdZCxRf6SHAmbNhGoc
IjIveSGp5VXZzVkKKe8J/NCSzyPt4HrQt7aB9v5icz7b72ySFnGXV1jOQ1HGUBPo
SyeDWsNEv33D7NeAYc4X0mBJK4tmC4KgOFW6kCCdMIxh92zr1itOnt/15HHKi0mf
y5RoOpHA5GhPGcDlBA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:58 2025 by rpki-client