Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa
File:                     3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa (raw, json)
Hash identifier:          A9BrAaOPBR55q+8vXQGK6X35v5ELJaeXQH7qp9O/D7U=
Subject key identifier:   55:44:DE:BB:32:04:15:5F:C5:CF:91:45:46:E6:7C:AA:B5:CA:46:C5
Certificate issuer:       /CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
Certificate serial:       3D98E0D2618D49CEBCC9C058CE38C38EF42C538A
Authority key identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa
Signing time:             Thu 06 Mar 2025 07:04:16 +0000
ROA not before:           Thu 06 Mar 2025 06:59:16 +0000
ROA not after:            Thu 05 Mar 2026 07:04:16 +0000
asID:                     265356
IP address blocks:        168.181.124.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:e0:d2:61:8d:49:ce:bc:c9:c0:58:ce:38:c3:8e:f4:2c:53:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
        Validity
            Not Before: Mar  6 06:59:16 2025 GMT
            Not After : Mar  5 07:04:16 2026 GMT
        Subject: CN=5544DEBB3204155FC5CF914546E67CAAB5CA46C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:7b:fd:3f:1b:f1:95:59:62:f0:36:91:ed:
                    6d:55:5b:c7:77:a9:7b:79:88:da:21:3b:b2:27:4b:
                    b0:69:9f:f8:0a:50:bd:32:b3:2c:c5:a1:6f:95:7b:
                    c4:28:f7:06:2f:0d:d9:ea:7f:7e:5f:0c:e6:11:98:
                    ed:f7:72:3a:11:0e:55:94:00:de:45:a8:a7:1e:2c:
                    73:b9:c1:a7:38:d6:01:76:59:70:b0:2b:28:98:4a:
                    f5:e1:dd:54:85:d5:8c:44:f8:aa:9c:21:2e:76:45:
                    f0:46:6b:34:0d:1c:37:f6:2f:18:51:2e:43:e4:dc:
                    1b:6a:8d:aa:0b:fc:89:43:de:44:0f:41:12:94:e5:
                    42:5f:47:6d:1a:95:ed:23:82:ae:fd:2f:8c:78:ad:
                    0c:56:15:0f:ed:87:1c:98:3a:b0:25:c6:ad:a8:c2:
                    e6:d1:48:e3:8d:09:f4:e1:d8:f2:94:0c:db:1f:02:
                    e4:db:2c:a3:e1:5a:99:3c:80:cc:53:c2:4e:64:a1:
                    ec:43:be:fd:d6:c7:f6:93:7b:dd:26:2d:25:a6:d7:
                    19:79:b4:d2:38:77:07:b4:db:4d:99:c6:f0:8a:22:
                    f6:42:38:a6:3c:c1:30:19:86:d0:72:e3:11:2a:01:
                    c8:c5:aa:cb:89:39:88:a1:69:16:36:da:35:fd:87:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:DE:BB:32:04:15:5F:C5:CF:91:45:46:E6:7C:AA:B5:CA:46:C5
            X509v3 Authority Key Identifier:
                keyid:E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:3f:84:8d:03:04:c9:11:06:dc:ae:86:f0:27:82:b5:46:
         81:da:1e:3a:84:02:16:3a:e2:f4:f6:e9:bc:a6:9b:e5:da:e9:
         83:66:09:62:d6:01:bc:d0:ca:3e:9c:1a:1e:55:f3:81:7d:8d:
         6a:76:7b:d2:3e:51:85:67:73:a3:74:b9:83:a4:18:34:92:4a:
         f3:b3:90:6b:10:d5:6b:8b:15:8a:27:c9:e1:e4:ae:26:12:5e:
         04:de:67:81:14:2d:41:d4:76:ed:21:dc:5b:a2:d3:5e:33:1e:
         51:59:43:a8:dc:98:f5:f4:0e:4e:e9:dc:33:99:00:eb:0f:18:
         c5:d6:60:ff:b2:e5:d4:bd:bd:60:24:da:74:78:44:e7:1d:36:
         e2:08:22:c7:e8:3d:24:59:49:95:3a:ab:47:a4:ce:97:6e:4a:
         1f:d2:96:cd:73:72:c3:c3:5e:c0:fb:9d:18:56:60:eb:04:f7:
         cc:61:ce:27:78:c9:16:95:77:c5:e3:77:98:11:e7:03:f8:3d:
         e1:dd:67:14:c7:28:64:40:f9:9a:d0:8c:1d:c3:21:a1:d0:27:
         c7:74:a1:5c:04:ec:2c:bb:74:52:9b:a0:ee:0d:fa:f1:85:a6:
         e5:ff:de:0c:fa:89:d6:e8:2e:a5:a5:d1:21:e1:9f:c8:52:e3:
         a8:28:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:40 2025 by rpki-client