Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
File:                     3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa (raw, json)
Hash identifier:          p4b4Vstsxvxn/G+yhujfDYwQG/toX5MsUbE4tvC9CWg=
Subject key identifier:   05:72:65:3A:59:89:6A:80:BA:0D:EA:8F:7A:82:A5:2C:A2:EC:BB:E0
Certificate issuer:       /CN=843E46AA209E75F9302824E3938E138395B4B3A9
Certificate serial:       05846833C61281DAF308944FC975EBEA485E7B1D
Authority key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
Signing time:             Mon 03 Feb 2025 21:38:14 +0000
ROA not before:           Mon 03 Feb 2025 21:33:14 +0000
ROA not after:            Mon 02 Feb 2026 21:38:14 +0000
asID:                     264912
IP address blocks:        168.228.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
                          rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:84:68:33:c6:12:81:da:f3:08:94:4f:c9:75:eb:ea:48:5e:7b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843E46AA209E75F9302824E3938E138395B4B3A9
        Validity
            Not Before: Feb  3 21:33:14 2025 GMT
            Not After : Feb  2 21:38:14 2026 GMT
        Subject: CN=0572653A59896A80BA0DEA8F7A82A52CA2ECBBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:00:f2:92:88:57:b5:ce:af:a2:59:7c:15:
                    12:91:5f:07:90:0c:44:ee:ab:72:43:14:94:46:f0:
                    6d:ec:f4:82:1c:c4:78:c7:79:92:71:6e:d1:1f:78:
                    45:e4:ba:ac:3d:d4:5c:d2:4c:7b:e4:24:72:d3:47:
                    e5:8e:f3:0d:ca:93:75:ce:3f:6d:cc:e4:eb:39:47:
                    f0:d0:07:26:8a:03:e3:e7:5c:c9:4f:2d:2f:b0:f7:
                    70:88:48:15:48:57:82:11:93:30:ad:e9:98:23:87:
                    da:1b:49:10:bd:74:f7:19:3b:2d:00:ea:83:da:2a:
                    9e:55:b1:13:19:a5:48:eb:be:b5:a3:87:2c:6e:5e:
                    64:3f:8f:98:c1:11:6b:36:b4:33:c7:72:d4:4c:ce:
                    4d:f6:84:14:cc:a6:aa:0a:68:1f:51:60:5c:64:3d:
                    67:de:96:ac:d0:01:be:6b:ba:fe:c9:f3:52:c1:6e:
                    05:be:f3:cf:0e:26:2b:3f:d8:b6:f0:72:0d:dc:41:
                    ec:fc:4b:9b:0d:2a:e3:bf:69:c8:3b:ba:55:ec:2c:
                    fd:d1:41:e5:d1:a8:7b:ad:77:74:52:b5:73:6b:f7:
                    e1:23:da:39:93:35:22:5d:5c:82:92:52:4a:d4:75:
                    35:42:aa:36:90:e1:52:1c:72:84:44:23:65:ff:9d:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:72:65:3A:59:89:6A:80:BA:0D:EA:8F:7A:82:A5:2C:A2:EC:BB:E0
            X509v3 Authority Key Identifier:
                keyid:84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:27:19:cf:da:98:43:c0:d3:a5:be:9c:63:73:a9:8a:c8:af:
         45:c0:51:7a:84:a0:88:28:b5:4d:48:61:06:6f:d8:26:a8:e0:
         d5:ba:22:2f:ef:17:28:19:89:ce:63:32:2b:c0:e6:09:c8:5f:
         5d:ef:4e:50:59:02:2f:55:fe:53:10:7b:3d:61:82:89:57:40:
         05:1c:91:54:30:52:8f:31:b4:25:58:81:c9:c6:45:de:d0:c8:
         bc:e1:99:23:a8:5d:23:d0:e1:6b:0e:ee:c2:ac:fe:b6:96:4b:
         78:fd:d7:c9:9d:d3:a8:47:f0:bc:0a:21:bf:b6:b8:48:4b:02:
         ee:5c:ad:79:68:b1:e8:4a:52:d6:c9:d8:83:b6:61:f4:94:e4:
         83:29:45:36:df:50:df:ee:55:35:90:43:37:81:13:05:b8:04:
         47:91:a2:29:81:4e:4e:5c:72:59:17:e2:aa:11:39:7c:96:92:
         29:6a:d8:b3:31:3b:30:e9:31:eb:73:af:39:ec:5c:06:94:1c:
         ed:d5:90:97:fe:80:78:ed:9f:0b:c0:46:4e:bf:ef:a1:fc:83:
         c9:66:a4:2d:f5:a0:bd:16:04:64:08:ff:c8:07:4d:03:4e:e8:
         a6:ee:b3:ab:b6:5c:c4:a7:4a:a3:18:e9:1c:46:5e:8e:33:7e:
         e4:be:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:57:01 2025 by rpki-client