Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134302e302f32342d3234203d3e20323632363432.roa
File:                     3136382e3230352e3134302e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          TWlaIrespebGnMvPb7/6gQ89sCGiwz+cWsiH05s7SJg=
Subject key identifier:   3A:C6:B4:9B:F0:03:97:76:84:5A:2B:08:60:41:04:C0:D9:5A:B5:6B
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       21EDB4FF0B6999C883583C753EF556D0D218717F
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134302e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:00 +0000
ROA not before:           Thu 06 Mar 2025 03:45:00 +0000
ROA not after:            Thu 05 Mar 2026 03:50:00 +0000
asID:                     262642
IP address blocks:        168.205.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ed:b4:ff:0b:69:99:c8:83:58:3c:75:3e:f5:56:d0:d2:18:71:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:00 2025 GMT
            Not After : Mar  5 03:50:00 2026 GMT
        Subject: CN=3AC6B49BF0039776845A2B08604104C0D95AB56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:e0:ab:5c:47:dc:ba:0a:41:4f:bf:00:c7:
                    51:e5:1c:03:5d:d9:6a:2a:ce:10:d5:81:4b:a4:08:
                    33:44:c9:22:fc:41:ad:9c:6d:21:e1:d0:8b:98:ad:
                    6c:8c:d2:78:ef:97:9f:00:38:81:5a:40:3e:94:5e:
                    49:72:10:71:2f:53:b6:39:3c:0d:ba:9c:f2:fd:6e:
                    89:8e:4a:44:27:4c:9f:8a:91:f3:d7:aa:59:db:8b:
                    0e:3b:da:0d:79:a5:82:71:a7:46:05:d6:a0:f6:e7:
                    7c:0c:35:70:fc:58:c8:8b:73:85:ec:70:9a:b2:09:
                    c7:06:ec:f9:4c:04:3c:8c:c7:ee:31:08:09:f7:31:
                    7c:60:0c:57:0a:a5:44:58:4b:95:80:e8:00:e0:6f:
                    96:29:47:ea:30:d9:49:36:8f:d2:31:1b:d5:09:fc:
                    05:31:db:bd:d0:d9:97:bb:d0:58:ff:60:4f:37:ab:
                    d5:4d:9f:d3:14:58:81:cc:d7:f9:8a:c4:df:dc:7d:
                    6c:93:be:1c:a9:53:64:51:1f:92:46:be:4a:37:54:
                    3f:27:a1:28:84:81:cd:7b:4c:36:8a:96:25:8a:00:
                    8f:d2:cc:b6:c7:f1:fa:f5:2e:cf:a1:f5:c1:0f:35:
                    67:30:18:d7:1e:1f:40:e6:2a:02:d7:ab:8d:b4:2b:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:B4:9B:F0:03:97:76:84:5A:2B:08:60:41:04:C0:D9:5A:B5:6B
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134302e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:7b:0d:15:fe:9e:59:a6:8d:3f:30:0a:3c:93:8b:49:90:
         83:f8:0b:f9:96:87:61:a5:9a:6a:9f:9d:24:33:03:02:49:fe:
         c0:41:2b:91:63:bd:1f:c4:63:5e:9b:20:68:64:27:b6:f4:db:
         b0:d9:65:24:a3:c3:a4:9f:e5:74:43:ef:6f:78:9f:b2:39:19:
         30:71:e9:60:b2:4c:a1:04:aa:28:c0:fb:5d:c0:df:ce:32:d7:
         d4:e4:22:1d:a7:27:1c:d0:86:37:f7:0b:e7:a6:38:85:db:7c:
         4f:db:d8:d4:54:0b:82:5e:78:24:e7:2b:c0:da:88:7f:5a:30:
         ab:0c:92:6c:e3:ca:bc:6f:a6:77:12:1c:06:c2:ae:c7:e6:33:
         c0:00:40:fe:33:d0:6c:b6:90:68:91:a3:a5:46:fa:9d:24:ae:
         74:3e:8f:b9:18:bc:d3:cc:d2:1e:9e:2d:5e:96:67:05:30:ff:
         83:e8:8d:a5:2e:01:e3:6f:cf:46:08:e9:c3:ef:db:d0:23:25:
         0a:b7:b6:0d:ca:e1:27:ae:b2:21:48:72:0f:64:32:ae:76:db:
         9e:cd:50:27:87:54:22:5d:74:55:50:e6:93:86:a9:19:58:1e:
         38:c5:05:7b:94:32:36:42:1a:29:8a:6e:d8:bc:ca:f9:75:83:
         19:b2:29:73
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIe20/wtpmciDWDx1PvVW0NIYcX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNTAzMDYwMzQ1MDBaFw0yNjAzMDUwMzUwMDBaMDMxMTAvBgNV
BAMTKDNBQzZCNDlCRjAwMzk3NzY4NDVBMkIwODYwNDEwNEMwRDk1QUI1NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj+CrXEfcugpBT78Ax1HlHANd
2WoqzhDVgUukCDNEySL8Qa2cbSHh0IuYrWyM0njvl58AOIFaQD6UXklyEHEvU7Y5
PA26nPL9bomOSkQnTJ+KkfPXqlnbiw472g15pYJxp0YF1qD253wMNXD8WMiLc4Xs
cJqyCccG7PlMBDyMx+4xCAn3MXxgDFcKpURYS5WA6ADgb5YpR+ow2Uk2j9IxG9UJ
/AUx273Q2Ze70Fj/YE83q9VNn9MUWIHM1/mKxN/cfWyTvhypU2RRH5JGvko3VD8n
oSiEgc17TDaKliWKAI/SzLbH8fr1Ls+h9cEPNWcwGNceH0DmKgLXq420K7PpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOsa0m/ADl3aEWisIYEEEwNlatWswHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNjM4MmUzMjMwMzUyZTMxMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjNjDANBgkqhkiG9w0BAQsFAAOCAQEAUKl7
DRX+nlmmjT8wCjyTi0mQg/gL+ZaHYaWaap+dJDMDAkn+wEErkWO9H8RjXpsgaGQn
tvTbsNllJKPDpJ/ldEPvb3ifsjkZMHHpYLJMoQSqKMD7XcDfzjLX1OQiHacnHNCG
N/cL56Y4hdt8T9vY1FQLgl54JOcrwNqIf1owqwySbOPKvG+mdxIcBsKux+YzwABA
/jPQbLaQaJGjpUb6nSSudD6PuRi808zSHp4tXpZnBTD/g+iNpS4B42/PRgjpw+/b
0CMlCre2DcrhJ66yIUhyD2Qyrnbbns1QJ4dUIl10VVDmk4apGVgeOMUFe5QyNkIa
KYpu2LzK+XWDGbIpcw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:34:06 2025 by rpki-client