Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa
File:                     3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          6ovcxP8Ppt0+maOfJOuukF0PLwPEe2KO7SAYLjP+rRo=
Subject key identifier:   A1:97:33:31:28:4F:F6:FE:D2:6A:91:5D:88:DF:7B:E9:9F:7E:86:F9
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       31175075594F5B0FE67374B02454C2FF9310AB71
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:01 +0000
ROA not before:           Thu 06 Mar 2025 03:45:01 +0000
ROA not after:            Thu 05 Mar 2026 03:50:01 +0000
asID:                     262642
IP address blocks:        168.205.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:17:50:75:59:4f:5b:0f:e6:73:74:b0:24:54:c2:ff:93:10:ab:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:01 2025 GMT
            Not After : Mar  5 03:50:01 2026 GMT
        Subject: CN=A1973331284FF6FED26A915D88DF7BE99F7E86F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:85:7f:87:87:ed:17:45:a4:ab:9b:57:5d:
                    4b:a4:3f:69:7c:4f:a7:29:f0:30:ca:15:64:e3:1d:
                    f2:f1:1f:3f:e2:53:d3:d2:f7:97:c6:e3:3c:0f:65:
                    d2:bc:20:1d:97:36:fe:98:56:bf:64:92:e8:bd:f8:
                    26:0a:58:30:08:8d:dc:d0:55:0c:41:0c:55:29:7a:
                    46:64:dd:d0:8f:7b:63:19:dd:ea:65:13:d4:7a:c8:
                    51:44:96:ab:5b:2d:2c:c3:30:e7:22:d9:be:3d:96:
                    a1:e7:b4:7a:88:21:6a:bd:58:f4:96:33:6b:c9:7e:
                    48:e8:03:7e:bf:8f:b1:a1:fe:37:fa:22:b7:09:32:
                    fb:ac:0d:34:1d:14:b1:27:70:6a:d0:d7:bd:e8:a3:
                    76:f6:b1:7f:6d:84:7b:c8:b3:e1:d3:8e:ab:56:df:
                    b1:20:b4:e6:d4:48:91:e7:d9:49:5b:e9:0c:af:77:
                    17:74:4f:17:aa:42:5a:f3:70:ff:cf:7b:62:24:d6:
                    d8:f1:af:0d:83:75:b2:ce:52:be:25:8d:8e:5a:73:
                    f9:4e:b0:0c:0c:b0:6d:14:bc:fc:86:3b:37:cf:bf:
                    1f:e2:5c:be:d7:21:ab:85:43:52:54:e4:5c:68:32:
                    57:50:9d:d9:ad:2c:bb:63:8a:51:5e:00:82:c9:ed:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:33:31:28:4F:F6:FE:D2:6A:91:5D:88:DF:7B:E9:9F:7E:86:F9
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:90:1b:a5:1c:54:b7:d8:e7:e4:30:6c:e4:79:db:ed:44:b7:
         06:e1:23:60:fe:0e:71:25:3e:31:f5:fd:2b:b1:ed:15:f8:ee:
         ed:1d:75:f5:dd:d2:3f:99:d6:55:52:40:de:f7:21:4d:d9:a8:
         ee:83:35:a5:e9:35:a2:87:de:0e:41:97:aa:fa:aa:bc:9a:8d:
         34:50:78:74:29:3e:ce:3e:fc:ca:8d:47:d7:c3:ef:e1:b9:fe:
         9c:31:0f:1f:76:b6:13:89:a8:2e:db:34:06:d4:b4:07:d7:ba:
         82:9d:a4:35:cd:2a:89:e3:04:9d:b9:d7:e9:7f:8d:c3:81:97:
         fe:b8:c7:a6:64:82:22:79:53:a4:4a:3b:e7:cd:b6:41:71:20:
         71:f6:03:1d:1b:96:43:81:85:bf:e2:2f:aa:20:9d:f8:1b:c4:
         55:45:78:54:13:fb:fa:8a:21:12:a6:f5:69:6f:b4:e6:51:f3:
         ac:bd:68:55:90:e4:2a:f5:b8:ee:41:e3:76:9f:13:e8:1b:41:
         ea:c6:e0:b9:c4:67:d8:b8:7f:42:33:d6:4f:49:45:9d:34:6e:
         8b:dd:63:3d:26:b3:39:a4:60:e7:35:67:0f:c8:67:7f:40:87:
         f5:84:dd:66:c5:85:ab:a3:47:78:da:3b:3c:f6:a1:ac:63:99:
         18:f1:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:31:27 2025 by rpki-client