Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa
File:                     3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          gmP02wrY6DIQDG0tjTve9TRO9a3dDfi1gaJvLB0xuy4=
Subject key identifier:   27:EA:EB:99:72:17:12:6F:9D:78:AB:C0:0A:DC:2C:C7:06:78:84:C9
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       490FB8824EB9EA679F81C4ABDD274AC1E03CEB4C
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:01 +0000
ROA not before:           Thu 06 Mar 2025 03:45:01 +0000
ROA not after:            Thu 05 Mar 2026 03:50:01 +0000
asID:                     262642
IP address blocks:        168.205.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0f:b8:82:4e:b9:ea:67:9f:81:c4:ab:dd:27:4a:c1:e0:3c:eb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:01 2025 GMT
            Not After : Mar  5 03:50:01 2026 GMT
        Subject: CN=27EAEB997217126F9D78ABC00ADC2CC7067884C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:e1:db:57:2b:f3:ec:7b:f0:f2:1d:94:5b:
                    55:59:be:f0:88:a3:af:b9:80:37:dd:7f:79:54:cb:
                    0c:56:5f:e0:86:63:b3:98:ea:15:c0:c2:7b:db:39:
                    94:f7:9e:4b:38:d5:5b:c4:3c:7c:24:e3:11:98:5e:
                    e4:28:a6:96:38:e8:bc:0e:b5:80:9a:72:15:85:87:
                    28:bd:70:a3:f9:82:06:80:42:99:83:33:c9:40:4a:
                    cb:3b:da:10:cd:3d:34:f7:71:e5:fa:77:45:7b:a8:
                    52:99:59:4d:f2:35:ca:96:e7:67:88:38:fe:db:99:
                    90:19:d5:67:18:b0:20:cd:d0:a5:ec:b5:97:df:99:
                    82:b6:a0:ba:4d:01:7c:1b:09:61:9d:4c:be:0c:12:
                    1c:d9:43:a5:1c:80:19:4c:01:c6:2e:4e:eb:73:80:
                    4a:01:d0:6f:6e:06:6a:72:96:cf:93:f5:38:bc:d1:
                    70:17:8e:4e:11:c3:2f:0a:2a:ef:d4:a4:f3:a3:cf:
                    91:ca:ee:6a:62:39:13:3d:23:05:bf:6b:e9:a6:66:
                    80:35:04:5b:fa:62:94:5a:01:43:36:6b:78:86:6a:
                    67:9b:dd:f4:6a:51:c0:0f:60:47:3e:8e:2a:d1:5f:
                    65:6f:ee:c6:7e:89:fb:dd:b4:29:ea:1b:e6:e0:89:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:EB:99:72:17:12:6F:9D:78:AB:C0:0A:DC:2C:C7:06:78:84:C9
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:bd:b0:a9:b6:d4:fa:e0:ad:cd:c4:3b:d8:03:ad:da:79:12:
         68:b9:a1:75:21:3c:79:2d:41:e2:92:b1:ab:f3:b7:be:f6:fa:
         5b:ef:24:17:7c:89:5b:dc:77:e7:1e:bf:69:93:b8:7c:2e:48:
         c9:4e:fd:79:d0:23:1c:eb:5c:34:23:90:b2:10:0d:36:80:92:
         ad:9c:5b:7b:80:64:c1:69:3a:4f:54:99:ef:3a:bf:e3:97:aa:
         b2:06:0a:e1:28:6c:8d:62:17:69:42:f1:99:71:4f:94:7f:ea:
         e9:4d:48:06:4f:80:67:51:04:5e:b5:69:05:e7:a9:91:66:e2:
         4b:d8:78:76:c3:61:f3:f5:6e:95:8d:e4:d0:2f:4b:50:6e:99:
         f5:d4:38:8f:31:ce:bd:47:94:6f:34:dd:20:ca:7d:3f:f8:88:
         c5:f0:23:49:1c:e9:11:0b:44:f3:0e:c6:39:ee:18:d1:fd:ad:
         5b:2d:9b:5a:b6:66:6b:ed:62:e1:ad:b4:94:9b:f7:5c:7b:e7:
         0a:ff:d4:0a:5b:21:b5:8b:a3:30:c3:bc:92:03:09:68:87:f1:
         68:72:a0:6b:42:b9:39:74:e9:93:56:a2:20:9b:77:62:01:d7:
         14:27:ba:9e:e5:f3:37:10:a0:9e:32:90:3f:3d:22:9c:57:79:
         35:89:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:28:51 2025 by rpki-client