Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e302e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          yFMoAPbi/rEiZB8gqH5P1P8lUUVllD/u+F+fv5wT3BE=
Subject key identifier:   B3:73:EF:4E:94:81:C3:6F:CC:62:04:2D:30:3F:9D:B5:8A:76:29:BB
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       3CF85F58884FFB4FC91B24C36852800227F1C9C5
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32342d3234203d3e20323634383934.roa
Signing time:             Fri 07 Mar 2025 02:00:32 +0000
ROA not before:           Fri 07 Mar 2025 01:55:32 +0000
ROA not after:            Fri 06 Mar 2026 02:00:32 +0000
asID:                     264894
IP address blocks:        168.228.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f8:5f:58:88:4f:fb:4f:c9:1b:24:c3:68:52:80:02:27:f1:c9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Mar  7 01:55:32 2025 GMT
            Not After : Mar  6 02:00:32 2026 GMT
        Subject: CN=B373EF4E9481C36FCC62042D303F9DB58A7629BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:6a:42:1a:5f:b8:27:ce:05:65:0a:9c:0b:
                    ba:53:ba:0b:2b:ac:3d:82:11:78:3c:33:dc:57:6b:
                    e6:64:16:43:62:a7:b4:4a:85:be:d2:64:e4:66:e6:
                    49:4e:38:3c:27:1d:91:33:63:af:4b:87:b7:f7:6a:
                    11:de:a6:a1:f0:5a:5b:fb:54:f0:70:d2:00:34:72:
                    6c:6d:8a:38:98:2f:35:69:21:6b:0d:3c:87:e5:2d:
                    b6:74:16:aa:f2:77:47:f6:86:ae:39:94:f0:19:b0:
                    b0:fa:22:c7:04:ca:ed:13:dd:24:8b:93:c2:a7:e9:
                    1a:17:51:33:3e:52:6e:79:15:23:48:bd:14:58:a4:
                    8d:08:54:0c:5e:1e:3b:5c:0d:dc:35:cd:12:55:b1:
                    81:86:85:06:0f:99:bb:a7:d0:b4:a4:00:77:db:b2:
                    58:5e:de:f0:09:47:8c:3c:5d:9c:6a:48:23:e7:55:
                    7a:22:ce:6b:55:2c:4f:90:86:8f:44:45:03:c3:37:
                    2d:1d:a5:55:b6:2d:ec:1b:d1:7e:80:ad:d8:70:80:
                    f7:d8:3d:b4:3b:25:73:bd:97:c6:36:22:f5:32:e3:
                    9d:42:39:8b:58:52:ce:82:21:53:5f:63:92:52:d4:
                    c7:53:ee:a8:6d:81:c0:ce:0f:d6:b1:c2:46:10:97:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:EF:4E:94:81:C3:6F:CC:62:04:2D:30:3F:9D:B5:8A:76:29:BB
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:39:68:f5:4b:ba:b5:d6:0e:f7:17:6a:0d:d2:32:6b:2e:5b:
         15:40:1f:b0:db:82:fb:ee:a3:b9:aa:72:ac:da:c5:c2:92:7b:
         eb:3b:5d:5e:af:19:be:2a:60:b9:68:cc:92:3a:38:db:fd:d3:
         a7:fa:5b:13:f1:e3:65:19:1f:7e:39:a2:4c:82:f2:80:49:ce:
         86:55:a6:8b:97:ac:04:aa:29:a3:60:30:fe:58:a2:eb:cd:e3:
         42:9f:e1:13:52:19:a5:7c:3b:3d:0c:38:f4:bb:54:8f:71:12:
         15:31:2c:6f:e8:0a:b6:ff:e0:e1:da:d6:06:cb:79:8f:3c:62:
         82:4f:47:fa:6c:ec:4b:94:df:63:3f:fd:24:8d:7e:ca:70:7e:
         87:d9:2e:63:7f:03:6b:da:da:3e:1d:33:4f:1d:33:2b:fd:70:
         94:6b:e8:d7:b5:14:45:40:63:0d:95:83:53:37:22:01:f0:e7:
         2c:9f:8f:8d:12:6e:2b:f8:fc:ff:de:8f:92:c2:49:20:88:c7:
         2b:e5:12:c0:ac:12:a8:af:f0:32:e6:c5:19:04:94:ad:02:06:
         b3:76:ef:ba:e8:8d:ba:34:cc:3e:b6:6a:30:21:86:07:9d:9e:
         07:30:10:c1:e8:b5:39:be:53:16:d8:48:29:24:b7:9e:52:ce:
         c8:91:55:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPPhfWIhP+0/JGyTDaFKAAifxycUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzNEMzOUE0NjVGOUU1RDQ3NzYyRTIwRjMwQzc1ODk3
Mjg1RERBRjAeFw0yNTAzMDcwMTU1MzJaFw0yNjAzMDYwMjAwMzJaMDMxMTAvBgNV
BAMTKEIzNzNFRjRFOTQ4MUMzNkZDQzYyMDQyRDMwM0Y5REI1OEE3NjI5QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxGpCGl+4J84FZQqcC7pTugsr
rD2CEXg8M9xXa+ZkFkNip7RKhb7SZORm5klOODwnHZEzY69Lh7f3ahHepqHwWlv7
VPBw0gA0cmxtijiYLzVpIWsNPIflLbZ0Fqryd0f2hq45lPAZsLD6IscEyu0T3SSL
k8Kn6RoXUTM+Um55FSNIvRRYpI0IVAxeHjtcDdw1zRJVsYGGhQYPmbun0LSkAHfb
slhe3vAJR4w8XZxqSCPnVXoizmtVLE+Qho9ERQPDNy0dpVW2Lewb0X6ArdhwgPfY
PbQ7JXO9l8Y2IvUy451COYtYUs6CIVNfY5JS1MdT7qhtgcDOD9axwkYQl6PdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs3PvTpSBw2/MYgQtMD+dtYp2KbswHwYDVR0j
BBgwFoAUVTTDmkZfnl1Hdi4g8wx1iXKF3a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlpHN2Zab054ZWFhcGVHWWdpVVQzV01iMTRGRG9xUm54d3VKektuN2Q0
MkgvMS81NTM0QzM5QTQ2NUY5RTVENDc3NjJFMjBGMzBDNzU4OTcyODVEREFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1MzRDMzlBNDY1RjlFNUQ0
Nzc2MkUyMEYzMEM3NTg5NzI4NUREQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaRzdmWm9OeGVhYXBlR1lnaVVUM1dNYjE0RkRvcVJueHd1SnpLbjdkNDJILzEv
MzEzNjM4MmUzMjMyMzgyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzgzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqOQAMA0GCSqGSIb3DQEBCwUAA4IBAQBHOWj1S7q1
1g73F2oN0jJrLlsVQB+w24L77qO5qnKs2sXCknvrO11erxm+KmC5aMySOjjb/dOn
+lsT8eNlGR9+OaJMgvKASc6GVaaLl6wEqimjYDD+WKLrzeNCn+ETUhmlfDs9DDj0
u1SPcRIVMSxv6Aq2/+Dh2tYGy3mPPGKCT0f6bOxLlN9jP/0kjX7KcH6H2S5jfwNr
2to+HTNPHTMr/XCUa+jXtRRFQGMNlYNTNyIB8Ocsn4+NEm4r+Pz/3o+SwkkgiMcr
5RLArBKor/Ay5sUZBJStAgazdu+66I26NMw+tmowIYYHnZ4HMBDB6LU5vlMW2Egp
JLeeUs7IkVW2
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:13 2025 by rpki-client