Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e322e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          Kf1v/bDoZkRxRoHTl5isAqY8mHKrdbu2uVT95PQ5AzA=
Subject key identifier:   0F:B5:C1:9A:8D:D0:AC:4E:A5:2E:4C:2F:17:93:55:CF:3B:7A:6D:C1
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       2BA2E6F3BF53E634BE8EDE14557335FC2340B319
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa
Signing time:             Fri 07 Mar 2025 02:00:32 +0000
ROA not before:           Fri 07 Mar 2025 01:55:32 +0000
ROA not after:            Fri 06 Mar 2026 02:00:32 +0000
asID:                     264894
IP address blocks:        168.228.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a2:e6:f3:bf:53:e6:34:be:8e:de:14:55:73:35:fc:23:40:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Mar  7 01:55:32 2025 GMT
            Not After : Mar  6 02:00:32 2026 GMT
        Subject: CN=0FB5C19A8DD0AC4EA52E4C2F179355CF3B7A6DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:d0:05:76:a8:7a:d6:9f:cd:f9:e7:0a:d4:
                    0a:5a:a2:e0:20:0c:2f:48:3f:f2:b3:c3:ea:aa:da:
                    91:f4:f9:23:1c:8b:88:b0:45:47:d7:2b:b6:7d:b2:
                    1c:07:f2:0c:b0:0e:6b:43:e9:f2:2c:6b:1d:ba:66:
                    b0:83:0f:24:b2:bd:11:be:d9:60:98:be:ab:60:54:
                    18:5c:91:9f:f8:2a:c5:82:b1:59:78:ca:5e:59:ef:
                    8c:e3:f3:63:9a:bb:81:bb:ce:b0:9d:39:44:1c:46:
                    0f:c5:c2:1d:b0:3a:9a:56:48:38:fd:4c:9a:fb:16:
                    c1:72:b5:b0:e5:09:b6:7b:a4:4f:c5:ed:22:9a:87:
                    40:bc:b2:48:ec:d2:ab:fd:26:1d:6b:25:d7:75:12:
                    50:17:7c:e1:c9:f9:2e:fa:dd:59:e8:9c:66:72:62:
                    54:7e:53:18:db:ac:af:39:c6:ba:84:55:2d:eb:2b:
                    ed:05:97:b2:c2:29:04:3a:14:c0:ab:d1:31:50:9e:
                    aa:7d:cf:ce:49:d8:74:d0:3f:d8:6d:37:c5:f7:bc:
                    8a:42:24:0a:b0:1b:04:b1:b3:64:ad:a6:33:a7:c2:
                    d2:fd:cc:8c:f9:c6:33:a1:f5:dc:80:fa:cc:fb:be:
                    ea:c9:c3:f3:b3:4c:89:46:ff:2e:55:bc:ea:26:b7:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:C1:9A:8D:D0:AC:4E:A5:2E:4C:2F:17:93:55:CF:3B:7A:6D:C1
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e322e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:ad:fe:13:bc:a6:d3:fb:14:3d:a1:1f:bd:00:8a:3f:67:
         07:1a:3b:e0:a2:a1:c5:99:94:87:d0:54:ea:b8:04:83:4c:8a:
         6c:ef:a3:d8:54:df:1f:e1:3b:1f:6b:4b:dc:46:85:43:16:fa:
         bf:70:b2:dd:69:79:40:7b:34:81:4b:b8:87:fd:42:34:fa:20:
         f6:37:87:b1:ca:44:d3:70:ab:90:18:ce:f8:f7:ef:06:22:57:
         2a:85:91:11:a7:1c:e0:2c:f3:76:fb:0c:ee:5a:0b:db:d9:0d:
         2f:17:ec:e3:82:25:85:41:06:cf:c4:88:39:82:da:fa:8d:e7:
         d1:d3:4a:fe:28:c8:c5:ce:18:26:ea:a9:7d:29:20:bb:8e:78:
         8b:08:35:f0:53:2d:c3:96:37:f9:cc:b0:73:93:e7:d0:ef:19:
         b6:62:94:17:88:43:a3:4d:8f:a9:7b:24:7f:78:35:99:40:e2:
         d5:e6:88:f3:d2:83:92:b8:0d:45:1a:9d:93:9d:60:3a:44:6b:
         c8:a3:75:34:55:6a:11:19:d7:92:d7:c8:c0:94:7c:eb:cc:ee:
         3b:84:2e:4e:3e:ac:7a:64:60:d0:80:cb:7c:8c:a4:f7:13:cf:
         83:41:75:d1:f0:d4:af:82:52:a1:6e:15:c1:d9:37:5e:05:31:
         0f:98:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:14 2025 by rpki-client