Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa (raw, json)
Hash identifier:          wNV+gP4g33AUi0BLdjUTzBWKatTgtj/uOpk/X8eWxP4=
Subject key identifier:   D3:BF:01:A0:58:C4:42:28:E8:52:A2:AF:A4:81:40:89:5D:A1:DE:B2
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       1C4038F9FDFF775FC88EBA594E9F4F1EBD0AC7D0
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
Signing time:             Thu 06 Mar 2025 11:56:46 +0000
ROA not before:           Thu 06 Mar 2025 11:51:46 +0000
ROA not after:            Thu 05 Mar 2026 11:56:46 +0000
asID:                     264879
IP address blocks:        168.227.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:40:38:f9:fd:ff:77:5f:c8:8e:ba:59:4e:9f:4f:1e:bd:0a:c7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Mar  6 11:51:46 2025 GMT
            Not After : Mar  5 11:56:46 2026 GMT
        Subject: CN=D3BF01A058C44228E852A2AFA48140895DA1DEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:0f:cb:69:b8:4b:d1:b8:ff:6a:cd:c4:23:
                    70:50:0c:a1:b0:68:79:84:80:9a:9a:7e:ec:d6:bb:
                    71:c7:e4:79:6b:03:d7:42:c2:f2:5d:95:fd:74:e2:
                    9f:19:67:7b:e3:ca:ee:a4:56:19:92:89:9d:24:c5:
                    a6:86:58:d3:4d:c0:c6:36:7b:2d:50:7c:39:8a:e7:
                    51:cb:26:13:3b:35:e8:86:c6:bc:3d:cf:6f:b7:38:
                    1f:d0:cc:fd:8b:9d:66:57:56:02:46:e4:f0:e1:2b:
                    ce:4c:d4:98:e4:a8:e9:15:86:7e:8d:37:54:e7:b3:
                    04:4a:a3:83:23:b8:66:93:6e:ca:37:d1:35:9f:a9:
                    d7:94:66:d0:bb:57:b3:64:94:75:66:5e:66:89:df:
                    be:5e:fb:16:d0:6c:83:e3:83:5e:26:c1:f9:c4:a3:
                    08:1f:62:72:97:fb:f9:50:cf:76:65:f5:a3:49:bc:
                    61:fa:ec:df:6b:3f:90:10:64:ec:42:2c:f7:c1:94:
                    81:29:19:7e:96:18:e4:b7:05:2b:5a:67:59:ab:cb:
                    08:bb:9f:ee:b3:3b:6f:64:eb:bd:0f:6d:d6:d4:ae:
                    fa:d2:cf:07:bb:96:44:52:df:5d:2e:c6:aa:12:73:
                    bc:f0:1d:1c:4a:ca:6d:49:7a:fc:d8:bd:57:c5:ce:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BF:01:A0:58:C4:42:28:E8:52:A2:AF:A4:81:40:89:5D:A1:DE:B2
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:67:23:60:0c:2e:97:88:e7:ad:12:87:74:72:9b:d2:4b:
         32:0a:9d:c1:b0:b9:4d:08:1a:a3:24:0f:f3:8c:37:f3:6a:f4:
         2a:a5:84:29:d8:a2:e1:0c:72:98:52:43:d2:88:18:67:8b:87:
         93:77:72:3c:bf:4a:eb:18:b9:25:a5:56:c5:ad:69:3c:08:81:
         04:e2:99:24:30:a1:56:4a:da:6d:de:6b:06:3f:16:30:92:f2:
         79:a6:6c:47:d4:d7:60:b3:46:26:df:83:c1:ba:9b:a2:0d:21:
         d6:02:10:38:c1:48:c2:94:96:ee:80:c8:f1:d4:26:75:4a:b2:
         9b:91:56:d1:b0:ea:0c:e7:30:cb:d6:83:ea:db:e3:cb:92:39:
         13:ea:13:53:85:fd:1a:a1:a7:0b:7e:a6:8b:1f:d6:cf:84:17:
         7f:a5:72:1b:2c:5b:09:6e:7e:29:25:5a:4f:62:1e:1b:b8:44:
         f3:fe:d4:02:6f:07:93:49:36:9d:6d:03:9e:2b:4f:df:84:0b:
         38:41:2c:41:3d:6c:b1:d7:34:0e:5b:d9:50:c6:d2:0e:e4:84:
         77:7e:57:74:b9:7b:c9:d3:ef:a0:32:b2:6a:be:af:4d:e3:b1:
         00:0d:cf:3a:cd:10:17:71:62:ca:4d:5a:9f:35:f8:5e:79:9f:
         fb:9f:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:11 2025 by rpki-client