Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32342d3234203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32342d3234203d3e20323634383739.roa (raw, json)
Hash identifier:          DFkKLwkz7PVlMl11sQoNSXTDdOinbzBknfSI96lVxeo=
Subject key identifier:   A4:42:24:EE:20:08:59:7D:A4:F8:80:B9:85:A7:18:99:27:ED:07:B9
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       3E67B33FE6265942FB6C0BB17B830B3826DBC4A4
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32342d3234203d3e20323634383739.roa
Signing time:             Thu 06 Mar 2025 11:56:46 +0000
ROA not before:           Thu 06 Mar 2025 11:51:46 +0000
ROA not after:            Thu 05 Mar 2026 11:56:46 +0000
asID:                     264879
IP address blocks:        168.227.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:67:b3:3f:e6:26:59:42:fb:6c:0b:b1:7b:83:0b:38:26:db:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Mar  6 11:51:46 2025 GMT
            Not After : Mar  5 11:56:46 2026 GMT
        Subject: CN=A44224EE2008597DA4F880B985A7189927ED07B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:b5:61:81:6b:23:67:ee:3d:4a:44:39:69:
                    dc:ec:0c:86:ce:e5:bb:7e:64:c4:e5:14:ad:d8:14:
                    29:a8:13:19:dc:74:fc:68:1b:f3:a8:7a:3c:85:c4:
                    48:24:73:6c:dc:bd:fa:2e:69:30:4b:13:d2:bc:d6:
                    d7:9b:b7:54:60:5a:bf:63:12:8a:70:f6:8a:8e:1a:
                    65:c5:49:17:1e:7c:da:40:e8:58:71:0c:51:73:91:
                    a0:67:da:ea:9e:f3:77:f9:14:16:f3:cc:0b:c5:36:
                    40:1e:e6:77:cb:f2:4b:3f:70:dc:47:3d:b2:1f:14:
                    50:39:67:ee:ae:8d:2f:55:eb:53:b8:f0:74:62:8e:
                    06:d5:83:24:9e:b9:90:a0:7e:3c:17:54:40:ce:70:
                    a8:6b:21:e8:55:b6:26:9d:23:88:4c:ee:60:03:f3:
                    7d:5c:e1:aa:4f:6e:e9:a4:eb:63:7e:2a:53:ce:09:
                    91:3c:eb:18:f9:8d:86:1e:84:e1:6c:cb:5a:c4:95:
                    23:15:f1:28:c4:9c:96:39:57:21:04:fa:01:dc:b3:
                    fd:3e:42:f0:a7:33:b3:97:39:0d:c8:0b:5a:f8:53:
                    2c:02:d4:52:3b:91:85:b5:1a:cb:eb:b1:94:db:da:
                    40:67:06:c9:27:8b:62:50:61:69:b9:40:3a:e2:c0:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:42:24:EE:20:08:59:7D:A4:F8:80:B9:85:A7:18:99:27:ED:07:B9
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32342d3234203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:aa:a9:38:10:c3:01:ff:4b:00:c3:41:6b:0c:7b:c6:65:
         98:aa:93:09:0e:f2:10:95:a8:fc:fc:20:f2:ab:eb:7f:b2:09:
         d2:ab:95:7d:98:14:bd:64:6b:f7:e9:4e:16:ea:8a:66:76:cf:
         6c:02:d8:43:db:b8:1d:9a:69:b1:bc:b6:e0:46:04:a9:e5:f5:
         db:67:c8:de:3a:17:17:2f:39:68:b9:32:d6:f5:66:4c:19:90:
         39:90:e9:8b:b3:fe:e4:14:56:6e:1a:75:53:7c:3b:c0:17:31:
         1e:cb:c5:0f:70:47:05:9a:41:40:ee:fe:d9:74:3e:d0:75:48:
         b3:ff:d6:be:bc:c1:f8:ab:a9:30:65:90:35:0b:e5:39:44:81:
         5d:ef:96:f1:64:58:9e:c4:04:23:be:09:20:0b:98:4a:5d:b9:
         e6:ff:87:04:6e:67:a0:58:f6:c2:88:68:4f:cd:30:69:39:34:
         45:0e:e3:65:47:ef:e1:d5:68:3c:10:1a:4a:26:b1:66:d1:66:
         ee:42:e2:6d:cc:bc:92:13:28:ee:81:78:4a:82:d9:6e:be:68:
         1d:83:eb:9c:d2:c2:8b:b1:7b:6e:10:2f:6c:b2:9a:1b:20:08:
         a8:3e:14:8b:62:94:9c:cd:14:a0:45:d9:ca:15:de:99:72:dc:
         93:a0:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:11:30 2025 by rpki-client