Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa
File:                     3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa (raw, json)
Hash identifier:          z2GSlGqE435pK7Fom1ohT7/HxDT4qGIBao5IjIZHFEk=
Subject key identifier:   77:81:11:15:16:9F:DB:2F:C7:E5:61:6F:4B:FD:EE:81:DD:46:1A:82
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       B9268447892B3626EA5A281DAFBF37F4F238B8
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa
Signing time:             Thu 06 Mar 2025 11:56:46 +0000
ROA not before:           Thu 06 Mar 2025 11:51:46 +0000
ROA not after:            Thu 05 Mar 2026 11:56:46 +0000
asID:                     264879
IP address blocks:        168.227.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 07:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b9:26:84:47:89:2b:36:26:ea:5a:28:1d:af:bf:37:f4:f2:38:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Mar  6 11:51:46 2025 GMT
            Not After : Mar  5 11:56:46 2026 GMT
        Subject: CN=77811115169FDB2FC7E5616F4BFDEE81DD461A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:68:2f:9a:97:7b:15:2d:a7:b0:bf:d6:bf:
                    12:09:64:27:fd:d5:98:33:08:ad:1d:f6:12:7b:a5:
                    aa:9f:3e:30:4a:fd:d4:34:71:fe:35:e4:df:33:ec:
                    b0:eb:ed:c0:bc:4c:f6:c7:77:bc:f9:8e:19:df:cb:
                    64:64:e2:9a:d4:e7:5f:de:f6:00:85:e8:f6:1d:e0:
                    e0:67:ee:49:72:c4:81:19:4f:0c:a7:75:58:81:37:
                    76:cf:6c:4d:a4:35:90:2c:4d:5c:a0:90:f8:ec:ae:
                    be:d2:29:49:a1:8d:e3:2a:5c:07:41:5a:94:e7:ac:
                    61:04:a3:27:c2:37:6f:52:ae:5e:c5:e9:c7:62:75:
                    84:80:1e:3a:61:29:a3:c3:ff:80:25:83:de:45:4c:
                    94:7e:f2:e0:45:cd:01:81:c7:0e:c9:75:80:2d:4c:
                    5c:66:21:44:72:89:34:6f:21:fc:10:fc:90:ef:7b:
                    87:fa:35:eb:cd:d4:9e:fa:cc:c4:28:c5:2a:93:a5:
                    a7:e8:a7:89:a0:d5:7f:df:c7:43:41:ec:e8:ac:04:
                    1e:74:31:19:6b:da:0e:c4:ee:5b:08:0e:5a:21:46:
                    83:65:61:d9:bc:76:33:97:05:9e:6d:10:ca:35:de:
                    60:39:4a:82:5b:3f:a1:b0:07:98:dd:12:2f:2d:08:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:11:15:16:9F:DB:2F:C7:E5:61:6F:4B:FD:EE:81:DD:46:1A:82
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:0e:e7:39:ff:54:36:24:ae:c4:b7:fa:8f:e0:e5:43:cc:
         fa:82:97:05:cd:92:e9:2c:04:14:c1:ab:02:a8:69:d8:e4:85:
         32:d8:a8:44:24:d7:e6:7b:f8:35:10:46:4f:f0:be:dc:9e:ec:
         f2:c4:07:92:5d:e0:90:7e:16:bb:cc:83:c9:c5:73:61:73:58:
         d2:cf:ac:ae:38:fa:1b:30:ee:99:67:33:9d:4a:c5:e8:5a:df:
         d5:96:21:7a:00:34:58:07:77:83:a3:08:c0:87:a1:5f:5d:83:
         d8:b9:31:47:f3:73:42:25:83:b6:55:24:12:f7:2d:2f:04:9b:
         ef:79:2e:3d:64:58:34:31:25:07:59:e5:d1:93:5b:6e:df:e5:
         ca:8d:a9:b2:3d:2c:7d:7e:0c:08:a2:e4:92:0e:8d:40:46:1c:
         18:83:13:6a:88:14:bb:4a:3b:b1:ed:57:67:03:67:11:59:8e:
         c4:09:e4:89:5a:6c:27:4b:49:fd:b4:3f:1f:1b:32:92:0d:21:
         33:8c:99:aa:91:d2:d6:03:c0:5c:77:45:5f:26:2c:88:2b:b0:
         1f:58:5b:1f:d8:88:2b:23:d1:39:7e:84:cc:92:c5:d9:96:92:
         0d:dc:61:fe:b0:bd:e7:bd:9c:4e:81:4b:0a:16:58:ed:3e:ca:
         6a:68:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:37 2025 by rpki-client