Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa
File:                     3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa (raw, json)
Hash identifier:          Vh5KVB445yDRtz3X1WJFos45hJiCOIoaKDhErXq8N/8=
Subject key identifier:   2A:DC:E9:4B:89:B5:1B:33:6F:44:D2:D6:A1:47:1C:30:55:06:C5:4B
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       181880B32FDEEFC8671C293C851F4BAE826368CB
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa
Signing time:             Fri 07 Mar 2025 00:36:02 +0000
ROA not before:           Fri 07 Mar 2025 00:31:02 +0000
ROA not after:            Fri 06 Mar 2026 00:36:02 +0000
asID:                     264926
IP address blocks:        168.228.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 12:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:18:80:b3:2f:de:ef:c8:67:1c:29:3c:85:1f:4b:ae:82:63:68:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Mar  7 00:31:02 2025 GMT
            Not After : Mar  6 00:36:02 2026 GMT
        Subject: CN=2ADCE94B89B51B336F44D2D6A1471C305506C54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:5d:66:a4:3b:d2:65:53:e7:ca:3e:28:97:
                    34:96:f0:46:c0:27:97:4a:60:5c:28:0a:d7:93:38:
                    06:32:90:4b:d2:42:97:18:37:33:31:ab:b1:ab:68:
                    3c:2d:33:c2:eb:32:e2:df:dd:66:43:0b:92:f5:56:
                    53:52:5c:51:e6:5b:9a:60:37:f5:b4:72:d6:9e:03:
                    c4:07:62:e2:d7:46:c9:88:d4:bd:a3:7e:a2:7c:6e:
                    62:70:29:81:d7:cd:c6:1f:e2:4b:03:78:3e:5a:6b:
                    ea:f0:0d:b3:0e:9f:dc:60:90:6d:cf:70:ef:ad:07:
                    47:64:5d:a3:0a:c5:65:d2:e6:94:33:3a:34:cd:8e:
                    ab:9a:20:f4:1c:5b:e5:b9:0f:c6:ed:32:61:94:c1:
                    ce:a8:12:37:2c:a3:87:43:06:ae:8f:7e:2e:33:cc:
                    8f:f1:8e:dc:c0:94:b3:de:7c:0e:b2:d5:4c:8c:8c:
                    6a:84:33:f2:df:e8:cd:13:a3:ce:04:d5:e1:c3:f5:
                    4e:ca:9d:dd:e3:27:b1:95:69:b7:80:e7:ed:4f:ff:
                    8b:e1:21:35:56:05:d9:b6:5d:0d:ea:0e:2d:98:cf:
                    85:e1:8b:90:83:69:13:2e:33:50:fd:cb:57:c5:aa:
                    59:b9:3d:39:f9:70:e1:43:40:7e:15:88:7f:a3:aa:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:E9:4B:89:B5:1B:33:6F:44:D2:D6:A1:47:1C:30:55:06:C5:4B
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32332d3233203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         eb:b5:2e:0a:40:ff:3d:14:fe:2d:e1:43:b1:30:9e:09:10:f8:
         2d:5a:07:f4:1a:42:b6:e4:f9:c8:20:a5:fc:62:a8:47:b6:78:
         8a:4b:36:cd:d3:ac:91:f2:98:5b:55:57:d0:76:3f:bd:52:a9:
         63:c3:c4:24:21:48:2b:ce:74:c9:1f:43:4d:3f:14:9e:3d:3d:
         80:8a:3a:bf:c2:9a:82:b2:e3:a3:da:49:0d:a1:ce:19:22:65:
         ad:4a:bb:8c:84:0c:5e:56:43:5a:80:ca:6d:a6:d0:95:b4:4b:
         9c:4f:c2:ae:8d:0e:ff:90:f2:f0:63:c2:64:d1:33:a5:b0:b6:
         e2:f7:de:d1:88:7a:d4:88:f1:36:79:fb:73:5f:62:d8:22:cb:
         f0:b6:0f:cd:f1:35:c9:9c:c6:d6:c4:e6:b7:f4:5d:f3:ef:76:
         3f:53:2f:62:ba:22:0e:72:83:a3:61:18:c3:ee:d2:e1:dc:91:
         d9:31:66:0c:71:b5:43:25:d2:af:33:2d:9b:23:c9:e2:d0:a4:
         13:b0:8e:59:ab:ae:06:06:84:25:2c:31:ec:14:60:fd:e0:f7:
         f7:75:f0:a6:47:06:07:05:b4:7f:2b:85:71:d8:ac:b5:23:c4:
         aa:c7:8f:bc:ae:29:f4:63:b7:c2:86:e9:c7:83:33:30:89:84:
         c3:15:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:09:11 2025 by rpki-client