Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          dtgyrItyp04icGUdjIa7lvHJ++n9NuZ4Q1WwdvLXwdM=
Subject key identifier:   51:28:F0:67:36:C5:58:7F:8B:F8:E1:EA:85:EF:C7:16:8E:1A:F6:18
Certificate issuer:       /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial:       22F4ECBA62C1C7623F32CC6C99105837D91B5080
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
Signing time:             Tue 04 Mar 2025 06:47:12 +0000
ROA not before:           Tue 04 Mar 2025 06:42:12 +0000
ROA not after:            Tue 03 Mar 2026 06:47:12 +0000
asID:                     265393
IP address blocks:        168.194.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 17:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:ec:ba:62:c1:c7:62:3f:32:cc:6c:99:10:58:37:d9:1b:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
        Validity
            Not Before: Mar  4 06:42:12 2025 GMT
            Not After : Mar  3 06:47:12 2026 GMT
        Subject: CN=5128F06736C5587F8BF8E1EA85EFC7168E1AF618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:db:1b:f2:b4:ea:4d:2d:c9:c1:89:83:d6:
                    ad:05:d6:52:19:3c:ea:af:3b:64:be:18:5d:52:42:
                    f9:6a:39:bc:ba:3f:29:e1:04:42:06:76:95:04:0d:
                    e1:25:e0:74:a5:b1:76:98:d6:a4:25:57:ae:c5:78:
                    62:12:cc:e5:00:86:ae:b7:34:67:0b:c4:e2:30:57:
                    84:01:d5:0e:e5:25:bb:24:ff:50:02:8e:9c:5f:d9:
                    6c:30:c1:d7:9a:c5:9b:89:71:96:14:86:e4:5b:bb:
                    90:f7:c0:d7:84:e8:c2:7f:21:c4:85:86:05:01:44:
                    8a:f9:01:ed:e3:e9:e0:a7:9a:04:be:af:34:4d:ba:
                    d1:a3:1f:8a:ef:c3:12:e0:42:5c:02:df:20:0d:9d:
                    f1:0c:ab:41:99:bc:f9:31:1f:38:3b:81:4d:c9:58:
                    86:eb:14:16:e8:6f:e0:22:f0:e4:82:4e:ca:51:67:
                    2a:72:6b:50:10:ef:5a:73:b3:99:3c:89:44:92:5c:
                    64:da:24:87:a5:ae:e9:67:a4:1c:f9:ed:d1:24:d7:
                    80:03:0f:eb:89:5f:c3:17:e3:6c:a1:e1:94:08:47:
                    1d:a6:c4:20:d1:54:a7:a6:2e:5f:b2:31:50:99:73:
                    6a:d9:62:8d:d1:f9:1d:7a:3a:55:45:84:d8:11:bd:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:28:F0:67:36:C5:58:7F:8B:F8:E1:EA:85:EF:C7:16:8E:1A:F6:18
            X509v3 Authority Key Identifier:
                keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:f5:63:17:8c:81:cd:27:4e:c8:4a:53:0b:f5:2c:19:4a:
         e1:7a:6f:97:d3:02:e0:f7:56:41:5c:34:7a:7e:df:37:1a:5b:
         9d:08:20:73:2e:c2:d5:33:fc:f1:c7:bf:fe:d8:11:d0:71:e7:
         e5:2b:db:e2:81:75:b1:d4:a6:57:02:fb:1b:df:5c:96:7f:de:
         a4:19:1a:7b:f9:f8:ad:ff:f5:fb:a4:ea:0d:d1:c2:dd:43:d4:
         f4:6e:1c:bc:b4:38:a2:cc:d4:d8:36:4b:ee:00:b2:f6:9e:0a:
         fd:0f:74:51:57:cf:2f:6b:d9:5d:d6:32:ef:fa:78:90:19:17:
         97:3c:de:d5:a4:0b:8e:89:67:fc:35:27:ec:4c:76:13:9a:56:
         37:a6:61:f6:67:ab:c7:a4:d9:9d:29:c3:04:cf:13:9c:99:c6:
         f7:90:6c:50:61:5d:f4:3f:d8:85:a3:9c:4b:b9:c4:71:9c:d9:
         a9:76:80:8d:80:60:47:97:93:fb:54:92:e9:bc:55:9f:46:c1:
         1e:0d:4f:a6:91:79:ab:6a:99:75:c2:3c:20:90:95:38:46:d7:
         00:2e:55:ef:48:03:cf:b9:52:0e:88:27:60:5a:7c:5b:18:ff:
         3b:c2:9c:82:9a:15:79:1a:f5:44:a1:0a:1d:4b:24:f7:0c:c7:
         72:cb:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:02:31 2025 by rpki-client