Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          17BkynKMJ8Cd+Up6TFdENyPOqHns2WRcIKJkiOx/W60=
Subject key identifier:   94:5F:ED:A7:2E:58:A3:C3:04:AA:36:BF:5A:94:30:C5:4D:5C:DD:D7
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       6879891B2CA55F19DF0EA5FCB379D02A95910B11
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 06 Mar 2025 01:49:52 +0000
ROA not before:           Thu 06 Mar 2025 01:44:52 +0000
ROA not after:            Thu 05 Mar 2026 01:49:52 +0000
asID:                     265462
IP address blocks:        168.196.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:79:89:1b:2c:a5:5f:19:df:0e:a5:fc:b3:79:d0:2a:95:91:0b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Mar  6 01:44:52 2025 GMT
            Not After : Mar  5 01:49:52 2026 GMT
        Subject: CN=945FEDA72E58A3C304AA36BF5A9430C54D5CDDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:f2:40:eb:75:94:95:cd:2e:ef:e1:e2:d3:
                    b9:5e:3b:f0:a4:0e:5f:64:a4:2b:f4:c8:31:23:96:
                    0b:2a:38:1d:5e:90:17:91:3b:d6:d8:c8:bd:52:51:
                    e3:70:41:ec:de:6a:26:57:46:84:ed:21:11:2d:14:
                    f5:dc:86:29:83:2e:39:93:1f:c7:f8:de:da:9f:2a:
                    6e:3a:d2:f9:78:82:59:13:2e:86:f0:7f:39:b6:e4:
                    40:70:d5:84:9a:ca:ae:a8:9b:3f:c9:81:f7:4c:23:
                    8a:c8:3e:6d:4e:0d:49:36:6d:fb:ae:22:a1:f2:2f:
                    81:58:ef:b7:d5:ae:12:b4:3a:42:92:d6:0c:5d:b3:
                    8e:aa:6b:b6:45:98:45:a4:54:4e:c3:7a:15:bc:fc:
                    bf:d1:af:a3:10:e5:99:3b:95:14:7b:42:df:fa:d7:
                    14:d3:a7:4b:47:5e:85:8c:80:85:fe:15:b2:54:79:
                    c2:76:96:e7:d6:a0:2d:bf:a7:a9:0d:4b:7d:0b:6d:
                    04:73:1c:63:3e:90:9f:b1:49:f6:e7:8c:aa:e5:8c:
                    e4:7f:93:ac:62:8f:32:5b:73:03:da:ea:24:fd:09:
                    94:e7:6c:9b:75:22:6a:9b:f7:54:cb:72:9d:ff:ad:
                    e6:4b:dd:fd:76:e3:f5:57:3c:56:95:17:c6:97:96:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:ED:A7:2E:58:A3:C3:04:AA:36:BF:5A:94:30:C5:4D:5C:DD:D7
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:0a:ca:24:00:8d:37:49:5f:c2:16:7d:3c:5b:11:f4:04:
         ee:8e:7a:43:55:b7:38:f4:96:88:d3:ee:5f:bf:90:7b:5b:11:
         f2:cd:1f:f1:3d:15:2d:3f:bf:4f:14:30:13:75:a4:4c:ad:a0:
         11:75:92:7e:5a:1d:a1:61:64:6e:03:24:d4:1f:b3:f8:d1:4b:
         1f:ee:93:73:4a:5a:e5:f9:0f:b8:0c:0e:14:87:f8:7f:17:98:
         78:7a:6d:59:4b:55:37:e3:ef:3a:dd:64:b7:2f:84:05:d5:71:
         15:6b:a5:61:7e:4b:fb:ac:a0:16:7d:50:f3:f2:32:2c:d4:87:
         e0:df:cb:53:07:72:f6:be:81:9c:4f:b2:99:30:d5:84:51:58:
         cb:ca:08:60:09:a1:68:e7:d7:03:04:aa:af:0e:68:91:9e:17:
         c9:48:69:8f:b5:29:9b:13:82:d8:2e:c9:c6:bd:3d:4b:3a:e5:
         25:7b:f5:3d:fd:d7:c2:ba:bf:38:31:b6:50:f8:07:db:9b:af:
         1f:ce:15:72:92:4c:4d:26:0c:a0:04:40:2c:aa:b7:cc:1a:5c:
         72:77:97:c7:6d:ff:5b:9b:be:8c:e0:68:93:44:38:e8:7a:46:
         b4:a1:69:e9:a6:34:4f:ae:e0:bc:b8:13:e0:3e:38:63:79:44:
         8a:5f:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:07 2025 by rpki-client