Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          evRQwO+H3OsyrrgXrFcqpittU37jDD7VCd9U7zoHHDo=
Subject key identifier:   4C:B1:7F:29:BC:AF:C5:B0:96:FD:5A:C4:EA:B2:C7:02:DC:5A:B1:23
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       69538F358530901F6071F8656434089C866A58B8
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 06 Mar 2025 01:49:51 +0000
ROA not before:           Thu 06 Mar 2025 01:44:51 +0000
ROA not after:            Thu 05 Mar 2026 01:49:51 +0000
asID:                     265462
IP address blocks:        168.196.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:53:8f:35:85:30:90:1f:60:71:f8:65:64:34:08:9c:86:6a:58:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Mar  6 01:44:51 2025 GMT
            Not After : Mar  5 01:49:51 2026 GMT
        Subject: CN=4CB17F29BCAFC5B096FD5AC4EAB2C702DC5AB123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:88:4b:0f:06:0e:68:7e:e6:74:c7:9d:53:
                    64:27:76:5a:92:d9:04:e1:0e:64:77:26:44:6e:70:
                    65:a5:d3:8f:54:bf:47:75:41:20:16:3f:bf:b0:74:
                    10:96:1c:ac:58:38:07:84:6c:c4:ac:4f:9b:58:85:
                    f7:eb:8b:ad:e5:d8:bc:95:35:14:d2:18:a3:4e:29:
                    6a:d9:4b:0a:fe:d9:69:80:9e:01:8a:b1:c8:b5:8d:
                    a1:93:9d:9d:a3:63:21:db:0b:3f:3d:72:7b:37:87:
                    37:e1:d2:d9:18:2a:a4:55:b6:93:4a:49:ef:4b:b6:
                    36:ee:f3:fe:c2:77:d9:e9:34:1c:12:2f:bf:72:03:
                    4b:b0:57:37:f3:0a:75:f6:3a:99:11:67:82:b8:1e:
                    c6:5d:48:ef:72:17:73:a1:64:c2:92:77:29:c3:fd:
                    2a:aa:57:de:3a:8f:6c:fd:42:aa:9d:f4:21:86:21:
                    c1:f0:94:c9:dd:31:50:bc:a1:5a:46:0b:e1:04:77:
                    ac:7d:96:4c:5f:1d:e6:e2:74:2a:0d:d2:4c:73:64:
                    9e:c1:ec:62:35:1f:6b:0e:8b:58:44:76:cd:78:d5:
                    40:bc:09:8b:19:42:3a:84:ae:84:c8:ba:70:ec:97:
                    b3:93:ec:10:6c:86:2e:6e:33:34:9f:7a:fe:35:c3:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B1:7F:29:BC:AF:C5:B0:96:FD:5A:C4:EA:B2:C7:02:DC:5A:B1:23
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:c4:45:be:0c:41:0c:2c:9c:3d:ef:50:b7:54:2f:79:a4:
         4a:48:0a:c7:ec:8b:64:da:c8:2c:45:85:8a:58:6c:28:dc:3d:
         7f:dc:14:68:64:9d:6e:54:5b:e7:05:c0:7b:21:64:9e:41:a0:
         ec:a7:2d:3e:63:3d:aa:b6:61:c0:a1:e1:af:83:18:e3:41:05:
         29:22:73:53:1b:ed:e9:5b:a1:7b:5d:89:84:63:22:db:c1:78:
         17:b0:fd:ea:42:4a:3b:70:18:16:4a:0d:7b:c0:bb:19:86:89:
         f2:ba:24:64:ff:33:d5:96:3d:e9:27:ed:2c:17:71:42:d7:92:
         cb:7a:bd:f7:24:83:01:9a:75:e2:35:da:8b:01:5f:73:ab:b2:
         a4:c4:81:f5:06:c3:f5:5f:2c:09:95:27:da:73:d1:86:0b:0e:
         dc:65:3d:16:f0:eb:73:98:38:f6:ef:2d:48:58:c2:07:93:cd:
         bf:ae:78:f2:51:56:a2:72:27:18:aa:a9:49:d1:7c:b3:4f:7a:
         d4:66:9f:3b:36:d0:ee:ea:c4:27:43:a0:11:c8:16:6f:80:67:
         05:eb:b3:df:e8:b0:46:79:52:18:69:be:77:ef:e8:47:03:92:
         71:2e:b7:af:4f:c4:30:15:97:f3:21:5d:51:6c:5d:4c:a0:fb:
         23:c4:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:10 2025 by rpki-client