Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/3136342e3136332e3234382e302f32322d3234203d3e20323635393738.roa
File:                     3136342e3136332e3234382e302f32322d3234203d3e20323635393738.roa (raw, json)
Hash identifier:          /CJhRc/MGKpBvcjjqLvGkN+1SGJWfrq+6By38yMCcYk=
Subject key identifier:   4B:35:CD:2A:A5:92:38:B0:0B:B9:BB:A6:D9:87:31:A1:EA:E7:68:D8
Certificate issuer:       /CN=A74B721511D28F530DF02712140284D2F079E9F4
Certificate serial:       6918B82D347D459C752BA6848E9C1D08FBED4CED
Authority key identifier: A7:4B:72:15:11:D2:8F:53:0D:F0:27:12:14:02:84:D2:F0:79:E9:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/3136342e3136332e3234382e302f32322d3234203d3e20323635393738.roa
Signing time:             Wed 05 Mar 2025 21:05:58 +0000
ROA not before:           Wed 05 Mar 2025 21:00:58 +0000
ROA not after:            Wed 04 Mar 2026 21:05:58 +0000
asID:                     265978
IP address blocks:        164.163.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.crl
                          rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:b8:2d:34:7d:45:9c:75:2b:a6:84:8e:9c:1d:08:fb:ed:4c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A74B721511D28F530DF02712140284D2F079E9F4
        Validity
            Not Before: Mar  5 21:00:58 2025 GMT
            Not After : Mar  4 21:05:58 2026 GMT
        Subject: CN=4B35CD2AA59238B00BB9BBA6D98731A1EAE768D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:56:14:d2:b6:7c:24:ff:88:62:cd:f9:3b:
                    55:ad:b2:20:ee:b4:62:8d:83:fc:c8:b5:6f:be:47:
                    c7:10:36:9c:33:70:45:90:82:96:ee:3b:1e:44:34:
                    f7:b3:5e:ff:92:ac:4b:37:d0:d3:b9:a8:7c:63:65:
                    d5:79:68:7f:ff:6b:84:65:9c:e5:eb:2d:62:1b:bd:
                    b1:80:d9:3d:21:10:02:2c:98:52:97:e2:71:bf:c3:
                    f0:3c:d2:b7:78:cf:b7:16:05:5e:51:84:0b:61:80:
                    63:52:51:35:30:4f:75:26:18:13:e5:5d:23:94:1c:
                    d6:06:67:53:c1:79:a6:04:d8:c5:f5:69:8d:18:df:
                    d1:c1:63:6d:26:d0:3d:7e:0e:ac:e9:a6:59:49:8d:
                    8a:cb:21:f6:48:b9:94:2e:40:44:c7:6f:51:95:cb:
                    fa:ce:66:8e:68:91:70:63:85:f4:85:69:80:a1:16:
                    33:4e:cf:53:f7:fb:2e:84:13:62:99:e5:b5:e3:82:
                    aa:ac:48:4a:51:4d:33:13:fc:96:33:1e:93:0d:e4:
                    58:4e:76:37:7f:28:b1:82:e2:4d:a1:05:b2:07:a4:
                    15:ee:48:58:af:f2:1a:8c:24:14:d0:c2:43:13:f4:
                    4f:80:90:ec:19:25:eb:36:b1:3e:53:a4:c8:c5:6d:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:CD:2A:A5:92:38:B0:0B:B9:BB:A6:D9:87:31:A1:EA:E7:68:D8
            X509v3 Authority Key Identifier:
                keyid:A7:4B:72:15:11:D2:8F:53:0D:F0:27:12:14:02:84:D2:F0:79:E9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/3136342e3136332e3234382e302f32322d3234203d3e20323635393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:54:5e:73:36:78:a5:dd:c8:53:04:eb:ab:f1:79:fc:89:1e:
         67:86:18:75:cf:f7:82:8b:b6:a3:8c:2d:87:0a:5a:fb:79:2f:
         da:59:2f:b8:e5:fd:fa:fe:14:ac:f7:84:f6:37:d0:39:df:db:
         43:83:17:7f:c4:2f:bd:1a:6c:e8:19:33:d3:ee:44:66:3b:62:
         29:51:a8:1a:3f:c3:df:0b:3f:9d:25:15:26:62:fa:27:8b:5c:
         52:88:92:21:b4:f1:26:74:af:0a:0a:91:51:ba:1c:57:72:87:
         48:0c:ec:e0:e0:8b:09:bf:b3:0f:f8:10:e4:91:2c:18:2a:a9:
         50:37:df:c2:23:a5:55:6f:b2:1b:3e:2f:83:20:ac:5f:6e:44:
         e6:23:fd:80:01:fb:65:f4:16:4e:b0:12:a6:44:af:0a:6e:e6:
         03:25:70:fd:be:1d:19:d9:b8:71:59:69:a4:97:d9:a3:55:f0:
         bb:6f:36:09:e0:d2:64:6b:f0:a8:c9:dd:f1:3b:68:e6:43:6f:
         b2:d8:86:49:0d:e1:b2:93:28:fd:a5:09:6b:b4:ed:eb:b2:c8:
         0d:43:3d:46:2a:10:d5:b0:ef:35:96:e3:e5:de:b8:b5:47:86:
         b7:30:f4:f7:a4:19:77:49:ef:be:2a:6b:6b:41:c5:68:72:8a:
         f7:94:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:33:27 2025 by rpki-client