Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          paaAZ274+pXjId/Ga7yvqon8QTFT87mQ6VUDKjeLupo=
Subject key identifier:   8F:83:D6:57:91:23:06:E8:51:FD:25:27:CD:D4:43:87:AE:1B:C0:6B
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       45515FC49085341135F6FED5539CA5FBBD891BEA
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     265379
IP address blocks:        168.194.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:51:5f:c4:90:85:34:11:35:f6:fe:d5:53:9c:a5:fb:bd:89:1b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=8F83D657912306E851FD2527CDD44387AE1BC06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d0:c4:ec:97:cb:92:89:23:17:73:ef:95:c9:
                    cf:fb:c1:f7:11:d0:e5:b9:d7:19:54:30:6d:d0:35:
                    75:c2:72:f7:ff:0f:e7:5b:76:5a:12:e1:8a:54:b3:
                    9f:e8:29:4a:98:0a:17:60:2d:f1:cb:d8:6a:f7:ac:
                    81:e2:58:1d:0d:36:2e:c6:0e:67:26:83:44:a1:e7:
                    92:a3:1c:71:71:50:0f:55:fc:b9:95:36:07:e4:ef:
                    34:a9:1f:6b:87:68:b4:71:a7:f8:b1:7d:4e:b8:08:
                    47:9b:ba:73:eb:9f:a7:7d:33:81:f2:73:c6:d1:d8:
                    68:e4:d6:fe:c8:cd:11:41:1e:da:63:48:fa:7f:db:
                    ed:f2:68:22:ce:3c:38:69:88:ce:ae:60:16:7b:07:
                    b6:e5:de:05:f6:cb:1d:c8:e2:40:9b:16:df:fc:12:
                    48:dc:c1:d7:d0:10:8c:e6:fb:7f:76:86:67:d4:8b:
                    c3:1c:37:bc:c1:f7:f3:78:5c:3a:c1:af:78:b4:8a:
                    8d:76:99:2d:09:e3:99:ed:a1:3f:53:1b:18:85:d8:
                    83:4f:07:af:c9:22:9c:58:ce:6d:3f:d4:24:e7:33:
                    07:23:42:47:9a:16:f1:9e:b3:ca:19:04:63:85:c7:
                    2e:e0:cc:99:53:23:a0:86:7d:9a:64:ba:74:e0:d2:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:83:D6:57:91:23:06:E8:51:FD:25:27:CD:D4:43:87:AE:1B:C0:6B
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36352e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:03:23:a3:15:4a:4c:cc:bb:88:27:b9:27:da:47:91:32:3a:
         55:7d:45:36:ef:2b:47:37:66:86:81:a5:21:2b:57:e4:91:12:
         90:46:06:fa:83:f2:ea:49:38:03:3a:ab:7a:84:6b:64:19:7a:
         e9:84:bb:df:b9:fb:53:4b:bf:45:23:32:95:07:e0:d4:35:a8:
         e6:fa:7e:a2:86:01:4a:ec:80:40:b1:a3:e2:1c:f7:9a:e9:ed:
         98:92:2a:cc:68:36:08:2b:2c:be:a2:34:a8:78:b9:33:10:88:
         d9:bb:c3:49:4f:c8:ec:c2:1d:37:d9:a6:42:eb:03:be:57:1d:
         1f:e5:3c:72:5f:54:f7:f3:15:9a:a8:61:b2:ea:4b:e4:69:a5:
         3f:9b:bd:db:fa:17:f5:a3:3d:45:65:30:83:51:ad:0f:86:e5:
         a8:af:ab:53:c6:a2:ba:2a:ae:4e:f6:24:e2:35:d5:ed:29:62:
         6d:90:de:01:58:a2:4a:4c:f2:2d:c5:f9:6e:53:66:be:2a:b1:
         f1:8c:7c:bc:9b:1b:30:4a:e3:dc:ae:7c:41:1d:56:49:e2:4a:
         ae:b4:f9:da:1f:48:a4:81:5a:13:92:02:e2:67:2b:e4:79:2d:
         20:9f:da:28:ed:d6:d8:d8:aa:ca:19:b2:21:8d:76:39:ce:53:
         37:f6:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:01:45 2025 by rpki-client