Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa
File:                     3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa (raw, json)
Hash identifier:          Q+pPi3Q3xBthJhFCGl9mXFHyWHLBW1/sVoto4UvWuEc=
Subject key identifier:   E9:02:A4:E5:C2:6F:79:28:4A:A6:3A:0B:F0:A6:09:8D:4E:3B:B7:E3
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       5D0B82EDC90ED441918DBA8924B6BFA53E8165DF
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     265379
IP address blocks:        168.194.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0b:82:ed:c9:0e:d4:41:91:8d:ba:89:24:b6:bf:a5:3e:81:65:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=E902A4E5C26F79284AA63A0BF0A6098D4E3BB7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:9b:21:67:a2:f8:2c:24:14:19:7e:39:68:
                    89:a2:d7:84:2b:c3:28:27:f7:fe:77:ec:db:d4:30:
                    31:52:a9:b3:7d:ff:4c:b3:ab:e6:c6:af:e4:4f:b2:
                    da:d1:e3:83:f9:88:03:e2:c8:05:af:94:50:6e:29:
                    1b:60:a9:6a:dd:b5:f0:5e:5c:36:de:87:ad:d4:47:
                    33:90:cb:98:2c:1e:5b:ac:ab:37:f2:0b:ca:2b:0f:
                    90:60:fa:c3:0b:eb:46:62:2c:b1:4c:2e:1c:00:c9:
                    a0:e7:de:9d:12:ef:d5:10:92:59:dd:a2:01:3f:99:
                    be:c6:1a:bc:6d:92:af:00:6f:1f:a8:e3:7f:54:f3:
                    73:9b:48:47:01:58:5a:30:de:cf:8d:3a:fa:a9:f1:
                    97:ca:cc:89:29:ef:8e:55:43:c8:11:21:a6:3c:5b:
                    87:14:0c:57:9b:4f:3f:72:c9:43:a3:3d:0a:1e:2e:
                    80:ee:f8:d5:1b:19:e1:04:bc:fe:cb:c2:99:ca:dc:
                    30:ad:96:46:03:fc:49:3c:cd:4a:a0:99:09:b5:06:
                    3f:ba:f6:bc:64:a9:04:5e:7c:f4:7e:09:24:0a:bb:
                    49:80:6e:b3:97:22:d8:53:b4:a8:b7:32:ff:d3:8d:
                    49:ed:cd:6b:f7:f3:a7:ba:ec:b8:a3:2b:99:a2:4e:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:A4:E5:C2:6F:79:28:4A:A6:3A:0B:F0:A6:09:8D:4E:3B:B7:E3
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36362e302f32332d3233203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:a2:35:2a:fa:6d:4f:02:65:89:75:b7:fa:b7:1c:0b:5e:08:
         8b:52:e4:49:35:36:dd:bd:b8:23:b4:cd:84:99:d7:02:8b:38:
         c0:5b:04:ca:03:f6:bd:6a:d6:46:87:7f:72:c8:48:cd:3a:6e:
         5b:ab:37:03:17:1b:f6:26:70:52:c5:78:7c:71:8b:8b:d3:21:
         67:64:ab:18:fd:bb:0c:ab:dc:45:a5:85:9d:35:e8:fb:08:41:
         59:c1:42:15:ff:93:4e:e5:ca:97:02:87:af:21:c9:1d:44:6d:
         a2:07:46:7b:45:a7:84:d4:06:37:f5:d9:f5:0b:d0:f2:d0:4e:
         66:6b:a0:a7:86:bf:56:70:aa:52:74:7e:8a:92:59:e4:f4:e4:
         20:4a:2f:1a:8c:44:ab:f3:b2:7d:05:b0:d9:1b:20:82:ab:23:
         2c:7e:ff:90:2b:48:8d:c0:85:30:61:e3:04:a6:6e:8c:f5:7f:
         30:51:0b:ae:5b:3a:e8:c8:c1:1f:b3:52:bc:43:ce:92:83:7f:
         3d:16:c6:2d:36:03:42:7b:23:07:8f:9e:79:73:43:03:93:cb:
         c7:22:b8:48:48:23:22:ea:ef:3f:b4:80:28:84:9e:00:97:56:
         0a:b9:9e:24:22:d8:43:0e:19:cb:d3:8f:e5:21:7b:37:a6:e1:
         73:15:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:57 2025 by rpki-client