Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          a4xjyShOAlkLSkU8MIY+tgc8pNty0yHazefCC5OHImY=
Subject key identifier:   AD:E1:90:0E:03:41:80:E8:4A:78:A9:FF:8A:29:29:30:BC:46:2A:3B
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       27749FB0ECDD51E23FEAC8D50B1CC4B55DF7CE91
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     265379
IP address blocks:        168.194.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:9f:b0:ec:dd:51:e2:3f:ea:c8:d5:0b:1c:c4:b5:5d:f7:ce:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject: CN=ADE1900E034180E84A78A9FF8A292930BC462A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:4d:3d:e5:87:26:e4:96:3d:bf:de:77:8e:
                    e1:96:65:ac:1f:ff:ea:5f:29:2b:c4:17:c9:9c:c7:
                    64:b0:8a:83:a2:e9:40:b2:c4:66:44:aa:cf:d1:1c:
                    e8:5b:80:24:81:fe:d6:dd:1e:cf:08:81:ff:c9:32:
                    d6:7a:03:35:b1:96:66:88:44:21:7c:cf:db:30:42:
                    30:86:63:40:31:2c:a8:f7:c9:2e:3f:de:17:dc:27:
                    38:99:60:4b:50:86:06:06:7e:23:00:0c:0a:34:0c:
                    8a:6c:d5:1d:c5:57:06:f3:3a:c5:ed:7b:3d:d7:64:
                    24:b4:4f:36:1b:ff:a8:d7:e8:a8:81:e8:c5:9b:f2:
                    3f:45:37:95:dc:83:0a:fa:e5:28:d2:2e:7d:0c:64:
                    e3:d8:01:3f:13:96:16:53:fd:01:9c:b6:ca:95:00:
                    d2:64:ac:b8:02:bb:fe:21:c0:8e:7c:c1:f3:0d:a4:
                    ed:69:d3:3e:57:6e:53:6e:df:57:82:8b:dd:e4:1f:
                    53:8f:2e:2f:fd:b0:39:c5:55:a8:12:4c:2b:da:b5:
                    57:22:a2:f8:fc:54:fd:74:74:82:1f:e5:f5:11:e4:
                    8c:a2:89:e4:c0:2a:9b:de:93:e7:77:30:8e:c9:73:
                    04:eb:5a:ff:dc:50:cb:29:f8:32:a7:de:61:3f:36:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E1:90:0E:03:41:80:E8:4A:78:A9:FF:8A:29:29:30:BC:46:2A:3B
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:34:ed:ef:f7:05:c8:9c:5c:81:aa:01:0f:6e:48:0d:af:2c:
         af:de:35:5e:b1:a9:b1:fe:ee:5e:f0:79:4c:c4:fa:cc:b0:00:
         80:62:f3:14:2e:01:3d:dd:53:69:1b:16:16:55:21:96:a6:ae:
         ad:51:0e:d8:87:80:85:5c:07:5b:3a:89:e3:10:90:c4:d9:c0:
         e4:63:df:e9:76:24:fb:fe:2c:9e:fa:5d:40:b5:24:25:5e:59:
         30:7b:7b:8b:31:9d:26:2c:37:8f:6b:68:65:d8:a1:d5:bb:b7:
         28:26:43:5b:63:e7:3c:db:ab:95:41:00:2f:6a:6b:2b:60:da:
         da:cd:2c:8f:30:79:99:29:51:51:cc:f5:6f:9e:d8:c0:bc:6d:
         a9:f4:77:96:80:31:cc:5b:f1:b3:f5:4c:f5:dd:f4:68:11:64:
         66:db:dd:b5:f8:83:56:07:c2:02:ad:61:e8:5c:3e:5e:53:1f:
         21:4e:1b:03:a6:34:5b:6e:57:cd:6d:15:52:38:8f:31:d4:38:
         35:8c:1d:0c:c2:63:29:4a:ed:f9:f0:fa:1e:64:98:e6:8f:5c:
         34:3f:78:9a:42:43:5e:da:5c:a2:fb:94:79:cb:d6:97:50:40:
         1d:5a:23:10:c5:e1:af:f9:71:b1:27:eb:98:53:59:ca:8f:5f:
         fa:af:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:24 2025 by rpki-client