Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa
File:                     3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          RBYdST91niOM+x1zBtSsOW+3Z7jQEe2Wf5c86RThsdc=
Subject key identifier:   C6:8E:26:9C:FC:9E:3D:29:3B:1A:E9:B7:B0:05:FC:A4:2D:F8:D6:A6
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       77D691A6FB29FAAAC936EA0B20003DF4A174CE81
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa
Signing time:             Wed 28 May 2025 16:56:16 +0000
ROA not before:           Wed 28 May 2025 16:51:16 +0000
ROA not after:            Wed 27 May 2026 16:56:16 +0000
asID:                     263544
IP address blocks:        168.227.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:91:a6:fb:29:fa:aa:c9:36:ea:0b:20:00:3d:f4:a1:74:ce:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: May 28 16:51:16 2025 GMT
            Not After : May 27 16:56:16 2026 GMT
        Subject: CN=C68E269CFC9E3D293B1AE9B7B005FCA42DF8D6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:96:2e:69:dd:3b:a8:68:1a:57:1b:11:53:
                    da:87:17:38:5b:4b:40:f8:9c:e9:cb:d9:47:75:0b:
                    aa:d9:1f:2e:4f:e9:eb:86:6f:d2:32:c0:c3:81:5d:
                    1c:cb:75:2f:f7:63:7d:ea:5c:79:c3:50:14:5f:2b:
                    8b:e4:1c:a7:be:fd:f0:fc:d3:fe:03:0b:ed:b2:e5:
                    16:f4:2d:79:46:8e:a9:38:25:df:6c:48:3d:fc:a4:
                    00:d7:86:8c:96:6c:61:bb:64:e1:8b:7c:26:85:80:
                    2b:88:51:c9:50:85:54:3f:90:b0:e5:ba:a3:4d:1f:
                    ae:b0:2b:81:67:09:1b:f1:ac:98:67:02:e7:fc:83:
                    37:e7:d3:dc:f2:cb:fd:1c:b8:6b:20:41:10:8f:3d:
                    87:c4:9c:74:46:ac:73:54:ed:0d:40:cd:7b:71:61:
                    53:f5:eb:e6:80:72:87:ea:ca:56:20:b0:b3:96:d1:
                    1f:80:db:ed:a1:73:05:4d:98:89:cc:10:52:47:8e:
                    6e:97:01:6b:70:b5:97:21:35:fc:1d:3e:7f:62:53:
                    b6:d5:76:e0:b1:ea:5f:18:ba:41:43:ef:a1:04:81:
                    fe:d4:04:12:22:48:bc:a1:f0:bd:20:0b:5b:20:15:
                    aa:cc:c8:db:6b:a2:f5:71:00:80:bc:dd:a5:21:54:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:26:9C:FC:9E:3D:29:3B:1A:E9:B7:B0:05:FC:A4:2D:F8:D6:A6
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:0c:b8:be:90:59:c7:0e:d9:e0:af:40:bd:a0:f9:98:7e:36:
         42:32:a1:4e:cb:91:e0:a3:5f:04:d3:48:d1:94:9b:9c:ea:d1:
         df:d9:7d:e7:7d:af:a5:2f:bd:7c:03:ce:f0:ee:5f:a5:d2:d9:
         be:3b:47:da:1c:be:d8:a2:62:2d:4a:7e:08:43:22:1d:ee:b0:
         ba:33:d2:b5:5d:e6:a0:cd:24:bf:21:51:f4:80:7e:c0:d0:43:
         b1:62:94:7c:8a:58:e8:0f:b5:e7:06:9b:76:b1:f5:42:4d:7e:
         fd:47:3e:ed:c5:6b:c5:7d:68:4f:19:f9:9b:3d:39:cb:28:62:
         a5:cf:e3:7e:78:ac:93:96:8c:33:4e:85:0b:2a:69:69:ec:9b:
         6f:3b:c8:50:07:18:0c:cc:83:35:bd:03:00:87:6e:4e:7a:ba:
         45:59:03:2c:f9:d6:a9:1f:7c:7d:67:9d:7f:c6:d9:e8:09:12:
         de:fe:9d:a1:bc:ef:d2:32:e1:44:b0:41:44:51:de:72:28:5e:
         44:1e:3a:d4:6d:3e:a9:7b:ea:2a:e2:80:39:0f:14:d7:8f:4c:
         17:8a:1e:d1:35:09:81:07:22:b9:19:2c:9c:4b:0d:23:df:84:
         b4:70:7b:82:c2:1e:19:5e:57:ca:9d:3e:9b:c2:47:cd:de:7d:
         d0:4e:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:29:38 2025 by rpki-client