Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa
File:                     3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa (raw, json)
Hash identifier:          8MHZYB00jpMu9bL7PENSCmahv8upOnDcw1afAo+avdg=
Subject key identifier:   00:7C:92:E9:D2:0A:6E:E9:74:07:D2:2D:A1:FA:25:70:28:5B:06:DB
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       340A11480390E23C10AB46F8004F19BAFB7A0440
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa
Signing time:             Thu 06 Mar 2025 15:53:46 +0000
ROA not before:           Thu 06 Mar 2025 15:48:46 +0000
ROA not after:            Thu 05 Mar 2026 15:53:46 +0000
asID:                     266226
IP address blocks:        216.98.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0a:11:48:03:90:e2:3c:10:ab:46:f8:00:4f:19:ba:fb:7a:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Mar  6 15:48:46 2025 GMT
            Not After : Mar  5 15:53:46 2026 GMT
        Subject: CN=007C92E9D20A6EE97407D22DA1FA2570285B06DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:58:d1:fc:39:c2:c2:d4:45:70:61:7a:f1:
                    98:a9:01:1a:16:1d:e7:8a:d2:93:1e:85:15:2d:3d:
                    c2:c0:30:d5:bd:c6:ee:c9:b8:55:96:65:8b:49:66:
                    99:4f:80:86:41:0b:ed:0f:a1:fc:a4:1f:75:d7:4d:
                    ea:36:19:25:c5:21:ba:bb:e3:d4:d1:73:74:04:73:
                    6a:a5:9a:94:8a:cd:24:4c:2d:81:a4:7c:1a:08:48:
                    30:55:33:f9:c6:ee:76:c2:53:d0:5e:07:17:e1:f0:
                    92:5c:6b:13:30:75:23:64:05:aa:1c:94:2d:30:61:
                    d8:94:12:c7:c7:50:5e:65:22:6c:8f:aa:a5:c9:e4:
                    45:78:7a:58:bd:9b:94:a1:5c:ba:aa:51:3f:63:95:
                    67:f9:1d:9d:6a:ce:02:e7:40:54:eb:a0:74:c2:12:
                    ad:db:d7:22:b8:36:05:82:74:a6:14:2e:86:61:85:
                    71:dc:5c:df:17:c6:7f:07:b0:2a:a2:8b:a4:ed:95:
                    42:27:9c:c3:89:a3:54:ed:1b:1d:f3:1b:6f:ac:e1:
                    0a:e4:89:63:8e:1d:09:d9:0c:ce:2c:7d:16:e6:6a:
                    d7:98:32:6d:3f:29:b4:fb:79:94:20:41:6c:c1:f8:
                    3f:61:5e:3d:8c:b9:be:b4:f1:4d:cf:2f:34:07:57:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:92:E9:D2:0A:6E:E9:74:07:D2:2D:A1:FA:25:70:28:5B:06:DB
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:45:3d:41:b3:0b:f5:94:05:d7:41:3b:43:f8:36:cb:b3:
         76:9c:e2:cd:88:27:ce:ca:fa:2d:d8:05:c0:1e:ad:6f:b5:d7:
         66:ae:c1:cd:5f:95:c0:69:73:1c:bf:f5:4f:a2:bf:1e:9e:b6:
         41:bc:16:d9:34:d2:2b:eb:f8:b7:13:2c:3e:f8:6c:98:3c:25:
         b2:06:f3:f5:1a:3d:f8:b4:b7:9f:29:2a:b1:f9:c5:ad:47:1a:
         28:93:db:03:2a:ab:9d:bd:b7:48:1d:d9:b4:f3:43:d7:58:63:
         43:0a:31:4b:24:cc:fe:cc:1d:19:20:bb:b1:18:f1:1d:be:de:
         0a:0b:a6:7c:fd:2c:35:35:cb:0e:8f:53:1e:54:ca:5d:5d:f4:
         d4:23:72:eb:a0:51:01:c2:38:77:4e:43:6e:9c:a3:08:45:a8:
         68:75:8b:3d:44:9a:37:71:4e:43:fc:a1:ee:75:55:b1:a4:f6:
         f9:3b:4a:47:fe:de:f0:24:71:27:d3:dd:82:71:a4:9e:f6:0b:
         5c:15:42:e4:e9:36:be:ab:51:18:60:50:29:99:24:62:45:8e:
         b9:9f:8b:a5:af:e2:02:b3:2c:7b:6f:94:63:97:e4:b3:78:77:
         eb:88:aa:f3:9f:12:02:69:d2:94:12:0a:67:c6:cf:5e:30:f4:
         ae:4a:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:29 2025 by rpki-client