Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3136382e302e342e302f32322d3234203d3e203238313436.roa
File:                     3136382e302e342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          28HW1FKTydgZFZX6gOpACTqy7gzucbOeHrMiHcBrfjw=
Subject key identifier:   32:A6:C0:ED:EE:CB:52:51:09:AD:30:18:02:18:30:0F:DE:57:67:4E
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       706D4444182F4E1AA28634D0EE82484B7AF9B327
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3136382e302e342e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:50:53 +0000
ROA not before:           Mon 12 May 2025 12:45:53 +0000
ROA not after:            Mon 11 May 2026 12:50:53 +0000
asID:                     28146
IP address blocks:        168.0.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:44:44:18:2f:4e:1a:a2:86:34:d0:ee:82:48:4b:7a:f9:b3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:45:53 2025 GMT
            Not After : May 11 12:50:53 2026 GMT
        Subject: CN=32A6C0EDEECB525109AD30180218300FDE57674E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:fc:24:54:b2:83:e0:fd:fe:63:ed:cc:6d:
                    c5:3f:da:94:7a:aa:55:d7:ee:33:40:d0:a6:83:73:
                    e3:39:a7:20:8a:e6:d6:58:06:7f:3b:ac:98:4a:eb:
                    f0:cb:8e:8f:3f:e1:90:f7:00:9d:f2:bf:ef:15:34:
                    62:6f:2c:06:1b:40:e2:50:b7:e1:41:ed:0a:45:ca:
                    fe:83:89:02:91:da:5b:be:cc:08:da:41:05:4f:e0:
                    62:77:b8:c7:6e:dd:ba:fa:83:39:1d:79:d7:d3:8d:
                    7e:35:cf:59:3c:34:e0:ba:14:3d:1a:b7:f4:48:93:
                    0f:95:99:f0:d9:2e:e8:7d:60:6a:28:40:a3:3d:d4:
                    24:bd:d8:c8:a9:d4:13:94:2f:09:dd:5f:32:ff:8f:
                    84:59:d8:06:5b:a7:3d:83:af:0b:6f:1e:ed:6b:a4:
                    b3:d3:f6:99:ac:89:22:11:dc:c7:32:aa:56:6d:83:
                    ec:33:b7:b7:b1:db:f0:f6:8f:ae:0c:e8:45:ce:b3:
                    c8:70:93:4e:c4:9a:3c:f4:2b:7d:bf:80:4a:fa:42:
                    a2:5b:d1:bc:ff:63:c3:a1:c5:e0:0c:d9:93:59:89:
                    60:0c:3b:fd:15:a7:3b:09:92:c2:69:ff:d0:22:ae:
                    4c:05:9d:c2:6d:22:4c:2e:2e:84:84:e7:e7:12:1d:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A6:C0:ED:EE:CB:52:51:09:AD:30:18:02:18:30:0F:DE:57:67:4E
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3136382e302e342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:17:9a:a9:84:75:4a:a5:70:79:55:f1:63:02:e7:95:c0:
         81:da:5f:21:16:30:1c:bb:8f:dc:8e:d1:8e:5d:3d:01:d7:a6:
         22:b2:0a:6e:81:f8:7c:a8:02:62:9a:04:be:20:3e:4f:d2:58:
         44:53:a6:57:86:91:b6:80:d6:30:f0:a5:1e:f0:dc:14:04:70:
         02:47:88:a0:75:cf:76:c5:c1:a7:4b:5f:bc:90:fe:76:0d:3b:
         67:c5:a1:61:c2:59:65:b4:41:ce:1d:5b:47:91:7c:b9:58:da:
         ed:a1:ea:56:bf:bb:63:63:9e:a1:ba:a3:02:c2:c6:1a:1d:44:
         3a:f9:40:3a:18:24:12:96:68:8b:64:d8:6e:ba:f7:c3:46:5a:
         20:d6:56:35:b4:78:db:0a:dc:8e:26:be:54:12:56:13:63:42:
         ba:58:c4:30:6b:69:9c:3b:80:15:fe:27:d2:38:87:a3:e2:65:
         20:d4:45:bf:e3:7f:5f:f6:ad:af:54:10:ab:92:37:29:2b:3d:
         d7:5a:75:c6:dc:78:76:53:ba:96:a1:1b:53:1f:52:fa:f9:f7:
         06:b4:bd:cf:8f:4d:81:07:ec:17:78:41:30:cf:15:19:ba:e6:
         71:d6:75:22:d1:34:e5:09:04:82:ab:02:31:4c:4d:57:e4:83:
         a7:0a:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:49 2025 by rpki-client