Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32342d3234203d3e20323638373836.roa
File:                     3136382e3139362e3230342e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier:          j/gCWcFTEgWnFv6JhpIHtnD7ydTJqY20llgp8jXrOXw=
Subject key identifier:   FB:66:0E:27:23:5B:94:BB:11:0C:37:26:9B:80:CE:4A:62:96:E2:D4
Certificate issuer:       /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial:       6D4AA0C44BC7E0BFA0775A4591139DE8887FEA13
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32342d3234203d3e20323638373836.roa
Signing time:             Fri 28 Feb 2025 12:52:09 +0000
ROA not before:           Fri 28 Feb 2025 12:47:09 +0000
ROA not after:            Fri 27 Feb 2026 12:52:09 +0000
asID:                     268786
IP address blocks:        168.196.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4a:a0:c4:4b:c7:e0:bf:a0:77:5a:45:91:13:9d:e8:88:7f:ea:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
        Validity
            Not Before: Feb 28 12:47:09 2025 GMT
            Not After : Feb 27 12:52:09 2026 GMT
        Subject: CN=FB660E27235B94BB110C37269B80CE4A6296E2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:5b:ca:7c:92:97:b1:6d:b7:97:d3:a1:af:
                    2f:79:90:eb:66:24:34:80:7c:b7:64:a1:cd:cc:46:
                    27:0a:66:48:17:e2:5c:ba:7f:d6:3b:d5:23:26:c5:
                    4e:38:e0:b7:ae:ab:2c:e0:9f:a5:00:4f:65:94:b2:
                    40:26:e3:63:46:fc:23:c8:a6:69:cc:33:ee:08:c1:
                    40:61:b9:5f:2e:6b:a6:82:79:66:c3:97:b7:39:d9:
                    b1:bc:00:be:3c:0d:84:51:5e:f0:60:1d:a4:15:f7:
                    01:b8:c2:be:2f:39:ac:9c:42:c9:b1:d2:d5:4e:76:
                    16:d4:e4:dd:2c:c0:26:5d:f8:29:d7:47:81:4e:a4:
                    c3:05:9d:81:01:8c:28:2a:7c:64:aa:a6:7f:e7:7a:
                    bd:69:2b:9b:53:c6:e7:26:7d:54:9c:7b:09:32:81:
                    8a:3a:8f:f0:06:ad:4e:85:ed:29:65:e4:91:3a:e6:
                    b5:c0:cc:38:28:f9:a9:67:16:25:f7:3c:e4:d6:42:
                    67:f8:4c:a0:fc:e5:8f:34:6a:12:85:74:24:97:7b:
                    fc:20:13:d5:9c:d1:fa:74:43:de:29:2d:81:84:35:
                    63:ce:81:7c:2d:e0:71:99:88:ae:3b:63:7d:3c:d3:
                    86:f7:34:71:33:af:ec:a7:b0:6d:ac:f5:9c:fb:fb:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:66:0E:27:23:5B:94:BB:11:0C:37:26:9B:80:CE:4A:62:96:E2:D4
            X509v3 Authority Key Identifier:
                keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32342d3234203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e4:9e:d1:91:bb:50:8f:c9:52:cc:70:4e:4b:a9:22:41:79:
         ec:e9:91:54:b3:6d:5a:74:37:f6:0d:3a:dd:94:13:a2:2e:27:
         89:cd:d1:ac:34:7e:df:00:76:af:11:d0:30:a9:96:4d:86:19:
         ce:d7:22:f1:49:8f:b3:1b:6f:71:85:3c:47:1f:54:b6:96:ae:
         7f:8d:ad:09:03:6c:ef:14:6f:76:87:30:ac:0d:da:1e:df:cc:
         69:2c:74:ae:85:96:ad:c4:7f:0e:ea:e9:91:23:52:5f:ab:b1:
         30:a3:a7:b2:ec:f1:0e:70:9b:77:63:78:07:f1:e7:b1:c3:dc:
         e6:a3:8b:f7:e8:e4:9a:6c:ab:fe:ff:d8:a9:91:ee:bb:49:e8:
         c5:e3:83:d1:82:9c:a7:90:b2:52:3c:fe:88:51:6e:1b:4f:c6:
         55:b1:58:b4:3b:6c:1d:22:9a:1b:97:86:ca:c0:97:2a:87:56:
         73:78:40:a8:c9:f0:2b:b3:f5:bf:93:5f:9d:36:ec:ca:f8:cf:
         69:13:8f:fc:c7:9a:ee:be:9c:bf:78:a2:e3:fe:ca:f1:b6:ae:
         4c:f4:fe:a3:24:6b:80:e3:2c:8c:99:1b:04:44:19:2a:43:70:
         81:96:12:aa:f7:2e:2d:6f:91:62:47:0d:97:64:1e:cb:3a:ce:
         29:ce:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:19:24 2025 by rpki-client