Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32332d3233203d3e20323638373836.roa
File:                     3136382e3139362e3230362e302f32332d3233203d3e20323638373836.roa (raw, json)
Hash identifier:          a53jt+tJKkfGbtO2bhGRoFHaLLyxvfgqj4FdpYmgjPw=
Subject key identifier:   53:ED:41:A1:85:1B:FE:B2:BB:F1:37:87:B7:FA:B2:67:69:93:0B:06
Certificate issuer:       /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial:       6C2D4D03F343848F55CAC91C5BA3D55ED239D0E7
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32332d3233203d3e20323638373836.roa
Signing time:             Fri 28 Feb 2025 12:52:08 +0000
ROA not before:           Fri 28 Feb 2025 12:47:08 +0000
ROA not after:            Fri 27 Feb 2026 12:52:08 +0000
asID:                     268786
IP address blocks:        168.196.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2d:4d:03:f3:43:84:8f:55:ca:c9:1c:5b:a3:d5:5e:d2:39:d0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
        Validity
            Not Before: Feb 28 12:47:08 2025 GMT
            Not After : Feb 27 12:52:08 2026 GMT
        Subject: CN=53ED41A1851BFEB2BBF13787B7FAB26769930B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:f8:d4:b0:b1:00:40:25:35:89:48:11:66:
                    a6:97:33:ef:66:29:90:03:9e:cd:2f:a9:5a:aa:7e:
                    21:1d:f6:09:d7:29:69:a6:be:8f:e8:9c:9a:ed:52:
                    4a:56:cd:ac:79:d7:6c:3e:3c:e5:d0:d1:c4:45:3e:
                    b9:6a:3c:1c:05:0b:2c:96:eb:d1:bc:f0:61:07:cc:
                    22:72:ec:07:f5:76:e9:7f:68:76:b6:fb:0d:46:cf:
                    0d:47:48:b6:4c:3f:29:6a:03:9c:ec:aa:c0:7e:50:
                    4f:df:0c:38:46:02:6d:ee:2f:95:e8:61:d7:45:2f:
                    f8:40:53:a6:31:cc:95:7e:6a:60:34:d9:0d:fb:08:
                    72:85:c5:ad:b4:ac:4c:fc:87:d9:77:11:76:53:f1:
                    4f:8c:c7:33:21:a0:6e:86:cc:61:59:41:69:27:b2:
                    47:0d:b1:2b:e9:95:b6:4d:73:14:f9:26:bf:5c:f5:
                    77:0e:d1:13:b0:ca:af:ea:5f:b3:4b:11:e6:fc:2e:
                    a9:11:23:5c:9e:f7:60:78:cb:57:9a:8a:e3:88:e2:
                    fe:49:44:ec:f4:50:c8:f5:c8:52:47:07:da:d9:ff:
                    91:a0:b9:2f:28:0d:33:27:c4:58:9d:2a:bf:99:08:
                    8e:b3:15:d5:80:dc:3f:6a:4b:fc:cf:ba:81:74:c2:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:41:A1:85:1B:FE:B2:BB:F1:37:87:B7:FA:B2:67:69:93:0B:06
            X509v3 Authority Key Identifier:
                keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32332d3233203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:d3:db:cc:7e:91:9a:75:b1:1b:bb:0c:9e:bd:2c:4c:89:43:
         9d:10:6a:9b:ab:42:40:37:80:69:2c:b8:fc:3d:3c:95:f7:3a:
         b5:80:f5:79:da:b2:37:b4:4a:20:55:31:26:85:9d:8c:32:70:
         7f:90:d4:6c:2c:dd:3f:4e:45:f1:3a:34:84:9d:ec:86:5c:80:
         b8:aa:a5:dd:09:cf:ce:7c:a1:79:d1:81:19:1e:57:0c:77:cf:
         ae:37:0e:0e:ae:ab:59:d2:88:da:d6:94:46:50:e8:5b:4d:04:
         6b:32:7e:aa:db:ff:f3:25:6f:d4:63:a6:b7:3b:6c:9b:dc:ba:
         95:c1:40:f9:ad:6f:23:1e:73:c0:e8:49:ff:8c:ea:07:71:4b:
         74:9e:19:8d:33:16:d3:22:93:89:bb:d0:d8:8f:bd:0e:35:1e:
         75:32:b4:54:ec:33:0b:c8:0a:45:78:7d:f5:ba:14:3c:b9:e5:
         6a:1b:20:0d:20:bd:b7:d7:d6:25:d8:16:a1:a9:a6:90:f3:46:
         fc:4a:ec:72:3f:dc:1f:58:a6:e9:02:e1:f8:55:f4:4c:d4:a7:
         e4:70:63:58:a7:f7:c3:b7:62:28:0c:4a:bf:a7:f9:58:78:aa:
         5e:aa:a6:cb:d8:52:69:8f:a0:0a:26:62:ed:e4:99:92:88:fb:
         3f:9f:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:36:39 2025 by rpki-client