Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa
File:                     3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          up8uOWZykbwW/bSjztSgSKcDbPNnblg4Why3B8ilkJc=
Subject key identifier:   59:66:98:5D:3D:1D:DF:AD:3D:6B:32:7B:F9:1B:CC:64:1F:A6:DA:20
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       38256573064FCEDBFDF88964492D71D2E8613077
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:10 +0000
ROA not before:           Thu 06 Mar 2025 04:37:10 +0000
ROA not after:            Thu 05 Mar 2026 04:42:10 +0000
asID:                     28210
IP address blocks:        168.228.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:65:73:06:4f:ce:db:fd:f8:89:64:49:2d:71:d2:e8:61:30:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:10 2025 GMT
            Not After : Mar  5 04:42:10 2026 GMT
        Subject: CN=5966985D3D1DDFAD3D6B327BF91BCC641FA6DA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:f2:cf:4b:e9:03:dc:98:80:7e:d2:7a:0b:
                    37:34:6e:aa:ad:f3:7e:c5:99:9e:66:cc:fa:66:49:
                    c5:d0:37:eb:d6:83:bc:e7:b4:dc:83:ac:70:38:ea:
                    25:c6:ee:1e:d0:c0:54:31:c7:1c:8b:21:10:a6:8b:
                    d7:5e:e6:98:78:6e:aa:52:5e:37:49:03:bc:3d:c5:
                    3d:9e:59:c7:a4:7a:bd:92:72:d1:21:13:cc:74:09:
                    6e:30:66:88:e8:52:44:47:a0:d9:7c:44:ff:cd:b5:
                    d4:f8:a0:7f:a5:9c:e1:65:bf:0a:f5:eb:1d:5c:de:
                    19:26:94:6c:ae:db:b9:cd:ad:30:70:a9:1d:1c:a5:
                    a7:a0:57:3d:a8:ce:90:fc:d0:4f:4b:44:78:22:51:
                    7f:bf:27:1e:9d:ad:4e:2e:bf:99:ea:6a:50:75:14:
                    30:5e:d7:ed:f6:75:01:e8:37:a2:10:bb:82:4b:06:
                    de:7b:9a:da:09:df:ff:39:c7:f7:da:fa:a8:4a:29:
                    8d:09:c1:3e:ed:30:e7:24:3c:f0:45:85:ce:ac:dd:
                    d5:26:8e:19:c7:b8:84:67:10:6d:49:d2:8f:b2:db:
                    c6:b5:58:89:f2:be:b6:49:15:20:b8:e1:e4:7f:79:
                    cc:57:52:16:e3:be:1d:49:96:2d:84:8b:5a:33:2e:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:98:5D:3D:1D:DF:AD:3D:6B:32:7B:F9:1B:CC:64:1F:A6:DA:20
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3136382e3232382e3230302e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:09:69:59:bd:96:4b:47:77:ae:ce:07:50:83:bc:b9:7b:fb:
         5e:32:9b:68:67:35:76:0d:bd:74:79:c1:d9:0b:5f:26:26:d0:
         b9:e1:a0:c4:55:f1:f1:69:4c:d2:51:ff:76:d1:c5:5f:36:ab:
         64:66:df:2d:c3:97:f7:d1:e0:1b:7b:52:98:2f:38:d0:ce:b2:
         7f:ce:41:a7:db:5a:82:4d:d2:99:56:a1:92:a1:21:a3:f5:37:
         fc:46:4c:8b:7c:73:fa:64:0e:65:09:4b:b9:28:ff:d0:af:a4:
         6b:af:6b:f1:b2:0f:1f:0b:93:48:d9:da:79:91:20:b2:c8:2e:
         3b:3c:63:d7:6b:32:d8:7a:32:3c:c5:50:4f:0a:0e:21:9b:ae:
         ea:f5:0a:70:07:ba:a5:aa:dd:3f:22:54:27:f0:9b:65:64:85:
         df:f5:43:e6:42:8f:56:9d:94:10:9d:75:96:84:8d:b6:f2:51:
         57:5b:6d:af:2d:da:7c:02:b7:7e:96:77:55:be:95:59:b6:f2:
         91:00:d8:b9:e1:ec:37:bc:66:b9:9c:67:a6:4a:72:60:35:fc:
         55:10:2b:5b:9e:a6:fd:6c:10:f1:d2:10:76:81:61:17:05:43:
         92:2f:a2:cb:07:53:cd:89:6d:69:b4:f8:96:96:c7:14:03:85:
         8b:42:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:47 2025 by rpki-client