Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa
File:                     3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          9JASxHFiATJqbmlKUd9Ny5yIJcLSpH0PT9R50oX2f3s=
Subject key identifier:   52:CD:69:C5:14:2E:98:94:4F:B5:D0:5C:9D:F5:DC:5E:E4:05:BC:0E
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       1D0AB01A89D7540FCB1D90D9FB3E26BC9AC36598
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa
Signing time:             Thu 20 Mar 2025 20:21:20 +0000
ROA not before:           Thu 20 Mar 2025 20:16:20 +0000
ROA not after:            Thu 19 Mar 2026 20:21:20 +0000
asID:                     268192
IP address blocks:        168.181.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl
                          rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:b0:1a:89:d7:54:0f:cb:1d:90:d9:fb:3e:26:bc:9a:c3:65:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Mar 20 20:16:20 2025 GMT
            Not After : Mar 19 20:21:20 2026 GMT
        Subject: CN=52CD69C5142E98944FB5D05C9DF5DC5EE405BC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:53:f6:94:72:5e:b8:dd:ea:32:2f:9f:d0:
                    40:33:0b:c8:c5:2f:b7:47:ae:74:e8:18:31:5f:64:
                    00:dd:c8:bc:d7:06:af:3a:68:36:d7:8e:ab:3d:24:
                    ed:7d:26:67:98:25:12:fc:fb:3c:25:66:0d:80:71:
                    f3:d5:dc:ce:f7:44:47:38:eb:99:2f:5c:a5:a8:d1:
                    cb:1c:d5:84:e6:92:7b:bd:fe:00:68:a0:25:1e:eb:
                    85:df:25:1c:c3:62:44:bc:66:06:12:3c:29:e3:51:
                    9d:05:b4:89:5d:0d:9a:72:0c:83:4c:88:4f:87:f2:
                    0f:2c:8e:2c:ba:fb:1b:ee:b7:9e:86:cb:a4:2b:5c:
                    3e:0f:6f:72:25:85:73:80:7a:e7:b7:7f:bb:54:32:
                    19:39:84:ed:9e:22:b5:50:ad:a8:77:a7:1b:06:01:
                    7d:6d:0a:73:25:12:61:5f:af:db:4e:ec:fd:9c:54:
                    10:57:eb:0d:cc:a1:70:10:69:9a:8d:8e:51:5f:99:
                    36:78:34:cf:7a:93:10:df:1f:45:5b:70:14:e5:d8:
                    2a:df:6d:51:c0:eb:51:b7:a8:7b:2a:d9:17:60:a9:
                    9b:d7:59:48:23:a9:96:61:1b:cb:37:ff:3e:19:ff:
                    3e:84:18:ad:8f:63:d4:ff:6a:9c:e6:d0:74:db:78:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CD:69:C5:14:2E:98:94:4F:B5:D0:5C:9D:F5:DC:5E:E4:05:BC:0E
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:87:be:b0:53:b2:5d:89:2a:18:22:e4:6d:00:d5:b3:e4:
         70:87:ec:50:a8:f7:26:48:f6:ef:fe:7b:bd:cc:79:26:0f:d5:
         c2:7d:e7:4a:31:e9:55:ae:38:9f:81:27:d6:a9:f2:92:9d:c9:
         25:a2:56:bf:7f:ff:dc:68:62:b6:fa:a6:06:c9:9e:b7:3b:2b:
         ba:df:3f:d4:c5:76:ef:17:7f:2b:58:69:c0:ed:49:78:84:c5:
         66:0d:f3:cc:3e:d4:e4:b6:34:e0:9e:5d:24:20:8b:b6:90:4f:
         b9:07:e9:24:dc:a6:d3:f0:1c:c2:93:69:e4:df:41:28:92:1e:
         99:bd:39:91:46:bd:05:5e:c6:0a:e8:ff:4e:a9:d4:7a:25:d6:
         a1:9a:7d:28:30:e7:ee:d2:87:aa:21:d3:27:1a:86:3d:2a:0c:
         e8:82:23:48:4b:8f:3c:d7:4b:02:07:9d:df:dc:7d:6e:e7:b3:
         76:a3:f9:65:83:55:b0:00:ef:60:36:bb:e7:aa:57:5e:2a:ec:
         36:25:d8:31:44:d2:ae:7b:92:fd:6a:96:4b:ac:b5:4d:56:44:
         bf:48:74:c7:a1:33:2d:81:18:a6:84:52:36:6b:bd:b4:93:ec:
         7a:c2:89:62:99:d8:17:c2:92:64:0e:10:c8:5e:88:23:72:ee:
         3b:fd:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:49 2025 by rpki-client