Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/3136382e3139362e3135322e302f32322d3234203d3e20323635343631.roa
File:                     3136382e3139362e3135322e302f32322d3234203d3e20323635343631.roa (raw, json)
Hash identifier:          0qOfZWAMfpSjFaeOY7YQO/t7L5P4SDLya2R/adNJsM8=
Subject key identifier:   75:C9:E2:46:65:63:1C:04:9A:38:6A:4C:FC:FB:F3:4E:1F:4C:9F:82
Certificate issuer:       /CN=0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B
Certificate serial:       721152E3F231AE46AFC225D01BADC8F7FE5C287B
Authority key identifier: 08:37:B5:32:3E:CC:A5:9A:C2:E4:D7:DC:C6:83:A9:59:2A:5E:CB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/3136382e3139362e3135322e302f32322d3234203d3e20323635343631.roa
Signing time:             Thu 06 Mar 2025 18:46:00 +0000
ROA not before:           Thu 06 Mar 2025 18:41:00 +0000
ROA not after:            Thu 05 Mar 2026 18:46:00 +0000
asID:                     265461
IP address blocks:        168.196.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:11:52:e3:f2:31:ae:46:af:c2:25:d0:1b:ad:c8:f7:fe:5c:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B
        Validity
            Not Before: Mar  6 18:41:00 2025 GMT
            Not After : Mar  5 18:46:00 2026 GMT
        Subject: CN=75C9E24665631C049A386A4CFCFBF34E1F4C9F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:aa:b6:68:b3:f6:c6:6d:03:2f:a1:6e:a2:
                    22:c8:ab:11:17:a6:bb:d0:26:2d:c4:8f:e2:b0:77:
                    d6:ab:fe:a5:2d:29:01:d4:e1:2d:ae:0c:db:4b:70:
                    85:66:aa:2d:4d:d1:71:ab:a9:1e:36:1e:bc:2b:4f:
                    d6:22:88:e2:ca:bc:36:fa:21:35:c3:08:ac:66:30:
                    c8:30:25:20:50:50:f1:52:70:01:03:60:e3:5c:35:
                    ef:15:10:81:02:6d:db:b0:86:02:c3:d3:b7:d1:95:
                    4d:1c:50:43:d4:cf:9b:62:e6:af:53:9b:31:c3:f4:
                    10:b2:90:76:8e:2f:7c:41:ab:2a:c5:44:ab:59:a0:
                    7e:e6:4a:d9:af:b2:c4:76:30:28:ab:4d:72:84:cf:
                    e8:1c:db:b1:b7:c9:a4:03:34:a1:2f:7e:06:89:f1:
                    38:22:b8:8f:dc:ff:e9:89:b0:32:7a:3b:d4:c4:0f:
                    6f:a2:e5:99:0c:25:5e:4e:8b:80:e0:94:ee:11:35:
                    b4:49:c3:aa:48:4a:f5:5a:09:39:96:2b:c2:e6:a9:
                    00:9e:0b:ba:4e:1b:a7:8f:4a:5c:a7:96:3c:66:bd:
                    5e:cf:f0:9b:db:1e:89:37:74:e3:3e:9e:e2:23:bf:
                    31:32:26:aa:92:5c:27:b0:e3:31:42:03:16:cc:bf:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C9:E2:46:65:63:1C:04:9A:38:6A:4C:FC:FB:F3:4E:1F:4C:9F:82
            X509v3 Authority Key Identifier:
                keyid:08:37:B5:32:3E:CC:A5:9A:C2:E4:D7:DC:C6:83:A9:59:2A:5E:CB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/3136382e3139362e3135322e302f32322d3234203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:00:dd:13:33:2d:9e:f9:0f:ff:32:4a:4a:93:6f:7a:7e:
         91:59:d0:79:28:0f:a6:81:ae:c1:57:39:74:c4:10:a8:e8:9a:
         c7:22:7e:b0:08:fd:e0:f1:64:02:52:ab:e1:a7:d8:f4:ab:d4:
         a5:c7:ea:81:e3:57:be:08:8e:87:3b:89:ba:1e:20:f0:5d:5b:
         9c:cd:77:89:08:63:af:0d:e0:8a:8c:84:9c:64:76:d4:9d:5c:
         17:33:d9:56:fd:74:37:b8:d4:59:a4:4e:fa:41:f8:bb:2e:27:
         35:76:41:39:73:42:c3:81:c3:76:6e:24:c8:1b:a5:30:df:d3:
         50:c3:2f:48:f0:83:cc:8b:a5:04:f2:d8:8d:c6:05:17:72:d2:
         c4:47:f0:8e:66:d7:33:c2:af:9d:6f:99:c8:50:99:e1:48:0c:
         d1:ba:4e:2d:21:8f:7c:2b:78:8f:39:4b:fa:31:71:25:81:db:
         9a:5d:2b:c6:50:54:3a:a8:0f:27:01:40:e4:ea:67:15:7b:3d:
         ad:0b:43:e4:a7:0f:41:84:cc:c3:ed:a3:9c:94:90:ce:11:05:
         d8:3d:11:2f:63:08:8e:69:76:dc:6d:44:3e:de:11:02:d2:dd:
         b8:73:bf:50:01:e6:ae:b7:6c:d4:05:29:c4:0c:de:e2:9d:16:
         c4:90:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:26:39 2025 by rpki-client