Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa
File:                     3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=
Subject key identifier:   D7:4E:93:18:41:E6:65:F4:51:C5:78:AF:66:88:4A:42:A2:0B:0C:1C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       4ED89FD8C2768D67F5C04BCBC35DB907EDC9592A
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 04 Feb 2025 18:25:00 +0000
ROA not before:           Tue 04 Feb 2025 18:20:00 +0000
ROA not after:            Tue 03 Feb 2026 18:25:00 +0000
asID:                     262908
IP address blocks:        168.196.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d8:9f:d8:c2:76:8d:67:f5:c0:4b:cb:c3:5d:b9:07:ed:c9:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Feb  4 18:20:00 2025 GMT
            Not After : Feb  3 18:25:00 2026 GMT
        Subject: CN=D74E931841E665F451C578AF66884A42A20B0C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:3f:d1:d4:d6:cb:46:a3:bb:8a:7b:a7:75:
                    d8:b4:51:3d:ae:17:4f:e7:8a:88:58:cb:9d:17:62:
                    c6:c1:8a:02:39:02:c6:a2:25:91:17:dd:ff:e9:e2:
                    e6:95:dc:f9:21:9c:04:f3:7c:47:72:2f:9b:39:2f:
                    66:88:14:a8:d4:a5:24:2b:7e:ca:a1:4c:2e:01:82:
                    d7:63:f2:eb:d3:a6:3c:f2:6d:ff:b1:20:10:9c:d5:
                    fe:34:da:df:1d:a3:52:04:c3:5e:c6:1b:eb:5d:92:
                    f6:f9:5b:e5:7a:34:90:74:22:d0:1f:34:eb:da:ab:
                    c1:98:65:07:6b:29:0b:96:58:d5:b9:72:bd:e7:78:
                    26:01:1a:f0:b6:b8:81:00:cb:a2:6d:e4:d4:54:52:
                    1a:53:7a:2f:ce:8e:5f:36:92:b9:9f:db:ae:21:2e:
                    ff:e4:68:4a:d6:25:1b:b2:bc:b5:52:46:08:72:c2:
                    f4:79:87:36:39:17:91:0d:d5:f8:aa:7b:4d:3a:eb:
                    49:2f:68:50:d7:4d:d1:e2:40:4d:0e:6e:f7:55:7f:
                    3b:d9:b9:10:66:9b:fd:dc:c5:7c:fb:04:8c:77:15:
                    77:00:1e:de:95:ec:96:df:b0:db:77:50:49:36:1a:
                    d4:86:6a:18:86:57:51:3c:c7:27:89:fc:2b:79:07:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:93:18:41:E6:65:F4:51:C5:78:AF:66:88:4A:42:A2:0B:0C:1C
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:7d:d2:fa:97:b1:30:c6:4e:3b:88:ed:49:9c:d5:c4:d4:
         99:1c:76:84:80:e7:56:c7:b0:cc:1f:d9:8e:e1:03:29:35:b8:
         c9:ec:43:68:59:6a:a8:39:5e:4b:46:8c:bd:27:71:1a:a4:c0:
         fd:aa:51:9d:ba:05:ec:61:70:89:b2:46:b6:01:75:c4:34:05:
         86:7c:53:43:ba:91:7a:19:8d:de:91:33:92:35:63:ce:60:c7:
         f2:84:d4:69:f1:d6:7a:4b:76:bb:65:0f:ea:df:3e:b3:1f:28:
         b9:fa:d2:d6:7f:9d:a7:fc:a4:2e:ec:70:b8:cb:c2:f4:8b:a0:
         5e:d4:ca:53:23:64:01:c2:1f:7b:5f:3c:ef:65:bc:60:c5:79:
         d2:66:c9:72:4d:ad:12:08:75:c9:b7:f3:d8:03:b3:c5:c2:12:
         a6:d7:c6:9f:9d:ca:52:96:55:5f:d9:8a:65:1c:64:27:42:f6:
         ba:0f:c6:20:a6:94:a6:95:38:5c:9e:1f:d8:d3:b5:0a:4d:c6:
         e3:08:5a:09:b9:02:2f:5f:a1:48:d6:4f:26:e2:a8:21:83:92:
         25:c4:ae:39:fc:e1:0b:a8:be:1e:8b:d2:d9:a6:3a:f1:c0:eb:
         0d:e4:32:4f:d3:c1:c2:73:6d:1a:48:61:6d:4a:53:d0:08:b0:
         36:6e:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:45:52 2025 by rpki-client