Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
File:                     3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (raw, json)
Hash identifier:          Jbqm2cYTFZqnVwhYv9MtcLfLescp6uZnHERY1nohyOQ=
Subject key identifier:   E5:32:D9:0F:4D:B8:4C:21:4B:81:72:8D:2A:76:51:F5:11:EE:3F:36
Certificate issuer:       /CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42
Certificate serial:       09BB0F59809BA0402B123D89D209D9457BE39096
Authority key identifier: 6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
Signing time:             Wed 16 Apr 2025 10:33:40 +0000
ROA not before:           Wed 16 Apr 2025 10:28:40 +0000
ROA not after:            Wed 15 Apr 2026 10:33:40 +0000
asID:                     266156
IP address blocks:        192.144.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl
                          rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 09:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bb:0f:59:80:9b:a0:40:2b:12:3d:89:d2:09:d9:45:7b:e3:90:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42
        Validity
            Not Before: Apr 16 10:28:40 2025 GMT
            Not After : Apr 15 10:33:40 2026 GMT
        Subject: CN=E532D90F4DB84C214B81728D2A7651F511EE3F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:ac:00:0a:da:c5:50:52:59:2f:14:2e:00:
                    f2:91:48:1b:94:bd:ae:e3:19:2e:ba:84:d8:0a:c9:
                    e5:6d:8e:ab:e1:bf:c9:25:70:85:99:6a:cc:af:d6:
                    15:6c:a9:44:b9:c5:79:a9:b4:31:55:9a:e6:b4:ee:
                    c0:81:fa:79:86:30:5e:bf:a1:4f:79:0e:0d:0e:af:
                    23:f9:ac:fb:79:68:e9:47:4b:9a:dc:d2:85:46:7c:
                    85:30:b4:f3:58:00:9c:f6:ac:69:1f:70:68:5c:68:
                    2d:dc:fd:20:ba:15:1c:78:0b:66:f4:b4:38:d3:3d:
                    4c:36:a1:eb:57:fe:50:3e:8d:bf:d3:5f:90:2d:81:
                    e4:59:c2:b2:56:da:65:ad:d9:4d:96:a7:a3:3a:6b:
                    5f:16:5d:a5:50:a6:9c:98:9c:f2:11:c5:de:20:b0:
                    10:35:ac:31:28:cf:e5:1c:30:1c:0d:89:c3:97:8e:
                    e2:a9:7b:67:cc:a9:00:76:68:96:35:50:b6:10:37:
                    52:cb:82:85:b8:73:b4:49:80:ca:2f:bb:47:04:10:
                    62:51:ba:0a:c1:94:4f:40:02:cc:16:09:3f:bc:8e:
                    97:fb:f8:a1:5a:36:91:b2:a1:ed:ad:7f:a3:9b:24:
                    48:fa:91:48:5f:a0:bc:dc:d0:a3:0d:a3:89:b3:5d:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:D9:0F:4D:B8:4C:21:4B:81:72:8D:2A:76:51:F5:11:EE:3F:36
            X509v3 Authority Key Identifier:
                keyid:6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:da:69:2a:1e:e1:77:aa:a2:7c:bf:ae:1b:cd:44:cf:5d:0e:
         98:5e:2a:4e:1f:a4:d6:3c:d2:92:15:79:3b:e1:29:8b:84:8a:
         74:22:b0:0b:47:ad:94:a7:aa:e0:d8:44:6e:2d:36:e7:11:e2:
         f3:97:6b:bd:a9:2a:21:b6:43:8e:47:ee:05:06:d2:b7:8a:a2:
         ff:84:82:4e:d7:bb:04:4e:54:6a:0d:ce:c8:30:ed:3f:26:65:
         c6:b3:a9:3d:30:a4:06:23:87:c7:34:af:7a:8a:92:ee:89:1d:
         67:d1:ed:28:e9:6a:26:5d:c6:4f:b4:c7:a8:83:b9:f4:6d:ba:
         fa:be:12:d9:81:40:2f:1e:d9:45:04:92:bb:e0:e1:5f:76:0b:
         61:9a:e0:42:a2:9b:bf:cd:be:78:ef:28:8c:07:bf:7a:11:8d:
         6c:f3:a6:9b:da:7b:d1:e3:ae:ef:26:a4:29:aa:f9:48:10:3e:
         9c:e8:2b:a5:80:7b:ac:f6:cd:8a:a0:ba:7f:57:ec:cf:13:0f:
         9d:14:bc:c6:3e:b2:b3:da:d0:43:81:7c:e6:36:eb:ea:8c:80:
         82:b5:ea:b6:a9:63:1b:3d:ae:4e:de:55:9d:9c:62:47:1d:55:
         53:d7:0f:48:9c:36:55:5e:f8:ae:5f:9e:e5:8b:eb:c9:ae:95:
         06:10:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:30:59 2025 by rpki-client