Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa
File:                     3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa (raw, json)
Hash identifier:          yHnZHrEbecqedZJexHRRRfHeNlN5ITusm4L3e4o/eLA=
Subject key identifier:   07:34:D3:F3:7B:6E:2D:A0:02:B7:4F:9B:4E:7A:12:4C:7D:4E:69:82
Certificate issuer:       /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial:       3D67148C22D1325D86C3AB3452FCFE6F046035D9
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa
Signing time:             Tue 04 Feb 2025 11:51:52 +0000
ROA not before:           Tue 04 Feb 2025 11:46:52 +0000
ROA not after:            Tue 03 Feb 2026 11:51:52 +0000
asID:                     264948
IP address blocks:        168.232.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:14:8c:22:d1:32:5d:86:c3:ab:34:52:fc:fe:6f:04:60:35:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
        Validity
            Not Before: Feb  4 11:46:52 2025 GMT
            Not After : Feb  3 11:51:52 2026 GMT
        Subject: CN=0734D3F37B6E2DA002B74F9B4E7A124C7D4E6982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:e8:f6:83:56:9a:66:34:03:ac:07:d6:11:
                    7b:e4:75:8e:c4:bf:5d:03:a1:77:ba:34:2c:02:f2:
                    3a:bf:79:b7:52:a5:b3:6c:7e:89:44:1e:0b:5e:c2:
                    34:ec:74:78:db:73:b9:9c:d7:30:cc:80:4c:91:4c:
                    a5:b7:fa:d3:f9:0c:c3:e6:03:eb:fa:53:2c:28:79:
                    2e:1f:6a:c1:73:00:dc:c6:8a:aa:a7:0c:04:25:9a:
                    16:8e:f3:b6:12:c9:b6:79:b0:56:b3:e8:b9:89:09:
                    d2:98:7f:bb:2b:d9:d2:98:ec:f6:07:79:3e:61:ce:
                    7d:c4:00:77:f9:31:a1:33:38:f5:0c:11:5b:9f:9c:
                    a8:9d:ad:12:0e:2e:d0:97:0c:a8:a2:e7:d3:28:f5:
                    33:c5:0f:18:91:58:a9:04:d9:84:2e:5e:cc:f3:83:
                    e9:d1:11:08:23:af:1e:0b:ab:94:cb:2b:42:cb:c0:
                    ad:90:90:03:1b:01:13:b1:41:07:3a:73:32:0e:05:
                    b9:e3:20:fe:01:01:30:75:13:bb:5a:4b:df:1e:63:
                    d9:fd:c9:05:7b:ef:35:97:3b:bc:fa:7c:31:34:be:
                    6c:e5:6c:dd:75:b6:a4:a4:f8:eb:4c:67:2a:c4:68:
                    b1:22:17:7f:76:de:7c:0a:17:72:c4:7a:92:d4:93:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:D3:F3:7B:6E:2D:A0:02:B7:4F:9B:4E:7A:12:4C:7D:4E:69:82
            X509v3 Authority Key Identifier:
                keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:63:bd:fb:d3:5c:a5:14:42:f8:0e:83:2a:0b:f8:2a:4f:
         ba:c5:f3:5b:65:fd:cc:e3:1f:d8:92:29:27:8e:ce:5d:6b:66:
         5d:7b:80:29:28:f1:3a:08:f2:79:ff:40:0f:22:47:3d:2a:30:
         0f:a9:8b:4e:62:d6:f6:10:65:ae:37:db:fe:ff:f5:a9:92:0b:
         1d:23:80:26:7e:1b:68:51:81:ac:f0:d2:ba:5c:70:d8:de:2f:
         e6:ad:74:a9:a8:26:b1:32:fa:6d:76:68:f0:eb:67:41:a9:2d:
         41:6e:2d:40:e6:63:9e:48:88:57:42:85:c2:bb:dc:25:33:e9:
         12:f1:24:a5:fa:06:5e:1a:de:9f:f1:87:cc:fd:91:37:27:0f:
         3b:0f:2a:7c:cf:9c:43:b6:68:d7:d0:ae:b4:3c:80:88:76:c5:
         d9:71:96:f0:17:8d:04:93:74:0b:21:bd:26:6f:8f:b5:59:60:
         42:0e:31:78:dd:83:2c:08:2d:19:82:6a:76:89:fe:89:81:f4:
         65:6c:88:0a:c7:73:1a:5e:e2:88:13:f7:8c:0d:aa:73:9d:7b:
         ab:ff:45:f1:3b:ed:5e:c0:80:69:b1:5c:e4:4a:df:bb:0a:0f:
         72:2b:69:b7:4f:d3:de:8c:d2:11:41:d9:d4:5b:2c:85:0d:53:
         99:4a:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:41:15 2025 by rpki-client