Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
File:                     3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa (raw, json)
Hash identifier:          mBU+3p7/FRtrSZYwl40UzJfLhpwNBIRp9bEtIDdx3nU=
Subject key identifier:   8F:0A:74:89:36:AD:AF:0C:1E:B1:4A:BB:E2:67:37:64:1D:B2:A3:01
Certificate issuer:       /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial:       1306A100D3C4DBA6A4DC6350A44FE43538130DF2
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
Signing time:             Thu 03 Apr 2025 23:11:31 +0000
ROA not before:           Thu 03 Apr 2025 23:06:31 +0000
ROA not after:            Thu 02 Apr 2026 23:11:31 +0000
asID:                     264918
IP address blocks:        168.228.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl
                          rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:06:a1:00:d3:c4:db:a6:a4:dc:63:50:a4:4f:e4:35:38:13:0d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
        Validity
            Not Before: Apr  3 23:06:31 2025 GMT
            Not After : Apr  2 23:11:31 2026 GMT
        Subject: CN=8F0A748936ADAF0C1EB14ABBE26737641DB2A301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:c2:bc:a6:76:0f:0b:42:1e:23:ca:1f:52:
                    b7:d5:01:17:17:04:40:e5:30:7f:36:a1:23:06:5e:
                    95:ef:78:c6:6f:36:13:c9:26:91:97:ea:23:1e:f4:
                    02:f5:90:b3:d4:3f:54:55:a2:85:08:c0:f3:7d:86:
                    c3:c6:a5:fc:18:a2:4a:3b:13:53:ec:43:e8:ed:3e:
                    f2:59:f8:27:43:43:99:d9:cd:ed:18:4e:c5:32:f5:
                    1d:d8:32:6b:02:80:f5:57:0a:26:0f:06:3d:f8:90:
                    2c:b1:04:a9:8d:79:12:24:7f:af:80:e4:62:bc:d7:
                    7a:fc:b9:1a:b0:c6:7d:47:6a:fb:2d:d0:c5:9e:1d:
                    92:e4:9c:57:48:58:6a:32:08:33:7e:64:b6:a0:8e:
                    d3:f6:ce:13:6a:59:8b:85:34:09:eb:fd:cd:45:f5:
                    0a:23:5e:d6:b7:dc:d4:67:18:f9:22:05:9a:4b:69:
                    9e:62:bf:88:6c:6b:c5:b6:60:8d:17:6a:01:19:18:
                    f9:95:68:9e:d4:28:b9:21:0f:52:f5:ae:be:3a:9d:
                    a9:62:e9:52:76:c9:5a:47:15:d7:dd:e6:cb:86:c1:
                    ad:26:da:65:bb:09:e3:a8:2f:46:cd:df:d1:bd:da:
                    78:2d:1e:72:82:62:7c:de:1d:a8:e7:0c:96:b5:23:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0A:74:89:36:AD:AF:0C:1E:B1:4A:BB:E2:67:37:64:1D:B2:A3:01
            X509v3 Authority Key Identifier:
                keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:6e:af:0c:8b:2e:12:2c:c3:8b:f5:12:5c:91:ed:f8:87:22:
         ab:7b:2d:30:4d:9b:bf:6c:ff:d3:9a:76:b0:a8:55:13:cb:24:
         ec:37:28:5a:5c:ba:ad:79:ef:96:78:12:5f:bc:19:ff:45:93:
         a0:c8:ca:94:47:ac:07:7e:83:c7:de:54:e9:4b:a4:b6:95:60:
         3a:9b:29:e0:3f:76:e0:f7:a4:7c:13:14:b3:68:60:31:bc:84:
         ed:bd:ac:cd:54:0f:9c:26:0f:19:72:82:a3:a4:63:9a:76:56:
         c5:e6:a8:86:76:75:58:aa:24:f5:ca:1a:74:f8:88:06:47:65:
         38:a8:cf:ba:6c:d3:38:b6:b6:aa:4b:58:97:e2:45:83:1d:6a:
         20:9d:ce:ca:81:bb:c5:e7:02:b2:80:be:fb:b8:97:df:df:86:
         b9:f2:80:de:36:8f:cf:5b:c4:b4:4c:55:25:06:dc:4e:82:f2:
         44:32:8a:d4:0e:02:72:da:0d:f9:22:49:1f:82:aa:a5:9b:18:
         fa:48:87:5a:99:66:e3:9c:b3:1d:17:49:71:2f:b7:a6:6f:39:
         96:38:b0:06:55:96:ca:e4:f2:e9:8f:cf:91:9f:99:66:aa:3f:
         22:04:14:8d:52:e3:ef:7d:4b:ef:0e:18:f3:80:96:66:71:92:
         54:82:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:54:01 2025 by rpki-client