Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa
File:                     3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          Sq0v6GkWFIivyvuMqgqF9xzOvFIw3EQtvD6WfmdSWfQ=
Subject key identifier:   C2:CD:F7:1D:97:A9:02:C3:30:74:58:20:E3:06:6F:FB:92:E5:3C:70
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       66A62019621E9DFE7A65B91BF171A0E04B24507A
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:37 +0000
ROA not before:           Wed 22 Jan 2025 21:39:37 +0000
ROA not after:            Wed 21 Jan 2026 21:44:37 +0000
asID:                     264927
IP address blocks:        168.228.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl
                          rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a6:20:19:62:1e:9d:fe:7a:65:b9:1b:f1:71:a0:e0:4b:24:50:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:37 2025 GMT
            Not After : Jan 21 21:44:37 2026 GMT
        Subject: CN=C2CDF71D97A902C330745820E3066FFB92E53C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:93:a5:0a:5f:3a:7a:24:0b:79:cb:28:1d:
                    32:f1:8e:03:3c:d0:7a:d1:62:e7:f2:80:8b:a5:c3:
                    9b:42:03:23:27:d9:33:2a:e5:de:fa:77:a0:79:e0:
                    e2:67:56:ee:0d:bb:0a:87:4f:98:cb:ca:63:c4:08:
                    8d:f5:22:ff:9b:db:41:9b:c3:50:40:be:04:de:04:
                    dc:b1:bb:e1:cb:2b:30:c9:54:c1:6c:1d:11:e0:af:
                    7a:0f:b2:85:98:1f:5a:2b:86:35:fb:b2:06:4f:a5:
                    4f:01:eb:58:ce:16:c1:46:24:a9:b5:b1:d0:d0:ae:
                    6e:88:26:77:fa:56:fc:50:57:01:75:4a:38:07:6b:
                    ad:ab:d5:59:e5:10:1e:54:bf:94:f8:51:c4:ce:31:
                    2b:ea:2e:ee:c6:01:48:30:16:00:25:cb:0d:7f:a8:
                    e3:92:fb:6e:4b:bb:87:9a:c5:58:92:b5:82:2b:92:
                    9a:e8:a0:69:e3:2b:7d:ab:87:6a:5b:4b:fd:45:fc:
                    e0:3e:2a:22:f2:b0:d4:01:ba:ce:b9:4a:23:2f:c6:
                    a0:87:82:46:c2:e1:a6:45:37:f3:c5:37:96:87:a1:
                    d1:0e:46:f4:68:e5:bc:ef:09:66:71:45:ca:6b:94:
                    ed:b4:ef:a7:3f:32:ae:04:59:8d:ae:35:f3:c2:0b:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CD:F7:1D:97:A9:02:C3:30:74:58:20:E3:06:6F:FB:92:E5:3C:70
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:db:63:72:47:dd:2d:f5:a3:32:6f:f6:76:f2:27:8d:de:97:
         54:ae:13:7d:25:18:0c:5d:60:24:0f:66:2b:a9:c4:a4:ad:05:
         f2:a1:9a:73:cf:7a:ee:0b:6f:fe:9d:88:39:28:c1:e3:e2:ff:
         e4:73:99:20:ea:d7:20:ba:7b:72:14:a9:a6:d9:81:de:16:04:
         b1:a4:2f:8f:66:7f:8e:ab:9d:74:e3:af:62:02:24:99:91:3f:
         3c:3b:ef:a4:cb:8d:6c:b5:71:5e:d6:69:3e:88:77:ff:55:3b:
         66:ea:b5:61:87:96:c5:0f:1e:f6:f7:53:6b:d5:f5:f7:a2:cb:
         39:c2:9d:36:e7:c3:b0:b7:dd:cf:58:1c:0b:c6:2b:94:a1:42:
         6e:41:13:3b:9b:7c:eb:d1:64:4e:11:06:e4:43:73:87:30:42:
         f3:fe:ac:d2:a0:94:f1:57:58:68:11:65:36:6e:45:b1:cd:97:
         c0:e6:e5:b9:ed:a5:1c:ab:02:94:f7:ee:42:f2:4e:16:40:0d:
         39:b2:37:27:7a:1d:91:25:4e:c0:ea:ba:ef:6a:74:03:bf:6f:
         94:51:f6:be:18:58:d4:9b:08:d2:66:38:3f:59:bc:50:cd:07:
         c4:c0:14:5b:7d:67:99:20:86:47:42:e6:fe:9f:32:20:c7:7e:
         04:ad:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:48 2025 by rpki-client