Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa
File:                     3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          NmYTq8vIAivTlsoW3qaqKfib+1fSA8yd46yIT1dbIco=
Subject key identifier:   44:EC:EE:1E:97:35:A9:1A:AB:93:39:0E:D9:B3:E9:15:2B:C0:13:37
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       61C17E342DAD70E4EBC91EEC04B4BABBD5B8E76C
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:36 +0000
ROA not before:           Wed 22 Jan 2025 21:39:36 +0000
ROA not after:            Wed 21 Jan 2026 21:44:36 +0000
asID:                     264927
IP address blocks:        168.228.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl
                          rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c1:7e:34:2d:ad:70:e4:eb:c9:1e:ec:04:b4:ba:bb:d5:b8:e7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:36 2025 GMT
            Not After : Jan 21 21:44:36 2026 GMT
        Subject: CN=44ECEE1E9735A91AAB93390ED9B3E9152BC01337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:2a:df:11:53:7b:4a:17:e7:f2:fc:f5:0f:
                    83:90:29:22:56:43:32:91:8f:b5:dc:e4:3a:39:0b:
                    6b:2c:1b:24:69:78:87:31:7b:97:af:ff:b1:69:a5:
                    e2:ba:ac:cb:7a:65:0a:e0:db:64:ea:91:89:1d:73:
                    c7:d2:8f:0b:1c:c7:02:4f:81:14:c8:3a:af:c6:93:
                    5a:28:e7:9f:8b:b3:37:e2:14:28:f2:51:4e:ca:5b:
                    ae:df:52:64:4b:71:ad:89:3a:5a:29:af:3f:21:68:
                    6f:ca:98:7c:cd:af:df:53:9e:49:4c:00:31:19:d0:
                    de:87:34:11:43:2b:df:41:d5:c7:ce:7c:e5:47:12:
                    97:75:d2:27:fd:3f:27:ec:fb:3b:38:e1:5c:a5:b6:
                    33:9f:d7:d3:24:e3:38:c5:33:b7:77:56:0b:e0:04:
                    85:bf:0e:3a:2c:32:d0:e3:44:4f:fc:77:98:40:a1:
                    f0:7c:5a:13:6c:80:c1:80:75:f9:35:93:f6:ec:33:
                    1b:9c:7a:7e:fe:18:68:8f:9a:d0:91:1b:18:76:31:
                    94:09:73:97:51:56:00:30:7e:02:79:fb:d5:a3:32:
                    c2:f2:aa:6f:04:9e:e4:ab:01:67:93:5e:57:c0:4e:
                    5a:88:ad:35:dd:b9:e3:61:d5:c4:7e:4f:00:f9:61:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:EE:1E:97:35:A9:1A:AB:93:39:0E:D9:B3:E9:15:2B:C0:13:37
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138362e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:56:55:1c:dc:1c:7d:35:87:fd:29:50:ed:0e:60:5d:4e:b2:
         de:35:35:c8:99:1d:ca:6e:e0:0d:8b:38:64:c4:9e:ae:8b:cd:
         fb:d5:9d:1e:06:12:da:71:33:fb:d1:37:ae:67:7e:44:5e:c5:
         0b:d6:a1:97:0a:f8:12:85:9b:26:e9:2a:6c:a5:e5:fa:fb:24:
         81:10:fb:53:62:44:46:ec:86:53:b3:f8:1d:e5:ea:7f:94:be:
         ce:64:9b:b8:1a:17:fe:a1:e0:0e:35:41:29:ec:12:44:34:58:
         ed:40:5f:fd:e0:ea:9b:c1:0c:29:c8:a9:89:b2:e1:0e:55:66:
         0f:7b:2c:55:a6:29:27:d9:f7:51:ff:e5:59:72:b3:02:02:ac:
         91:ab:f1:b3:f1:1d:df:d6:4b:ea:75:e2:59:85:64:60:77:49:
         4f:f3:a9:d6:de:56:f1:15:39:38:9e:8e:07:3d:12:87:60:26:
         f7:09:65:ab:cc:00:53:23:3e:1d:77:4b:d5:ed:c8:26:34:55:
         d1:ea:8f:6c:0f:03:79:a5:57:1c:34:a0:79:29:2a:56:97:80:
         06:ed:3d:14:65:78:58:84:15:ca:07:65:af:1d:5a:5b:f3:80:
         41:00:9f:d7:7d:09:83:47:d4:2c:0f:fa:5f:d8:c0:04:77:42:
         ee:ce:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:23:09 2025 by rpki-client