Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
File:                     3136382e302e322e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier:          +E+NC1y1e8e0K/e4so432GkxK4QlZpEFghMjbmBnu/4=
Subject key identifier:   91:81:6F:68:35:D6:BA:EE:9E:DB:86:DA:A3:45:AF:4B:E5:E5:23:2B
Certificate issuer:       /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial:       1DAB5B09E7D5234612EE42BD5C95E9D6FBDD98F1
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
Signing time:             Thu 03 Apr 2025 23:13:15 +0000
ROA not before:           Thu 03 Apr 2025 23:08:15 +0000
ROA not after:            Thu 02 Apr 2026 23:13:15 +0000
asID:                     265240
IP address blocks:        168.0.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl
                          rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ab:5b:09:e7:d5:23:46:12:ee:42:bd:5c:95:e9:d6:fb:dd:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Validity
            Not Before: Apr  3 23:08:15 2025 GMT
            Not After : Apr  2 23:13:15 2026 GMT
        Subject: CN=91816F6835D6BAEE9EDB86DAA345AF4BE5E5232B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0e:ff:6a:52:e1:89:d1:7f:ed:6e:00:9f:3a:
                    fc:45:e1:9f:ba:fe:c2:25:7d:c9:58:b9:81:93:40:
                    79:50:81:c1:3b:0b:58:ef:85:46:27:c0:64:43:2d:
                    c4:2a:19:dc:bc:76:de:80:91:7a:32:07:0d:0d:5e:
                    c0:78:dd:06:13:65:2b:d6:35:29:30:e3:03:a3:9d:
                    a3:9f:5f:df:3d:45:61:88:2e:99:9c:df:1d:fe:3c:
                    51:36:c3:2f:e7:a0:b1:28:49:b1:71:3e:be:f4:90:
                    57:6c:ef:11:c6:05:55:ac:59:ac:30:fe:de:c1:b7:
                    f3:ad:16:54:16:a5:c5:a3:89:72:48:a5:f0:70:9b:
                    60:62:6e:dc:08:c6:72:f1:46:a3:15:7d:07:ce:3a:
                    4e:59:dc:fb:d8:4c:7c:18:cd:84:b2:cd:2f:e4:30:
                    6c:5f:4d:aa:e2:50:8c:75:f5:e9:b1:34:38:c8:a5:
                    b7:d5:90:55:97:a4:82:93:43:55:f1:c3:e3:93:07:
                    6d:48:af:fb:02:58:58:a6:a1:68:16:d1:5f:8e:e4:
                    02:01:83:01:09:b9:d0:e0:b8:9f:dc:6c:09:ad:64:
                    31:2d:1d:19:08:cd:e0:54:66:ce:1d:51:55:0c:d4:
                    3f:5f:ae:02:9f:d0:4a:1a:78:91:a5:18:84:58:a6:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:81:6F:68:35:D6:BA:EE:9E:DB:86:DA:A3:45:AF:4B:E5:E5:23:2B
            X509v3 Authority Key Identifier:
                keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:2b:92:79:e8:71:bc:27:d7:f4:b1:9a:60:26:43:bc:4c:f5:
         64:4b:85:fb:db:90:39:9f:59:e8:25:0b:cc:e9:2e:32:99:73:
         82:70:76:bc:b1:69:5b:f4:d9:ed:15:c2:ba:6f:52:54:79:85:
         30:04:36:79:12:76:05:a7:04:41:4f:0c:78:86:70:6c:1b:90:
         85:70:5e:1b:a6:4e:50:6c:b6:63:1d:e5:f0:7e:4e:a1:61:9f:
         30:b3:62:00:50:d9:a5:aa:cc:57:9d:7a:a1:25:81:90:20:52:
         87:a8:60:4b:4e:70:b1:a5:66:fc:21:1b:ba:ed:d1:91:44:fa:
         12:fe:20:9f:33:49:bc:75:07:75:05:7f:55:3b:fe:78:98:92:
         2e:c6:a4:f3:9a:b5:9b:eb:bd:e8:cd:7a:27:c2:22:cd:fe:b0:
         00:60:95:b3:d4:c1:57:12:4e:4a:a8:86:5a:ae:5b:e9:8e:75:
         dc:2a:6d:81:16:ad:ee:fa:9e:72:e8:32:77:1e:ce:03:3e:66:
         34:93:e9:43:bb:2e:f0:3f:86:16:f3:63:eb:34:2a:d4:eb:d1:
         f8:d4:b3:1b:91:51:7a:98:30:a4:d5:01:e0:db:3b:8b:be:12:
         f4:09:83:ed:3d:bb:66:0f:38:74:54:83:f6:76:fd:82:1f:cd:
         94:65:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:55:04 2025 by rpki-client