Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa
File:                     3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (raw, json)
Hash identifier:          9mykslR77fZ7xC9MLu79f7z8bzLyXOic2iyPtYgwpU0=
Subject key identifier:   15:40:37:4F:E7:49:72:A1:A7:DD:30:CC:7D:64:67:55:51:CC:95:D7
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       4B293E24E75B2ED958254843A7262C91EA7AD965
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa
Signing time:             Thu 06 Mar 2025 00:33:05 +0000
ROA not before:           Thu 06 Mar 2025 00:28:05 +0000
ROA not after:            Thu 05 Mar 2026 00:33:05 +0000
asID:                     263924
IP address blocks:        168.232.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:3e:24:e7:5b:2e:d9:58:25:48:43:a7:26:2c:91:ea:7a:d9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Mar  6 00:28:05 2025 GMT
            Not After : Mar  5 00:33:05 2026 GMT
        Subject: CN=1540374FE74972A1A7DD30CC7D64675551CC95D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3f:ca:f0:4b:a9:ce:b1:a9:fc:d3:dd:07:ae:
                    76:db:2b:13:75:55:d3:ea:e7:8b:bd:70:c7:ac:8e:
                    b4:5d:e3:b4:cc:25:ee:0d:95:b2:8f:15:02:4d:95:
                    96:62:cc:83:f7:c0:01:21:03:41:b1:2c:33:15:bc:
                    c4:5e:88:75:52:15:93:1a:1c:3a:42:19:2f:f5:42:
                    1e:8c:10:c4:8b:04:ed:98:fc:17:37:e2:0f:88:8f:
                    ed:fb:d4:61:5e:4f:a1:ab:1e:5c:c6:46:a3:da:95:
                    4a:34:30:01:32:8c:cb:5d:4c:d0:66:1c:79:88:38:
                    2c:c0:16:96:27:f0:4f:fd:d6:99:3b:29:be:0f:a1:
                    7d:64:57:56:86:1d:2a:80:39:42:a0:d6:05:f3:01:
                    73:28:f4:9c:bb:92:fb:dc:0e:7f:37:6e:98:0c:d9:
                    7b:ad:10:af:47:32:5a:49:bd:45:15:5d:80:4f:82:
                    34:b2:f8:ab:b3:ef:9d:cf:e7:b6:2f:b2:c4:49:e2:
                    f2:a4:4d:9b:45:ab:35:77:09:f9:f8:b0:df:34:a0:
                    d0:62:92:fb:6d:b2:8e:1e:40:4c:d5:f9:0b:cb:88:
                    89:3f:2e:ca:95:37:ec:e4:06:b4:ac:7d:48:50:ac:
                    bd:0d:19:91:5f:9b:9e:e2:98:5e:cb:13:94:1c:58:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:40:37:4F:E7:49:72:A1:A7:DD:30:CC:7D:64:67:55:51:CC:95:D7
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:49:f5:3a:1f:8d:2f:83:08:12:eb:65:e7:f5:ad:26:d1:ee:
         7a:b0:99:65:9a:eb:9c:90:47:ba:c6:97:3c:13:58:a7:08:e5:
         38:43:46:af:5c:0f:d1:2c:51:f0:37:44:c7:a4:eb:97:c4:3f:
         bb:77:43:1d:59:08:93:52:0b:6f:24:39:82:49:82:61:7e:d8:
         34:d6:5b:22:1b:b9:30:8a:93:ee:d7:89:73:b0:b6:43:e4:fe:
         19:c4:00:74:88:23:00:75:40:16:6f:34:61:63:f7:6c:11:07:
         b5:70:e3:4a:6c:65:aa:47:df:d7:51:93:34:0b:55:bc:20:7d:
         f6:0c:dc:33:15:ce:30:79:91:9c:13:3f:e8:de:88:e1:4a:c3:
         45:01:8c:ef:f6:ee:92:36:63:8a:3a:46:c3:5a:f0:cc:fd:76:
         c5:b7:d9:21:1e:0b:de:95:db:36:b3:f5:ec:b5:3c:53:81:ed:
         02:2b:17:ad:fd:3e:ee:01:3c:2d:4b:12:17:a6:91:4e:8e:e1:
         41:d0:3d:22:e2:25:fc:60:d1:2c:08:67:76:99:e4:5b:6e:eb:
         ab:59:6c:cc:6d:10:e7:07:77:75:88:1a:6b:d8:af:a9:68:9e:
         7d:e1:0d:81:cf:58:ff:11:1c:f6:2a:9e:ab:aa:6f:dc:aa:48:
         74:a7:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:08:41 2025 by rpki-client