Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa
File:                     3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa (raw, json)
Hash identifier:          6jjrc9ANoxOYfekdt2gt3T8n3TKcgTFRf6bm6lOugPk=
Subject key identifier:   55:61:DD:F7:D1:69:2C:AF:AD:84:F9:70:9F:83:E9:BB:97:49:11:78
Certificate issuer:       /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
Certificate serial:       1B85F82987DDD9BF5AAC10F081B1F64EA7397FAD
Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa
Signing time:             Wed 05 Mar 2025 22:29:08 +0000
ROA not before:           Wed 05 Mar 2025 22:24:08 +0000
ROA not after:            Wed 04 Mar 2026 22:29:08 +0000
asID:                     263860
IP address blocks:        168.227.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl
                          rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:85:f8:29:87:dd:d9:bf:5a:ac:10:f0:81:b1:f6:4e:a7:39:7f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
        Validity
            Not Before: Mar  5 22:24:08 2025 GMT
            Not After : Mar  4 22:29:08 2026 GMT
        Subject: CN=5561DDF7D1692CAFAD84F9709F83E9BB97491178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:9b:cc:9f:ab:58:1d:69:c8:36:03:90:77:
                    be:80:03:47:27:30:67:8c:e5:bf:1b:46:6a:24:88:
                    3b:b9:00:c0:69:93:43:b7:e9:7f:6a:21:6f:fa:49:
                    7f:11:5a:1c:6d:9c:fb:d5:cf:9f:65:23:d3:36:7f:
                    18:59:f4:e0:78:0e:af:df:45:a0:6c:1e:3d:ad:16:
                    02:8a:95:99:93:78:ff:00:99:0a:06:2a:f4:c2:f5:
                    c5:d7:2b:b7:76:3a:bb:ef:dc:fa:2a:81:92:d9:03:
                    45:c8:a9:11:bf:6d:ab:af:9a:ed:88:9d:49:ae:11:
                    c2:c3:f0:ec:44:b2:e9:d2:06:95:c0:96:ef:e0:50:
                    21:79:d4:dd:94:fb:1f:c1:d7:64:2b:ba:a2:bb:48:
                    60:b5:66:c1:6e:25:1f:3e:cf:c5:46:0c:51:5b:0c:
                    6b:6e:c0:70:12:d4:d3:02:a9:87:d6:51:16:a8:9a:
                    9f:20:be:4e:8f:32:77:f9:98:32:36:50:be:e1:65:
                    5a:e9:06:61:fc:96:a3:1d:56:df:94:75:39:8d:d8:
                    fa:45:80:5b:b0:03:a3:75:34:15:e4:4d:77:e0:23:
                    c9:86:fb:fc:bf:21:a4:ac:7f:a3:bf:cc:4a:32:69:
                    76:ce:7e:b4:76:ad:12:85:b2:15:31:a7:fd:4d:22:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:61:DD:F7:D1:69:2C:AF:AD:84:F9:70:9F:83:E9:BB:97:49:11:78
            X509v3 Authority Key Identifier:
                keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:56:79:74:3c:fa:5e:e3:7d:55:79:d4:c7:39:33:0e:3d:6d:
         f4:06:83:9e:fc:f6:ce:1b:ec:a0:7f:02:ac:4e:6b:73:99:da:
         49:2a:8d:7c:53:6a:b4:71:d3:16:2a:4b:b1:70:08:f3:c4:c6:
         20:d8:34:2a:41:a4:a5:1c:61:ac:35:fa:22:ce:e4:6d:ee:47:
         27:f0:c7:39:6e:5c:eb:2a:e5:95:81:be:b7:f5:fe:69:fa:f3:
         bd:8d:f9:b9:15:39:11:3b:9c:fe:5a:7b:d2:35:2f:41:5f:fb:
         1f:7f:7f:30:5f:c1:f4:2f:bb:6a:3a:87:ef:e9:0a:43:83:2a:
         2d:d0:00:81:3c:32:7e:ae:ba:b9:f0:66:92:98:5b:08:cb:ad:
         8b:39:d9:9a:f5:70:d8:92:bc:48:64:0c:ab:4b:46:d4:b7:1c:
         a9:a2:de:6e:bc:f0:18:ed:dc:c2:02:fb:fc:d6:02:69:a0:ac:
         52:b1:1b:4b:ae:71:d4:f9:6f:75:77:79:d8:9e:c0:6e:80:6e:
         01:a2:f7:90:e8:b6:72:2c:37:a5:ca:2d:d3:8f:e7:2c:e8:0a:
         23:bc:3f:60:92:0e:c3:ca:5d:8f:f9:6f:e9:a2:d6:bb:e6:bb:
         16:15:07:ac:e7:1e:05:d6:ba:64:cb:bf:0d:ec:8f:c0:1a:2a:
         18:6f:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:13 2025 by rpki-client