Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131322e302f32322d3332203d3e20323635323439.roa
File:                     3136382e302e3131322e302f32322d3332203d3e20323635323439.roa (raw, json)
Hash identifier:          24sr1G8hksR/s3Aijj1Hmg1TrzAGesWczD2dPjyVZDs=
Subject key identifier:   D1:9D:0D:77:3E:7A:17:E4:95:A9:F4:51:3F:7E:32:12:4F:5B:A3:2F
Certificate issuer:       /CN=7F41F2DF45380ED28EBC66827733788836A8955D
Certificate serial:       21EB3401A3E15A4087650B4C596624509533749D
Authority key identifier: 7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131322e302f32322d3332203d3e20323635323439.roa
Signing time:             Tue 10 Jun 2025 12:03:04 +0000
ROA not before:           Tue 10 Jun 2025 11:58:04 +0000
ROA not after:            Tue 09 Jun 2026 12:03:04 +0000
asID:                     265249
IP address blocks:        168.0.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl
                          rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:eb:34:01:a3:e1:5a:40:87:65:0b:4c:59:66:24:50:95:33:74:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F41F2DF45380ED28EBC66827733788836A8955D
        Validity
            Not Before: Jun 10 11:58:04 2025 GMT
            Not After : Jun  9 12:03:04 2026 GMT
        Subject: CN=D19D0D773E7A17E495A9F4513F7E32124F5BA32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:c9:b4:5c:7c:06:44:9d:5c:c3:29:72:01:
                    6f:ff:93:08:a6:f7:3b:fe:0b:3b:4e:5c:21:4e:95:
                    b1:e6:e1:78:2f:05:75:f4:7f:06:ad:6c:93:c0:b7:
                    bc:28:8a:8b:f0:c2:22:1e:4a:9d:27:35:73:b6:60:
                    d6:4d:c5:df:93:5a:54:ab:ae:69:45:af:21:04:78:
                    0c:6a:4a:b9:dd:f3:78:72:9d:1d:9c:f0:24:46:cd:
                    15:67:6b:30:91:2b:29:3f:8a:d5:11:c2:9e:e8:d9:
                    61:4b:07:3c:0c:49:eb:25:1b:28:df:65:17:59:96:
                    21:4d:e8:ed:94:23:28:fc:a5:99:3d:20:b2:df:90:
                    5f:e6:bc:69:68:65:e1:e2:6c:78:a9:64:34:08:5b:
                    69:d7:dd:ac:d3:48:e0:72:28:ae:68:c7:1b:ac:b2:
                    c3:72:03:b2:ec:c3:c6:fa:17:f8:15:d8:31:cd:a1:
                    ee:5d:a9:d0:7f:31:b3:c1:26:0d:3a:30:35:45:ed:
                    99:08:8f:e2:9e:66:20:5a:33:ea:40:9b:ea:23:77:
                    aa:35:cb:b3:17:23:c1:4f:8d:e7:21:3c:49:c5:c9:
                    30:51:c0:59:35:c5:78:cd:c2:3d:f2:f5:08:5b:69:
                    1a:f9:b8:3b:64:99:f1:b6:9a:d2:fa:90:65:2b:51:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:0D:77:3E:7A:17:E4:95:A9:F4:51:3F:7E:32:12:4F:5B:A3:2F
            X509v3 Authority Key Identifier:
                keyid:7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131322e302f32322d3332203d3e20323635323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:c1:e2:f8:4c:cd:80:d0:70:f8:7f:2b:72:28:da:5c:af:bd:
         50:85:38:14:41:ad:f3:7e:6e:49:5a:73:e5:ff:8a:2f:b4:d5:
         d5:ce:ee:b3:ec:86:99:b5:a0:d2:af:43:a7:8c:e6:f4:3f:51:
         2f:b2:2e:09:dd:24:8a:e5:4b:09:7b:58:a1:87:55:9b:b6:7f:
         bb:1e:76:ca:c5:76:de:62:4b:d4:a0:a1:34:c5:27:ba:49:09:
         cd:32:19:4f:59:db:ab:f3:9a:d8:00:3b:a5:2a:0a:46:4b:8c:
         43:3c:42:b1:41:7c:58:8d:f9:18:ac:91:09:a8:49:4f:dc:07:
         6d:b8:41:02:02:a9:30:7d:ae:a1:5f:e8:1d:5c:ae:55:6c:a4:
         ac:ef:1e:c3:1c:eb:d7:f4:1b:75:36:45:37:b0:1b:f5:b1:5d:
         3b:cd:f2:94:18:ea:c0:d4:59:fb:69:7f:ee:28:69:ea:8c:ae:
         f3:aa:9b:48:d7:00:28:aa:92:48:b7:ad:6e:9a:1f:1e:23:e1:
         6e:18:f6:50:0f:21:3e:a1:a1:66:35:25:76:8a:0b:8c:71:c2:
         f1:91:b3:78:11:24:88:48:e5:e2:4e:e7:af:79:69:17:9d:fb:
         67:6c:5d:9e:8c:b0:f6:55:57:e9:10:df:c1:37:2f:31:c8:13:
         16:69:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:53:51 2025 by rpki-client