Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131352e302f32342d3234203d3e20323637353539.roa
File:                     3136382e302e3131352e302f32342d3234203d3e20323637353539.roa (raw, json)
Hash identifier:          2qjhG6KmCQkfsX+ctIgiMnzxMs18JhFhpWhYiO0AJY0=
Subject key identifier:   F9:10:8C:E2:3B:1F:B2:95:5C:91:01:FD:1C:12:AF:AB:9A:70:19:E9
Certificate issuer:       /CN=7F41F2DF45380ED28EBC66827733788836A8955D
Certificate serial:       16BFCA21F94F37660E5303E60230DB2CBE29D37B
Authority key identifier: 7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131352e302f32342d3234203d3e20323637353539.roa
Signing time:             Tue 10 Jun 2025 12:02:20 +0000
ROA not before:           Tue 10 Jun 2025 11:57:20 +0000
ROA not after:            Tue 09 Jun 2026 12:02:20 +0000
asID:                     267559
IP address blocks:        168.0.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl
                          rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:ca:21:f9:4f:37:66:0e:53:03:e6:02:30:db:2c:be:29:d3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F41F2DF45380ED28EBC66827733788836A8955D
        Validity
            Not Before: Jun 10 11:57:20 2025 GMT
            Not After : Jun  9 12:02:20 2026 GMT
        Subject: CN=F9108CE23B1FB2955C9101FD1C12AFAB9A7019E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bf:30:54:65:1f:a2:75:5d:58:cd:56:a4:15:
                    1e:84:9e:79:2c:a8:51:cc:83:36:ee:23:ec:79:32:
                    0a:b9:eb:86:40:92:b1:c5:d3:5f:ad:af:70:50:be:
                    7f:80:b5:1d:de:e3:3d:fd:d7:01:d1:5c:70:7a:80:
                    ef:92:8e:a3:ca:a7:b5:be:ae:76:44:6e:29:ce:76:
                    f3:e5:72:9d:9d:da:3b:b4:1d:15:e4:f4:b1:ee:f8:
                    3f:f0:44:68:9c:dd:4c:8b:f2:1e:e2:84:17:8a:0c:
                    ed:31:fd:f0:8c:15:ec:9f:ad:e1:38:c2:35:09:d6:
                    83:fd:12:4e:1e:86:e5:e2:af:a5:58:e3:c1:aa:27:
                    17:ac:11:22:1f:0e:b2:85:5b:8f:04:dd:37:dd:58:
                    ce:70:64:0a:11:8e:5c:33:a4:19:ba:b0:2a:ef:ce:
                    67:b9:cc:63:89:26:32:41:bc:37:66:93:3c:2b:d1:
                    b7:c1:e1:6f:9e:71:f8:8a:a0:93:2a:61:22:0c:19:
                    59:60:e0:86:66:91:2f:f3:f6:a8:4a:0b:32:9a:30:
                    1b:1b:98:47:24:b4:56:ef:c6:01:be:b6:95:3f:b8:
                    80:bd:61:c4:77:09:92:ea:2a:20:a6:9c:67:e6:02:
                    08:87:e2:a7:d8:d1:3e:90:9f:c2:79:18:56:55:50:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:10:8C:E2:3B:1F:B2:95:5C:91:01:FD:1C:12:AF:AB:9A:70:19:E9
            X509v3 Authority Key Identifier:
                keyid:7F:41:F2:DF:45:38:0E:D2:8E:BC:66:82:77:33:78:88:36:A8:95:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/7F41F2DF45380ED28EBC66827733788836A8955D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F41F2DF45380ED28EBC66827733788836A8955D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWZHz8piVu8zevQxGnestGbreTQPMDNquKihUHqiqSkC/0/3136382e302e3131352e302f32342d3234203d3e20323637353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:a1:ed:d4:c0:4a:43:76:8d:74:24:1b:84:f6:87:ac:7e:
         d3:72:7e:ef:fe:6e:a6:42:91:be:aa:25:7b:ea:a8:05:78:60:
         0a:6c:f5:6d:0f:4b:a0:eb:ed:04:73:3e:cc:66:53:40:91:99:
         6d:1d:fa:28:33:06:a5:cf:bc:69:91:3f:37:b9:73:a7:37:e5:
         cb:40:04:18:1c:5a:90:e2:79:4e:b6:2c:84:ab:ce:76:a2:70:
         1b:08:10:a7:03:7d:30:e9:15:05:fe:dd:a1:58:aa:6f:a6:21:
         cf:60:b5:3a:69:91:39:76:c2:22:63:d4:52:76:6e:b2:6b:cc:
         73:92:2a:98:60:81:cd:bb:a8:0d:59:ac:c0:cb:1e:f7:69:a2:
         b4:4d:f3:b8:3e:b5:7d:f8:5e:ea:ec:c5:28:a5:b5:97:a7:18:
         19:53:7d:5b:3b:9c:c7:e0:47:24:75:a7:56:e1:d3:ca:0b:b9:
         5e:b6:52:7b:2a:53:02:2d:c1:76:5d:1e:ce:4b:95:3e:71:15:
         b6:ba:1f:9c:13:b5:a1:ce:b1:7f:26:8d:28:77:de:06:1b:56:
         78:6b:b5:13:a6:86:0c:70:d5:6f:94:d1:2e:0b:2c:ad:f3:9e:
         42:96:a7:0f:e7:ae:78:a2:17:4f:42:59:52:de:a6:cd:cf:3b:
         b7:8f:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:53:45 2025 by rpki-client