Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
File:                     3136382e3232382e33362e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier:          I1YJwHvTc52I4GWueImK5k6B0l2rJz18pk7aLGv6mXw=
Subject key identifier:   50:1D:6C:D5:5E:E1:7A:B9:5F:CE:BE:8B:6E:3C:43:49:B7:9F:04:72
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       0BF3DDD71694B58969DAAEE831356C0D78001F72
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
Signing time:             Wed 30 Apr 2025 18:28:52 +0000
ROA not before:           Wed 30 Apr 2025 18:23:52 +0000
ROA not after:            Wed 29 Apr 2026 18:28:52 +0000
asID:                     61794
IP address blocks:        168.228.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f3:dd:d7:16:94:b5:89:69:da:ae:e8:31:35:6c:0d:78:00:1f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr 30 18:23:52 2025 GMT
            Not After : Apr 29 18:28:52 2026 GMT
        Subject: CN=501D6CD55EE17AB95FCEBE8B6E3C4349B79F0472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:bf:9f:53:d3:69:8c:eb:3c:d5:04:05:9e:
                    ba:14:ef:ec:11:61:5b:1c:0f:75:2e:7d:2a:4e:ad:
                    2e:88:cf:0b:7a:6a:b0:12:ac:78:4c:ce:8b:c4:4c:
                    5c:37:f7:11:b5:a9:2e:99:71:e1:92:32:a5:78:24:
                    fe:6b:64:d1:5d:93:c2:15:d3:34:f0:22:40:52:1d:
                    ea:a0:a1:cb:9e:e9:85:7e:71:51:a4:c4:9d:2d:a6:
                    61:65:77:70:f0:c5:51:88:d6:3c:e8:74:e5:c2:b3:
                    a6:a1:78:4c:9b:3e:2a:15:95:d1:80:8c:81:67:ce:
                    7f:0e:61:8c:25:b3:3a:5a:33:44:c7:0e:ca:f9:ef:
                    ea:b9:f1:0f:6f:a9:16:a9:aa:79:0d:6f:c6:69:f1:
                    d9:f2:70:c8:32:8f:70:f1:2e:57:20:21:6f:3c:57:
                    99:4a:c4:43:03:f0:46:16:f7:0e:16:aa:74:0a:14:
                    4e:a1:dd:d3:2f:f4:12:ec:0e:9b:50:59:75:e5:5e:
                    95:7e:3c:1f:03:2f:c1:23:53:4a:2a:ec:61:41:f1:
                    00:5e:8a:d8:9b:8e:72:b5:8d:60:42:90:75:88:f9:
                    f4:36:31:95:f4:c7:80:64:05:f0:7b:6a:af:22:71:
                    aa:e2:ae:9e:d6:4c:36:37:d6:bd:ba:99:81:37:53:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1D:6C:D5:5E:E1:7A:B9:5F:CE:BE:8B:6E:3C:43:49:B7:9F:04:72
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:17:8f:6e:75:2e:bf:98:32:47:5e:6e:03:82:fb:e7:2c:
         fa:9b:18:e0:88:52:65:c6:39:49:50:55:88:fc:1c:22:e9:81:
         63:c3:f0:9b:c3:6a:10:b7:7a:0a:3c:af:c3:1d:df:46:51:22:
         55:f6:bf:4a:ac:39:34:06:72:5d:eb:37:bf:e3:c5:a0:12:d0:
         79:82:6b:ce:b8:35:87:3d:21:c0:43:2c:9c:dc:5c:77:a8:18:
         f4:c6:39:05:4f:02:40:a2:f9:1e:a7:e7:30:ae:e2:15:22:56:
         a7:5a:c3:8f:31:48:16:79:6f:b7:46:0f:2f:3d:ac:28:d3:02:
         c1:00:96:b4:de:42:b9:11:bd:a7:3e:de:3c:2b:d1:d6:cc:c6:
         91:43:c8:5d:34:63:7b:0d:f5:2e:76:85:50:8c:95:b9:0b:f9:
         2c:11:c7:90:96:2f:d0:9f:25:07:45:aa:a6:ba:2b:e5:47:0a:
         bd:75:c4:dd:c4:5c:5b:0c:97:63:2f:4a:bf:0e:01:11:70:72:
         5d:67:58:5d:65:38:6a:da:ae:7c:06:ad:bc:de:53:ef:e3:ef:
         70:11:cf:5d:c9:7d:f2:c8:95:69:12:7b:63:70:61:df:75:12:
         bf:56:be:45:c1:6e:b5:06:c8:f3:7e:43:39:2c:6b:25:21:96:
         d2:20:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:01:07 2025 by rpki-client