Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          jIoqFYIdlDmWRxd44IFi9baI+Wmb5JoLU/Qr0Mlkdqc=
Subject key identifier:   C1:4F:55:51:BE:F4:21:A0:8F:DF:56:CC:8A:C6:37:06:52:93:68:2F
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       48466B3B2EA56B351F7DB2B3AF55B4279817FC57
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa
Signing time:             Mon 19 May 2025 21:00:50 +0000
ROA not before:           Mon 19 May 2025 20:55:50 +0000
ROA not after:            Mon 18 May 2026 21:00:50 +0000
asID:                     265465
IP address blocks:        168.196.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 19:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:46:6b:3b:2e:a5:6b:35:1f:7d:b2:b3:af:55:b4:27:98:17:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: May 19 20:55:50 2025 GMT
            Not After : May 18 21:00:50 2026 GMT
        Subject: CN=C14F5551BEF421A08FDF56CC8AC637065293682F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:6a:b4:fb:88:9a:d8:5c:d6:93:8b:2c:2b:
                    a4:74:61:8f:93:5a:bb:c5:83:8e:b9:f5:fc:eb:a9:
                    a7:38:79:6a:dd:5a:64:13:48:47:2d:d0:dd:ee:3d:
                    3f:7a:c2:01:c4:30:91:d0:90:cc:74:72:94:e7:a5:
                    9f:b2:79:64:a4:0f:b4:19:89:76:4c:21:9c:97:1e:
                    06:24:63:7e:38:e5:e7:cb:78:81:5e:5f:61:c6:e2:
                    24:2a:a7:d4:3e:a8:60:93:47:da:66:9b:86:8d:7c:
                    67:55:ba:6d:f0:a8:e8:4d:65:56:02:a6:98:e4:90:
                    84:f0:90:bb:80:fe:af:10:ce:8e:7f:ce:90:ae:46:
                    83:48:dc:60:03:a6:36:1e:f5:ba:06:44:96:bb:8c:
                    f0:70:89:35:21:f1:53:e3:05:22:ad:50:e5:78:2f:
                    8f:88:52:81:2a:b7:e3:58:c8:a1:12:ce:96:75:55:
                    2e:b1:c1:a7:ec:46:b4:50:e5:8b:08:38:a9:a6:a6:
                    b0:7d:69:25:33:09:db:2b:c8:07:98:e3:cd:b2:05:
                    4e:7a:74:67:bf:1a:17:6d:3f:aa:92:a0:9e:68:44:
                    4a:d1:02:cc:6c:ee:21:67:7b:a2:1f:ce:c4:21:79:
                    2a:d1:a9:1b:4d:6b:0b:42:d6:5a:28:a3:98:8d:e6:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:55:51:BE:F4:21:A0:8F:DF:56:CC:8A:C6:37:06:52:93:68:2F
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:ec:f6:67:60:98:d9:15:f6:34:f4:a9:0d:6b:f3:52:c3:
         5d:a6:54:b9:cc:6c:79:38:10:e3:5e:0e:05:61:91:7c:9c:71:
         eb:60:3f:7e:b1:43:76:4a:58:13:20:4b:12:1a:65:09:9c:0e:
         81:05:ad:41:15:81:52:2f:2e:d4:28:ea:59:c4:1a:e0:16:9c:
         6a:d4:52:ff:f1:9b:db:06:f2:da:d5:7a:75:44:7e:7d:c5:ad:
         38:ee:42:ae:f7:5e:ad:b7:e4:b1:40:14:75:88:e2:93:cf:75:
         d9:ef:79:73:f6:22:9f:6c:4a:7a:e7:15:f3:ac:c2:4a:30:20:
         bc:e7:5b:b6:e1:fc:c6:43:1f:32:5e:c2:90:b8:46:33:02:f6:
         48:c0:7a:6a:0c:55:96:77:48:97:a5:99:a0:9e:a9:cd:43:c7:
         96:e1:b7:14:4b:90:ad:ca:64:27:49:0c:1e:f7:9d:73:47:87:
         2a:47:30:6d:6e:53:8b:bc:23:92:ba:b4:8a:ec:94:15:ff:72:
         be:bd:83:c7:c9:a5:d7:90:9c:8e:69:5c:a8:62:ab:d3:0b:2d:
         ab:08:b5:ae:82:93:83:99:ec:53:b6:3f:b6:6f:19:37:33:21:
         84:6d:2d:cc:3f:9b:01:ca:c1:83:43:ba:d1:7c:2c:73:db:c1:
         5d:2c:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:52:53 2025 by rpki-client