Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa
File:                     3136382e3139342e37362e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          d9HQ8FYTDyKRavmHn9qwFWOTadYnk6+ImHzKMwrDBAo=
Subject key identifier:   8D:66:76:C6:CE:7C:ED:43:D2:B4:EB:1D:F4:CC:2B:BC:DE:AA:33:65
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       218827B580E4B05B242B0F1A6FA7CCA43503AF2A
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 14 Mar 2025 14:10:37 +0000
ROA not before:           Fri 14 Mar 2025 14:05:37 +0000
ROA not after:            Fri 13 Mar 2026 14:10:37 +0000
asID:                     52974
IP address blocks:        168.194.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 20:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:27:b5:80:e4:b0:5b:24:2b:0f:1a:6f:a7:cc:a4:35:03:af:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Mar 14 14:05:37 2025 GMT
            Not After : Mar 13 14:10:37 2026 GMT
        Subject: CN=8D6676C6CE7CED43D2B4EB1DF4CC2BBCDEAA3365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:16:df:47:e5:bc:15:75:16:e1:d0:ab:aa:
                    42:30:e0:fc:18:2c:48:b7:18:ad:3d:bb:1b:f0:d9:
                    be:66:6c:e6:ad:c8:d7:a5:09:5e:60:1d:f7:5f:4c:
                    46:15:58:ac:bd:1e:47:04:21:93:9f:6b:80:b1:04:
                    60:f5:32:13:d6:b1:fe:84:73:61:81:b0:00:25:60:
                    ea:a1:df:21:59:f4:9c:f3:bd:35:30:eb:23:da:e9:
                    3b:75:d0:8c:62:42:77:4c:e6:4c:7c:f7:78:65:94:
                    5e:da:95:e1:7f:6b:8e:b4:14:9c:7b:75:8b:59:f2:
                    2f:a7:2d:1c:db:4d:7f:de:1a:94:e0:ef:c9:a5:78:
                    b2:2d:00:e2:34:7d:9a:50:85:71:e9:27:34:cd:df:
                    a2:31:bb:fa:bf:11:2c:eb:5d:93:a6:97:31:2d:ca:
                    6f:35:7c:87:61:be:4b:51:01:b1:42:3a:35:09:33:
                    5a:1b:89:80:6a:a2:b2:e0:56:e5:b6:93:ca:12:3e:
                    0c:b7:26:0f:e2:64:42:92:68:45:a6:ab:a8:8d:e5:
                    02:0d:84:18:b6:03:18:79:5b:02:a0:28:e0:26:12:
                    fb:06:65:24:56:ac:7a:10:e4:45:9e:6d:b7:df:22:
                    bb:59:ee:8a:58:a3:2b:a0:90:94:93:a0:51:da:06:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:66:76:C6:CE:7C:ED:43:D2:B4:EB:1D:F4:CC:2B:BC:DE:AA:33:65
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:dd:a0:f5:45:89:92:00:ec:7d:6c:6c:6f:4f:88:93:dd:
         42:11:2a:97:e1:a3:66:3f:a6:f7:36:1a:7d:5b:30:f1:1b:da:
         62:40:cf:44:8a:b6:0c:60:ae:e1:81:5b:30:df:90:24:a6:50:
         ae:08:a4:81:4c:bc:4d:6d:c2:8f:da:18:ba:66:e6:7b:1b:f6:
         91:c3:28:f2:77:e2:75:cb:32:b6:83:b2:25:8b:79:a9:bb:b0:
         91:fb:24:5e:06:1e:7b:2c:7d:e2:12:26:87:74:3a:8d:fa:af:
         55:9c:99:19:6f:7d:c9:18:fe:98:4c:02:82:3d:61:bc:c0:22:
         9c:f3:5d:20:9a:57:36:f5:ea:e0:72:8e:6b:7c:d7:79:55:63:
         40:dd:62:33:e3:6d:57:c1:c0:e3:0b:a0:cc:b9:9a:32:dd:58:
         98:b0:5a:da:9c:e4:ce:ba:41:7a:fa:a0:e1:5f:d6:77:23:f0:
         78:28:91:03:c6:bc:ca:b2:92:67:97:57:2b:ba:d0:1f:6b:b7:
         59:77:ba:cc:16:61:12:df:27:db:bf:ad:f3:2d:f6:7e:6b:55:
         04:44:2b:06:09:95:2d:f3:ea:5a:df:b6:30:98:e2:6e:c9:49:
         a2:61:9c:fa:b9:6a:a9:31:8e:60:22:10:a6:e5:79:53:99:88:
         38:f8:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:06:47 2025 by rpki-client