Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
File:                     3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa (raw, json)
Hash identifier:          HU/C0vg/9pQ4TR3nhv8AeqGff/zFHp/Pviu8wJA8DLE=
Subject key identifier:   C6:56:7F:F7:C3:63:7E:D2:81:DD:C4:14:B3:FA:32:8B:96:F2:BE:07
Certificate issuer:       /CN=088FDBB1B4836269897C88564BFDA8CC6E837086
Certificate serial:       7FDB4B3FB04A5C6BC3257A3456F92E3EBBE2C5BF
Authority key identifier: 08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
Signing time:             Thu 10 Apr 2025 13:04:07 +0000
ROA not before:           Thu 10 Apr 2025 12:59:07 +0000
ROA not after:            Thu 09 Apr 2026 13:04:07 +0000
asID:                     264316
IP address blocks:        168.121.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 02:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:db:4b:3f:b0:4a:5c:6b:c3:25:7a:34:56:f9:2e:3e:bb:e2:c5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FDBB1B4836269897C88564BFDA8CC6E837086
        Validity
            Not Before: Apr 10 12:59:07 2025 GMT
            Not After : Apr  9 13:04:07 2026 GMT
        Subject: CN=C6567FF7C3637ED281DDC414B3FA328B96F2BE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:d5:05:a1:c4:e9:d5:7f:5e:3c:8b:cc:47:
                    87:be:50:87:23:e4:5d:45:8b:cc:a3:f5:da:54:93:
                    69:5e:b7:5f:fa:50:ee:01:b9:2d:f1:e3:24:d8:8d:
                    47:15:f2:26:ce:00:b5:1c:e4:5f:7b:93:6b:9f:70:
                    f9:d1:20:d3:b3:0e:2f:c3:67:07:45:d3:15:8e:93:
                    06:b1:d3:1b:b3:71:49:d4:27:58:b1:b9:4a:3b:08:
                    5b:56:6d:0b:84:07:08:e8:77:06:e7:69:08:e2:c3:
                    a5:0a:3c:ef:59:c5:36:d8:65:34:64:1d:39:17:a0:
                    2f:29:41:ab:6c:ea:69:b7:68:97:f2:55:86:94:24:
                    a1:ef:be:8e:93:8c:cc:94:ff:aa:c6:93:b4:87:80:
                    11:d3:72:7d:92:c1:9e:ed:fb:c5:6b:90:c1:f7:39:
                    63:af:5b:27:d5:93:dc:c3:2c:be:eb:fa:e7:fd:4e:
                    6d:3c:f5:58:ca:4d:1e:1c:08:59:5e:a5:3d:3c:3e:
                    9a:e3:19:29:12:1f:06:db:be:95:52:50:a7:40:53:
                    2a:d1:51:8f:49:8f:4e:78:80:6b:19:6c:e8:ec:51:
                    f2:77:8b:c6:c4:c4:73:10:0f:c3:43:87:db:ba:33:
                    68:d4:c1:94:83:68:d3:3f:40:83:c2:93:73:e5:ec:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:56:7F:F7:C3:63:7E:D2:81:DD:C4:14:B3:FA:32:8B:96:F2:BE:07
            X509v3 Authority Key Identifier:
                keyid:08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:ae:d3:54:c3:aa:a6:60:ed:b7:2b:10:e2:85:87:44:aa:
         57:99:7c:fd:3d:5f:c1:cd:dd:dc:cc:0b:50:a3:c7:16:56:54:
         3e:8f:5c:40:6c:a2:fd:3e:2c:26:60:eb:76:dd:d7:f8:1c:50:
         a1:28:a9:a6:16:0f:07:2c:5f:8c:af:96:0f:1f:7c:19:dd:0c:
         30:ed:cb:6e:ef:ab:d2:e8:a1:0e:69:51:14:de:7d:57:40:01:
         9f:b5:b7:f3:f0:4f:5a:2d:d4:97:3c:96:55:e7:d2:8c:13:61:
         24:0a:a1:14:5d:6e:db:79:f3:20:77:8a:93:93:4e:3d:0b:30:
         2f:fe:17:de:02:25:27:c0:69:e9:4c:3b:87:f1:7f:38:c8:2e:
         dd:76:82:ce:f0:8b:ea:ac:cb:20:72:e1:d6:65:8c:e3:fc:62:
         4e:11:fd:83:b1:e9:a1:27:02:aa:fe:ca:a9:6a:d5:17:9a:8a:
         34:9a:78:bd:49:90:83:b1:a4:20:69:61:80:18:37:1d:8d:ad:
         42:47:42:93:3f:1a:f9:a1:c8:6f:41:ac:2d:1c:21:56:bc:b8:
         21:b5:f3:43:5b:28:14:45:1a:04:aa:b4:85:38:4c:27:b4:fc:
         21:43:9a:dc:92:9b:4b:7e:0b:6a:20:73:28:da:40:7e:11:f1:
         7e:d3:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:39 2025 by rpki-client