Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa
File:                     3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (raw, json)
Hash identifier:          Il0ajD6q5/KHn6bzrsc1c01RC3PXilfsAS1Sd5v19Q0=
Subject key identifier:   56:B9:B7:C7:99:6E:CA:3A:7B:C8:75:1A:B3:83:19:26:D7:70:F5:58
Certificate issuer:       /CN=7A4A806BC66460F57C39D95DF40FAE7BFE972F8D
Certificate serial:       25612024D4C5D57DF24AC6AC35E19D3BB89FD289
Authority key identifier: 7A:4A:80:6B:C6:64:60:F5:7C:39:D9:5D:F4:0F:AE:7B:FE:97:2F:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A4A806BC66460F57C39D95DF40FAE7BFE972F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa
Signing time:             Mon 16 Sep 2024 23:21:52 +0000
ROA not before:           Mon 16 Sep 2024 23:16:52 +0000
ROA not after:            Mon 15 Sep 2025 23:21:52 +0000
asID:                     265488
IP address blocks:        168.197.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/7A4A806BC66460F57C39D95DF40FAE7BFE972F8D.crl
                          rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/7A4A806BC66460F57C39D95DF40FAE7BFE972F8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A4A806BC66460F57C39D95DF40FAE7BFE972F8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 03:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:61:20:24:d4:c5:d5:7d:f2:4a:c6:ac:35:e1:9d:3b:b8:9f:d2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A4A806BC66460F57C39D95DF40FAE7BFE972F8D
        Validity
            Not Before: Sep 16 23:16:52 2024 GMT
            Not After : Sep 15 23:21:52 2025 GMT
        Subject: CN=56B9B7C7996ECA3A7BC8751AB3831926D770F558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:c2:ea:4c:1e:d1:c8:7c:e2:78:d4:3e:71:
                    73:75:25:8b:c9:4e:c6:b3:db:d7:e6:52:0c:56:42:
                    af:2c:96:73:0d:89:be:0c:46:9f:55:f0:1b:44:3b:
                    07:eb:8d:0b:3b:ae:91:5c:87:01:9f:5e:ef:10:7c:
                    fc:8b:e6:33:56:f5:27:ee:c1:f0:0c:f8:04:e1:9a:
                    ad:11:44:b4:2f:4b:c0:78:1f:10:a4:cd:eb:35:94:
                    9c:f6:37:3c:cb:a2:bf:4d:fd:5a:1d:28:65:db:ce:
                    9c:a2:ff:0e:7b:6e:2f:23:e3:3f:b0:9a:e8:b5:74:
                    c9:7c:c9:56:d7:d7:bd:bb:0c:2a:62:23:27:ce:5f:
                    b0:2a:d3:cf:d3:1f:1c:99:fa:99:04:f6:3e:80:30:
                    09:99:bc:a8:db:64:11:22:54:4b:08:f4:bd:73:00:
                    21:f1:dc:30:dd:2f:55:ec:8a:47:0a:83:fd:cc:cf:
                    b8:30:78:da:ce:60:c3:ba:e6:2d:c4:39:cf:46:7d:
                    3c:84:c3:61:c8:9e:4c:09:a3:93:77:5a:13:aa:57:
                    8e:2b:d3:23:b0:6d:c4:10:05:65:3b:60:c6:4d:1d:
                    7d:71:d8:e0:50:70:ad:86:49:5d:d0:8e:b7:71:8d:
                    87:38:9e:a7:fc:88:13:75:f8:90:91:f4:ed:0e:71:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:B7:C7:99:6E:CA:3A:7B:C8:75:1A:B3:83:19:26:D7:70:F5:58
            X509v3 Authority Key Identifier:
                keyid:7A:4A:80:6B:C6:64:60:F5:7C:39:D9:5D:F4:0F:AE:7B:FE:97:2F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/7A4A806BC66460F57C39D95DF40FAE7BFE972F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A4A806BC66460F57C39D95DF40FAE7BFE972F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:fd:9e:bc:03:53:3d:97:fa:05:77:39:bc:e8:46:78:16:
         96:94:49:a0:46:f2:24:d5:00:b5:a1:00:98:6b:3e:d5:95:a9:
         8b:74:8c:64:36:06:1f:1d:4a:46:2c:6d:50:93:d6:c5:e2:9e:
         b7:c2:16:76:01:8f:20:bc:32:7d:a9:5b:46:4e:1c:b2:fb:82:
         f3:6e:2c:09:92:ab:c1:1f:ed:11:ac:d2:e4:c6:51:4e:2c:56:
         9b:ab:fa:78:fa:9b:ad:e1:48:1a:eb:e3:c9:8c:4b:af:9b:46:
         95:ef:e8:f0:60:6e:fa:6e:3f:c8:e3:bc:a7:16:2b:25:82:b9:
         02:00:d2:60:e3:4c:22:a1:74:34:4e:72:67:dd:85:82:20:66:
         cc:28:f5:9e:6e:0f:3c:e2:13:8b:4d:52:67:98:ea:5a:fb:39:
         84:b3:34:3f:8c:4e:e2:8e:9e:d5:3e:f1:82:d8:e9:33:9a:f8:
         92:09:79:90:3b:d3:3d:fd:95:0f:71:53:b5:db:f9:3b:30:d2:
         62:fb:19:ed:08:10:54:4b:48:ee:a8:ba:e2:3b:2b:ec:2d:21:
         44:07:ce:1a:a3:fd:62:7e:70:ca:fe:d8:e5:af:45:04:24:97:
         c7:30:22:01:46:b0:f8:cf:cc:05:2e:c8:e3:21:ac:56:91:44:
         0d:8f:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:13:21 2025 by rpki-client