Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
File:                     3136382e302e39362e302f32322d3234203d3e20323635323334.roa (raw, json)
Hash identifier:          JEE2lb2g/PemeL/rcJC+CnxWMltmAZRRrVvpBc6Lcug=
Subject key identifier:   1D:4B:31:04:A0:F4:C5:49:A7:F4:66:AA:34:2C:40:BD:22:B5:CE:74
Certificate issuer:       /CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Certificate serial:       5A41A6670D55FF77B0BAF2FFB811AF616A8F35EF
Authority key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     265234
IP address blocks:        168.0.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl
                          rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:41:a6:67:0d:55:ff:77:b0:ba:f2:ff:b8:11:af:61:6a:8f:35:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:f8:be:30:92:8f:09:e9:72:f3:57:ff:68:
                    e0:92:cc:b7:60:44:37:22:70:88:41:ff:31:fd:98:
                    1a:09:c5:d2:9f:93:ac:a8:f9:d2:7d:31:bf:77:48:
                    6f:3f:06:3a:5a:72:6c:f0:d2:7f:24:33:4a:c9:7f:
                    24:5f:c0:62:f1:fe:f8:38:d1:a5:a7:39:d4:a5:1d:
                    94:61:6d:f3:6a:0e:4e:61:d2:c8:56:a3:fb:12:86:
                    94:49:52:25:09:b9:e0:61:0b:5a:e1:82:15:6e:83:
                    38:1b:b1:74:3e:ef:8d:a3:16:48:eb:86:14:dd:c2:
                    8a:a6:84:aa:bd:a9:96:76:86:0f:f4:1d:de:6c:b0:
                    b0:55:6d:b9:86:24:d9:45:57:9b:6c:b4:98:71:34:
                    ac:63:6e:1b:d1:08:c3:17:21:7c:e4:88:06:db:83:
                    f2:5b:cb:9c:a4:b9:d2:d4:a0:a0:91:d9:75:72:ac:
                    a5:9d:28:a7:56:93:98:14:11:42:cd:0b:fa:46:94:
                    a0:94:b6:60:15:4b:75:8b:0f:3a:8a:62:7e:08:ca:
                    e9:17:d5:19:80:94:d0:4e:db:21:06:22:ea:9e:8c:
                    67:37:31:e4:d7:31:a2:26:1e:cf:3c:b4:44:94:41:
                    0c:45:14:ee:80:c2:6a:db:64:31:89:ab:29:7f:c7:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4B:31:04:A0:F4:C5:49:A7:F4:66:AA:34:2C:40:BD:22:B5:CE:74
            X509v3 Authority Key Identifier:
                keyid:FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:66:b9:4b:dd:1e:55:d9:03:e8:62:49:58:74:8d:3f:ab:d6:
         8e:01:65:bf:3d:5f:a4:be:6b:7d:e0:64:a7:56:25:1a:9d:6a:
         d8:26:75:f2:c9:28:5c:9c:0a:f2:44:32:2e:d8:a0:f1:ee:b9:
         fb:1d:97:9b:60:ca:42:8b:67:4f:34:a0:48:ed:47:65:01:65:
         ed:22:71:b9:34:48:2c:a0:e4:9a:0f:b9:23:5d:2a:73:d5:b1:
         f8:0d:0d:82:69:7f:a9:90:1e:5e:ef:1b:2d:fc:f4:2c:c3:d7:
         28:0c:58:58:bc:f9:d4:01:31:6a:7f:13:2a:08:79:fa:f6:c9:
         a6:f6:26:89:a1:83:75:82:a5:51:d3:61:8e:0c:7e:cd:c2:85:
         c9:6f:41:2e:7f:ac:66:97:9e:c3:63:d0:9c:7a:a3:7f:8d:ec:
         2b:19:5c:83:23:4c:e9:3e:18:45:d3:97:4f:4a:fd:ec:36:52:
         0a:47:86:89:2c:b1:79:94:10:cf:ed:5f:90:cc:88:b3:45:2e:
         ee:92:a4:78:40:65:99:f7:c8:df:ef:98:de:0e:24:5f:48:5b:
         5f:4d:2c:51:f5:8b:84:29:2a:17:51:05:31:d1:47:ff:3a:1b:
         62:dd:c6:b6:54:ef:49:48:69:7b:f5:5f:3a:a7:e8:3c:29:38:
         3a:60:00:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:40 2025 by rpki-client