Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39322e302f32332d3233203d3e20323635323331.roa
File:                     3136382e302e39322e302f32332d3233203d3e20323635323331.roa (raw, json)
Hash identifier:          dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=
Subject key identifier:   12:96:D3:26:8E:24:C4:A1:7A:EB:9B:6C:8B:5E:F3:D1:2E:2E:52:7F
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       7B4822E8CD5AE97B3C2D34B9E8299F40C493825B
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39322e302f32332d3233203d3e20323635323331.roa
Signing time:             Thu 08 May 2025 16:49:49 +0000
ROA not before:           Thu 08 May 2025 16:44:49 +0000
ROA not after:            Thu 07 May 2026 16:49:49 +0000
asID:                     265231
IP address blocks:        168.0.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:48:22:e8:cd:5a:e9:7b:3c:2d:34:b9:e8:29:9f:40:c4:93:82:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: May  8 16:44:49 2025 GMT
            Not After : May  7 16:49:49 2026 GMT
        Subject: CN=1296D3268E24C4A17AEB9B6C8B5EF3D12E2E527F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:b1:46:e6:e4:cb:a0:41:bc:ab:df:97:57:
                    61:78:f7:28:f7:63:12:4e:e9:db:e3:3c:4f:2a:21:
                    7d:f3:b8:de:13:71:ff:da:19:8b:26:a1:2b:5a:41:
                    8a:25:10:4e:42:43:e4:a8:c9:b9:04:67:83:3c:e6:
                    b4:97:51:75:23:98:38:45:8d:84:35:ec:b3:ef:bf:
                    3d:bb:e6:8e:90:8a:c1:5f:05:e1:e4:14:aa:90:c0:
                    0b:16:e9:30:55:d5:fb:91:18:13:2d:ea:6f:50:90:
                    7f:20:a1:3e:df:44:74:9b:0b:11:c5:d1:f6:9c:9b:
                    a0:b7:dc:b6:0d:b3:63:be:ce:ab:bf:b9:0b:38:6f:
                    de:74:72:08:71:9d:ba:3f:57:a9:b7:72:c0:e5:1c:
                    bb:51:dc:f3:ee:8d:41:d1:b7:9a:dc:48:76:a8:56:
                    33:6e:8a:ff:e2:ad:53:99:77:14:09:40:b5:90:f6:
                    d6:8b:30:fd:5d:2b:d1:1b:c2:8a:44:51:75:56:51:
                    9f:5d:95:dc:1f:2c:31:00:61:0c:f5:2b:f7:d0:48:
                    f7:23:0b:9e:fc:b7:f7:f4:86:ba:8c:44:38:28:49:
                    be:b8:53:14:18:a3:13:2c:b9:26:51:00:b4:e0:84:
                    f7:e5:e5:10:98:c9:7e:13:6b:aa:ea:b7:42:7e:c9:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:D3:26:8E:24:C4:A1:7A:EB:9B:6C:8B:5E:F3:D1:2E:2E:52:7F
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39322e302f32332d3233203d3e20323635323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:35:86:41:9f:0c:36:ad:cd:0d:e9:28:e0:e8:55:7e:38:05:
         91:3b:60:ab:c9:af:ee:ed:66:35:db:40:88:c6:4e:13:fe:b4:
         43:f1:bb:96:bb:71:ed:f3:fe:3d:1b:bb:d0:b1:82:da:34:c4:
         35:84:02:b4:de:c0:92:92:bc:5b:8f:3a:aa:f8:13:b9:10:87:
         fd:35:7d:0e:77:9b:97:cc:f9:58:8e:6c:a4:19:ed:8e:0f:e8:
         42:77:32:81:58:30:b4:23:fd:19:d5:73:0a:92:15:a5:77:d1:
         78:eb:8d:ca:59:bf:27:44:57:11:2b:bc:0d:40:1d:4b:f0:1b:
         86:68:48:64:04:f3:2c:a7:ab:f6:36:00:8c:dd:c0:8e:1f:89:
         cb:c6:2e:e0:47:16:fb:bf:0e:dc:45:fe:1d:39:e8:e3:03:e8:
         5f:7b:c7:40:5d:4d:71:3d:b4:5d:9c:ae:e9:ed:29:16:23:18:
         6d:1b:ff:7c:57:24:1f:07:8f:77:d1:51:de:f3:76:29:6c:8c:
         d8:5f:a8:26:d5:b6:6d:62:d0:49:78:32:7f:22:42:da:60:ee:
         73:6d:4c:67:73:cb:ca:69:08:a3:c6:7e:45:8e:b5:a6:a5:7f:
         3c:90:71:05:86:8f:72:f0:8f:07:6b:3e:42:bf:06:7b:28:c0:
         8e:cf:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:11 2025 by rpki-client