Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39332e302f32342d3234203d3e20323635323331.roa
File:                     3136382e302e39332e302f32342d3234203d3e20323635323331.roa (raw, json)
Hash identifier:          m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=
Subject key identifier:   36:7B:27:AB:A6:60:DD:EF:65:CB:52:60:CA:C8:96:99:24:F6:BD:5D
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       13A649AA340EE3D651A65ECABD975E70B571324C
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39332e302f32342d3234203d3e20323635323331.roa
Signing time:             Thu 08 May 2025 16:50:08 +0000
ROA not before:           Thu 08 May 2025 16:45:08 +0000
ROA not after:            Thu 07 May 2026 16:50:08 +0000
asID:                     265231
IP address blocks:        168.0.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:49:aa:34:0e:e3:d6:51:a6:5e:ca:bd:97:5e:70:b5:71:32:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: May  8 16:45:08 2025 GMT
            Not After : May  7 16:50:08 2026 GMT
        Subject: CN=367B27ABA660DDEF65CB5260CAC8969924F6BD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:c7:5b:8a:64:f5:f6:da:17:c9:35:f9:17:
                    97:11:0c:04:88:7a:2f:4e:ce:ad:ad:ed:dc:dd:db:
                    7d:03:cf:da:76:25:0e:63:53:4c:a0:ce:0e:fd:58:
                    fb:27:c9:6b:4f:b0:14:09:af:82:a7:36:d0:96:8d:
                    19:37:15:76:4c:32:45:13:da:51:60:e1:47:94:d9:
                    18:17:a7:45:55:97:95:ff:8a:f6:62:07:ee:70:59:
                    b3:2f:e6:e5:43:64:eb:92:c3:cd:4a:c1:9a:54:89:
                    ca:1f:6a:fd:c5:8e:91:2c:eb:5c:9e:1d:7f:79:d3:
                    d0:b4:65:89:11:b5:ec:9c:61:9b:3a:fb:c2:6d:e6:
                    55:86:29:2b:d9:62:0c:aa:96:29:c7:3f:10:b2:a9:
                    a6:a7:df:6b:05:84:bd:c8:2e:cd:fb:2b:20:90:c5:
                    b5:93:8a:73:a5:17:a6:38:30:3c:61:87:28:a8:4b:
                    be:16:36:84:d7:0a:55:54:6b:f1:1b:bf:53:11:36:
                    f8:ce:1f:03:0b:96:b0:4b:5a:68:aa:04:cc:b0:8a:
                    77:34:b5:ef:c4:a9:d1:ac:a2:82:c9:66:7f:92:46:
                    d7:15:3e:98:5d:8e:1f:be:4f:97:8b:e7:12:68:5d:
                    e3:70:c0:13:8f:a8:1d:e1:06:5c:a2:5f:ae:4d:2f:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7B:27:AB:A6:60:DD:EF:65:CB:52:60:CA:C8:96:99:24:F6:BD:5D
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39332e302f32342d3234203d3e20323635323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:5c:a6:08:f3:c2:b5:10:e7:90:d5:9b:2d:94:79:6c:42:
         3c:6a:eb:78:a8:a3:85:ac:8b:65:f3:f3:f9:32:4e:51:30:82:
         0c:51:fd:31:bb:ad:af:59:34:18:58:e5:4c:6a:36:65:9f:09:
         5f:da:84:7d:ee:ea:9b:cc:4f:10:de:15:08:4a:0d:b5:da:0b:
         46:1a:3e:8a:eb:ee:15:78:ec:a6:2f:60:fd:cb:11:b4:3e:d0:
         5b:8c:10:b3:dd:f1:ca:d0:82:31:02:e5:1d:62:16:78:f2:15:
         84:29:4c:15:24:b0:5d:f7:83:9c:e2:69:10:cf:76:7a:5f:78:
         34:86:9e:ee:28:e4:af:89:b2:a9:9c:ad:5d:ff:ef:61:bb:06:
         b8:f3:6f:15:74:2f:f1:e5:4f:bf:51:23:8a:2b:50:af:7b:b4:
         cf:6e:1a:1d:a0:d9:b9:4b:ad:b8:ef:70:21:98:d9:62:74:5e:
         31:f7:86:7a:f1:36:a7:4e:86:34:dd:de:77:ee:23:fb:9d:0a:
         22:f1:6e:d8:ac:72:85:ec:e2:e9:ba:8f:4e:f0:15:eb:4f:da:
         92:c9:62:19:8c:3e:c0:a8:e0:6a:5b:27:f5:f6:36:55:0b:59:
         12:88:c2:69:c1:d6:4b:b1:06:2e:bc:db:a4:83:6d:0d:98:ef:
         a7:88:13:93
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUE6ZJqjQO49ZRpl7KvZdecLVxMkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI2OEFGNkRFNDVEQ0UwQzIxMTIwODQzNTY4NEMwQkNG
RDU1Q0M5QjAeFw0yNTA1MDgxNjQ1MDhaFw0yNjA1MDcxNjUwMDhaMDMxMTAvBgNV
BAMTKDM2N0IyN0FCQTY2MERERUY2NUNCNTI2MENBQzg5Njk5MjRGNkJENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tsdbimT19toXyTX5F5cRDASI
ei9Ozq2t7dzd230Dz9p2JQ5jU0ygzg79WPsnyWtPsBQJr4KnNtCWjRk3FXZMMkUT
2lFg4UeU2RgXp0VVl5X/ivZiB+5wWbMv5uVDZOuSw81KwZpUicofav3FjpEs61ye
HX9509C0ZYkRteycYZs6+8Jt5lWGKSvZYgyqlinHPxCyqaan32sFhL3ILs37KyCQ
xbWTinOlF6Y4MDxhhyioS74WNoTXClVUa/Ebv1MRNvjOHwMLlrBLWmiqBMywinc0
te/EqdGsooLJZn+SRtcVPphdjh++T5eL5xJoXeNwwBOPqB3hBlyiX65NLwlDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNnsnq6Zg3e9ly1JgysiWmST2vV0wHwYDVR0j
BBgwFoAUm2ivbeRdzgwhEghDVoTAvP1VzJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpEWXlEcjVjZTZKTHFqM2F1cWZDMTNRNmpNS25jR3gxVm53N3VzcTNq
ZlcvMC85QjY4QUY2REU0NURDRTBDMjExMjA4NDM1Njg0QzBCQ0ZENTVDQzlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNjhBRjZERTQ1RENFMEMy
MTEyMDg0MzU2ODRDMEJDRkQ1NUNDOUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKRFl5RHI1Y2U2SkxxajNhdXFmQzEzUTZqTUtuY0d4MVZudzd1c3EzamZXLzAv
MzEzNjM4MmUzMDJlMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTMy
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKgAXTANBgkqhkiG9w0BAQsFAAOCAQEAXYlcpgjzwrUQ
55DVmy2UeWxCPGrreKijhayLZfPz+TJOUTCCDFH9Mbutr1k0GFjlTGo2ZZ8JX9qE
fe7qm8xPEN4VCEoNtdoLRho+iuvuFXjspi9g/csRtD7QW4wQs93xytCCMQLlHWIW
ePIVhClMFSSwXfeDnOJpEM92el94NIae7ijkr4myqZytXf/vYbsGuPNvFXQv8eVP
v1EjiitQr3u0z24aHaDZuUutuO9wIZjZYnReMfeGevE2p06GNN3ed+4j+50KIvFu
2Kxyhezi6bqPTvAV60/aksliGYw+wKjgalsn9fY2VQtZEojCacHWS7EGLrzbpINt
DZjvp4gTkw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:28:22 2025 by rpki-client