Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa
File:                     3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          EXb3JPGwD2QxW0ZWg9M6SqM7adCVe3plh0z48+J3Unw=
Subject key identifier:   D3:7A:F1:6F:3E:62:5B:92:07:61:DB:ED:DB:E9:14:FD:4A:C5:93:59
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       75E9321DD6CB3689ACD450D7CA2557AE7AA5414A
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa
Signing time:             Thu 06 Mar 2025 09:19:45 +0000
ROA not before:           Thu 06 Mar 2025 09:14:45 +0000
ROA not after:            Thu 05 Mar 2026 09:19:45 +0000
asID:                     262323
IP address blocks:        168.195.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e9:32:1d:d6:cb:36:89:ac:d4:50:d7:ca:25:57:ae:7a:a5:41:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Mar  6 09:14:45 2025 GMT
            Not After : Mar  5 09:19:45 2026 GMT
        Subject: CN=D37AF16F3E625B920761DBEDDBE914FD4AC59359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:f6:3b:66:e9:54:2c:70:7b:a1:5a:a9:85:
                    64:69:47:bf:ba:fe:08:16:5f:11:ca:8d:b7:00:18:
                    db:9e:1f:b6:ff:73:0d:59:42:3e:8d:6e:68:29:66:
                    c8:aa:a7:9e:c5:10:f7:fc:47:2c:30:bd:d8:ad:bf:
                    aa:32:00:0a:df:c8:1e:b6:20:3d:c6:68:ad:67:45:
                    a2:3b:b9:1b:fb:c8:d2:47:bb:c6:e1:fa:09:89:9c:
                    79:08:86:1d:c1:4d:06:4b:79:1d:7d:6f:cc:30:a1:
                    53:69:68:df:5d:fd:d9:8c:9b:02:4c:3c:f3:f9:c5:
                    16:06:4e:d3:84:54:97:7d:b3:dd:ed:c6:d3:2d:f8:
                    4c:b1:6e:b6:b2:8f:7a:85:de:da:80:85:97:3d:8d:
                    eb:b5:69:0f:14:7d:1a:ae:5a:e5:a6:c1:89:29:e5:
                    e8:3c:94:53:b5:70:cf:01:cd:45:00:3d:0a:b6:f5:
                    11:91:09:36:42:b1:11:3d:1f:c9:8d:22:fb:e6:00:
                    0c:7a:26:d3:85:e4:65:db:29:39:fe:37:c4:bd:ae:
                    65:e5:46:c5:a9:c6:7c:9e:08:f8:4f:05:a8:0e:ca:
                    9c:3c:6f:aa:1c:be:af:17:1b:ca:0c:52:9f:d2:b0:
                    d8:49:43:4a:61:4b:c1:89:5b:8d:ca:12:92:27:7c:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7A:F1:6F:3E:62:5B:92:07:61:DB:ED:DB:E9:14:FD:4A:C5:93:59
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3136382e3139352e34302e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:b7:25:cb:f4:4c:5c:05:05:06:b5:7f:6b:bf:a2:eb:7b:
         b9:4f:ec:51:11:28:8e:d8:2f:e5:31:73:f2:ea:19:bd:43:66:
         11:fc:17:64:1b:73:3c:a1:e5:db:a9:65:ae:1c:04:82:24:4d:
         ae:a8:78:a4:93:b1:df:a2:06:66:94:4c:74:73:3f:64:18:33:
         54:ee:e3:9f:a8:f8:6a:d7:41:4f:aa:3f:da:27:c7:bd:e4:66:
         99:87:19:c4:46:e5:f9:c2:52:ed:fa:78:19:3d:03:ac:b4:1f:
         a6:c5:c7:dd:8a:21:bc:af:c8:bb:e6:be:8b:f9:18:78:f0:1a:
         8d:f7:28:44:ac:3a:c8:19:e8:5b:53:52:16:40:a7:14:09:ba:
         04:66:91:62:07:ca:67:e4:de:97:c6:39:a4:a4:4c:69:b7:b8:
         cc:a6:1e:1f:56:6d:d2:06:fd:64:87:42:cc:69:f6:b2:87:60:
         6a:49:36:9e:b7:c3:e2:ae:34:48:94:e0:01:c2:28:e6:fb:c0:
         74:8f:e1:b7:8f:f7:0b:16:93:01:45:55:ca:23:41:f9:ff:32:
         30:03:56:e3:f1:4b:3e:0f:9e:ce:9d:21:ba:5e:7b:1d:92:1d:
         6d:b2:74:a4:97:cf:75:3c:ed:ac:0d:21:92:05:cf:f1:81:2d:
         5e:bb:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:56 2025 by rpki-client