Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa
File:                     3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa (raw, json)
Hash identifier:          vKJHdsmSiNO1EwFKuJ4x6ZwdgFsqsITWDjdLUlO0wXk=
Subject key identifier:   A1:DD:99:48:6D:99:CC:47:7E:18:18:2F:AD:C7:79:14:3A:67:9E:5D
Certificate issuer:       /CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
Certificate serial:       363C7A2A914A78BBC9813C0339BF2E59C6FB757B
Authority key identifier: 61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa
Signing time:             Fri 30 Aug 2024 16:39:40 +0000
ROA not before:           Fri 30 Aug 2024 16:34:40 +0000
ROA not after:            Fri 29 Aug 2025 16:39:40 +0000
asID:                     265346
IP address blocks:        168.181.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl
                          rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 11:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3c:7a:2a:91:4a:78:bb:c9:81:3c:03:39:bf:2e:59:c6:fb:75:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
        Validity
            Not Before: Aug 30 16:34:40 2024 GMT
            Not After : Aug 29 16:39:40 2025 GMT
        Subject: CN=A1DD99486D99CC477E18182FADC779143A679E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:10:60:4d:7f:90:cf:7b:96:6f:e0:8c:86:
                    1c:a0:f0:88:9e:c4:7d:3d:9d:30:63:f8:50:28:db:
                    ee:6a:bf:7b:bc:fc:63:13:8c:ea:8d:c3:22:62:5e:
                    21:d2:c5:59:19:92:b2:2f:cb:da:38:d0:00:5e:dc:
                    04:7c:68:cf:7c:f3:b0:6d:99:a7:39:36:a2:70:76:
                    03:cd:50:db:11:0b:c5:b3:3d:51:88:72:c8:90:9d:
                    6f:fc:89:b2:05:92:c9:5c:32:e5:7f:92:4a:98:03:
                    f4:85:87:a5:47:d1:c0:ab:79:68:90:4c:7e:6b:89:
                    23:26:de:10:ae:e5:7c:3a:8f:ee:6a:0b:79:36:a6:
                    03:d6:8a:02:d7:24:23:fa:7d:38:ef:b4:71:45:2f:
                    fd:68:51:28:77:85:be:9c:64:15:75:cc:87:6f:31:
                    24:70:2e:ef:f6:74:df:20:3a:88:dc:01:f1:c9:6d:
                    01:f3:98:a2:1f:f0:5b:d8:86:b6:0a:a9:c7:52:9a:
                    cb:2e:b6:15:f4:7d:f0:a2:56:33:ba:e1:0a:e0:48:
                    b1:65:81:cf:2f:55:79:39:30:97:3a:33:d0:50:5e:
                    7c:9e:a3:40:18:6b:82:fa:4c:48:9d:b3:bd:ff:e5:
                    cd:3b:1d:dc:d0:d6:76:4c:e1:f6:6d:0c:e8:29:c4:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:99:48:6D:99:CC:47:7E:18:18:2F:AD:C7:79:14:3A:67:9E:5D
            X509v3 Authority Key Identifier:
                keyid:61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:a3:10:81:ed:53:e5:dc:b6:1d:ea:fe:ad:95:f6:20:11:
         82:fe:0e:ab:4f:8a:46:50:e8:46:61:61:81:8b:a5:66:00:33:
         25:59:e6:13:3f:b0:af:ad:41:4e:87:00:92:02:c4:a7:5b:99:
         a2:88:2c:66:dc:03:33:05:96:46:a8:ff:88:b3:68:7b:dc:d7:
         36:5c:33:91:b1:72:b0:25:bc:b8:b5:17:76:43:85:e2:1c:30:
         19:40:37:d9:64:6b:ed:a7:b6:0e:e3:b5:db:24:8f:2f:0c:22:
         d8:7b:78:29:84:de:be:28:f6:ad:fb:a5:53:dd:7f:a5:f1:5b:
         89:2a:9b:c6:18:f8:05:ee:80:f5:2d:c5:6b:bb:69:b4:8e:6a:
         4d:a0:80:d4:64:5a:a0:c1:5b:54:f3:c8:d4:24:be:60:4f:a5:
         40:04:72:ec:b9:bc:28:f5:5a:a7:5f:75:a9:4b:7a:ed:bc:85:
         73:9d:bf:5b:a7:5b:45:81:07:d9:76:f4:23:4f:8c:ff:eb:c0:
         4e:5d:62:95:51:03:b6:ab:97:a4:d4:b7:06:02:27:9a:67:a6:
         4f:45:31:9e:ca:89:77:a9:18:df:9a:d7:0b:2c:16:67:6e:7b:
         1d:1d:59:e6:a7:d5:7d:87:bf:c5:29:1c:51:e7:9d:50:f6:01:
         c7:bc:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:03:27 2025 by rpki-client