Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=
Subject key identifier:   67:63:B3:E6:16:D4:83:C9:A8:66:5E:C2:43:D3:16:DC:59:7B:BD:99
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       6FF8C043BB08423BCED3DEED7F67C2BAFE70E8F1
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266535
IP address blocks:        160.238.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f8:c0:43:bb:08:42:3b:ce:d3:de:ed:7f:67:c2:ba:fe:70:e8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:7f:6e:91:0c:e9:40:b3:33:93:69:59:3a:
                    40:32:2f:19:39:5c:5c:f1:dd:cd:d9:df:48:74:1e:
                    df:53:ab:5b:1b:75:83:60:a0:d0:86:a5:e6:55:3c:
                    e2:73:e5:f6:66:df:f4:dc:42:c0:ee:30:9e:1a:70:
                    7a:48:c6:24:a8:69:f6:59:ee:58:3a:69:06:8f:ea:
                    ed:58:e1:d5:bf:10:18:6a:3c:97:89:98:ab:8c:82:
                    e6:26:0d:8f:12:8e:03:ff:85:d6:f8:86:46:34:9f:
                    cb:99:d5:c7:a6:26:2b:db:a4:0b:87:05:ec:d6:b1:
                    71:ad:c6:d3:45:a2:21:3f:53:63:d4:d4:b1:8d:b3:
                    62:15:ab:ff:1d:92:07:49:e1:d9:1e:2e:1c:81:6c:
                    97:f9:09:39:ce:46:94:99:38:d7:d2:73:c1:32:36:
                    2a:ba:fc:1e:2d:f1:3c:68:89:15:ee:96:0c:34:b0:
                    e3:33:a3:00:8e:ac:a1:a2:34:6b:18:8b:96:73:5d:
                    67:0e:fe:45:5e:8b:c7:74:3b:70:0d:ea:1d:df:46:
                    eb:35:6b:20:9d:41:77:a0:d5:f0:cd:39:dd:a2:2a:
                    9c:9e:6e:6f:d3:15:60:59:72:d3:7c:55:63:be:fb:
                    3b:46:d7:55:ae:f3:05:f9:1b:d0:b3:10:ce:5b:3b:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:B3:E6:16:D4:83:C9:A8:66:5E:C2:43:D3:16:DC:59:7B:BD:99
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:ad:ef:b6:a0:0d:5a:2a:4f:f1:db:50:38:8e:9f:9b:be:
         a4:84:3a:c7:f9:ab:b4:90:a5:a1:1d:d7:c7:40:ac:1e:a2:60:
         15:74:1d:50:09:04:9e:4e:d9:a6:7a:aa:21:05:61:3a:bf:b9:
         40:80:07:b2:48:ca:db:ba:22:87:cd:f5:e4:64:19:cc:43:2b:
         3f:49:12:d5:57:05:43:3b:6c:c5:77:2b:5e:2f:5b:71:aa:43:
         cb:b6:f9:b3:3d:df:e4:06:c8:ec:0d:69:cb:6e:9b:02:77:40:
         15:16:a0:d0:df:ed:ba:e0:ba:eb:7e:2b:68:79:d7:27:88:95:
         5c:b8:ab:62:f3:3e:6a:90:68:9c:56:63:cc:23:bc:02:c2:15:
         42:b3:02:5f:db:13:a4:f7:ed:39:92:39:05:f3:e0:01:dd:4f:
         9b:13:50:9a:03:f3:79:cf:cd:3e:62:aa:f4:4f:2a:3d:48:c8:
         07:63:44:ad:60:17:f8:a1:b6:4d:95:30:68:1d:10:63:a7:da:
         ae:bc:49:f2:88:26:9f:72:05:7a:10:60:38:06:29:11:b7:2d:
         14:4c:a0:09:69:cf:26:1b:82:c5:92:cc:c4:36:2b:6d:79:ce:
         0f:a5:45:17:27:5b:e5:93:4a:fa:93:46:f5:50:a2:b9:35:8f:
         ac:65:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:46 2025 by rpki-client