Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233322e302f32332d3332203d3e20323635343836.roa
File:                     3136382e3139372e3233322e302f32332d3332203d3e20323635343836.roa (raw, json)
Hash identifier:          x+KSdGawcNprtzqdgsj/qUxmfrzeQQ9u+43gseeOTFk=
Subject key identifier:   FD:49:D4:40:B2:E0:AD:EF:8F:61:2C:02:73:38:D8:5C:08:09:E7:81
Certificate issuer:       /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial:       72332ECAB2764100070AECE06BFB97880117E28F
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233322e302f32332d3332203d3e20323635343836.roa
Signing time:             Thu 09 Jan 2025 22:19:12 +0000
ROA not before:           Thu 09 Jan 2025 22:14:12 +0000
ROA not after:            Thu 08 Jan 2026 22:19:12 +0000
asID:                     265486
IP address blocks:        168.197.232.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:33:2e:ca:b2:76:41:00:07:0a:ec:e0:6b:fb:97:88:01:17:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
        Validity
            Not Before: Jan  9 22:14:12 2025 GMT
            Not After : Jan  8 22:19:12 2026 GMT
        Subject: CN=FD49D440B2E0ADEF8F612C027338D85C0809E781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:20:34:e7:fc:d3:e0:ce:88:b8:f6:71:84:
                    9f:96:16:84:ba:b3:aa:47:35:e6:a2:40:eb:4a:7d:
                    de:d7:a2:e2:66:3d:96:b3:6d:ff:2f:e2:76:4a:77:
                    ca:c5:f0:98:48:ae:31:56:81:97:1e:f2:8c:4f:1f:
                    5d:96:17:0b:f2:c2:a2:b7:8e:57:a7:a9:05:68:01:
                    ab:3c:21:75:05:3a:47:d4:93:72:fc:b3:38:28:60:
                    7d:e1:19:f6:9d:82:5d:90:00:67:5b:a4:2a:8e:8f:
                    48:7c:cd:b1:37:f6:17:dd:d4:54:3d:23:5e:6b:ad:
                    6c:68:2d:d0:98:9a:ea:7e:72:5b:5c:5d:13:16:41:
                    4f:05:f8:da:3a:50:06:9e:1f:14:9e:5a:73:71:81:
                    f5:75:e9:90:99:da:12:81:ad:21:d0:e8:e0:25:6e:
                    56:36:79:b7:91:4c:b0:9f:51:36:e9:a9:0b:75:de:
                    b4:ad:c1:93:2d:a9:6d:b8:ff:c0:a0:4d:76:4a:ed:
                    eb:2b:a1:28:45:9a:cd:50:bb:8a:c1:b9:4c:e3:d7:
                    a1:a8:a5:b3:45:c2:08:84:6f:23:ed:80:5e:30:a3:
                    1e:15:8c:9d:06:f5:97:16:82:4d:f3:b8:f4:90:a3:
                    ec:df:ce:b4:03:d4:a1:81:a3:f2:39:28:c5:2b:f7:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:D4:40:B2:E0:AD:EF:8F:61:2C:02:73:38:D8:5C:08:09:E7:81
            X509v3 Authority Key Identifier:
                keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233322e302f32332d3332203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:90:76:0d:33:71:19:93:57:9b:6f:0a:97:af:58:76:e9:72:
         71:cb:41:d0:46:04:00:71:d5:8a:4f:b6:00:01:7e:59:5c:80:
         07:f6:1d:3e:1d:d0:7f:29:af:c6:06:eb:0d:23:2f:9d:d8:80:
         47:62:3c:ac:c3:61:7d:02:f5:f4:47:4a:20:04:c3:95:23:a0:
         2c:37:85:02:83:70:f4:76:79:12:96:42:87:77:aa:52:b5:13:
         0b:51:65:1e:2a:2a:71:58:81:88:fa:4d:2b:7a:13:9c:c1:a4:
         51:83:4d:e6:2c:b6:71:7f:42:e2:1f:59:40:2d:38:e8:a2:82:
         57:6c:04:39:ed:5e:3e:3f:fa:ce:44:13:3f:a2:b3:b5:4b:68:
         8b:e4:85:f8:1d:d2:97:9b:64:69:b4:7d:ad:d0:21:f3:75:01:
         da:39:e4:07:3f:6e:36:2d:c1:0f:2e:96:2f:19:42:b1:f4:9f:
         38:b5:39:b7:0c:5e:94:26:f7:b0:48:db:38:6a:0a:86:8d:8b:
         55:7c:95:46:35:17:4d:f9:17:44:db:f3:89:79:b6:1c:92:cd:
         5e:ba:3d:4a:eb:16:66:76:97:2b:9a:b0:62:21:d9:a6:95:a9:
         0d:2d:de:3c:67:6b:a2:3d:af:57:c4:98:06:33:50:27:d7:14:
         4c:01:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:09 2025 by rpki-client