Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3332203d3e20323635343836.roa
File:                     3136382e3139372e3233342e302f32342d3332203d3e20323635343836.roa (raw, json)
Hash identifier:          wbNPblXRQqLVeLamCZqWMeOQObCglBDR4O+zltDJ1hM=
Subject key identifier:   7C:96:51:A1:66:C6:E7:22:93:C9:B5:93:AA:CE:26:8F:A6:2F:B1:11
Certificate issuer:       /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial:       656DB17CE10F3DA589FFFD554DDDAA4AC3EBAFA9
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3332203d3e20323635343836.roa
Signing time:             Thu 09 Jan 2025 22:19:36 +0000
ROA not before:           Thu 09 Jan 2025 22:14:36 +0000
ROA not after:            Thu 08 Jan 2026 22:19:36 +0000
asID:                     265486
IP address blocks:        168.197.234.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6d:b1:7c:e1:0f:3d:a5:89:ff:fd:55:4d:dd:aa:4a:c3:eb:af:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
        Validity
            Not Before: Jan  9 22:14:36 2025 GMT
            Not After : Jan  8 22:19:36 2026 GMT
        Subject: CN=7C9651A166C6E72293C9B593AACE268FA62FB111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:aa:24:74:5b:5e:e2:90:34:ac:fc:42:52:
                    69:65:a8:06:0d:c4:3b:98:2d:4e:00:d4:00:72:b8:
                    65:69:a3:f6:22:0d:0e:bf:56:af:04:b9:c1:31:4a:
                    83:bc:2b:b2:5f:d8:9e:11:ae:89:ce:58:c8:63:33:
                    0a:7f:f2:b4:94:29:d1:a7:9f:d4:46:ca:9d:e4:c6:
                    54:c4:5b:4d:49:1c:0a:48:87:76:c9:e4:5e:d5:3c:
                    55:80:17:00:cc:4b:cb:83:94:a3:83:ea:e7:fe:32:
                    f5:b4:ce:d9:59:c3:92:e6:88:ce:e6:1e:c0:82:0a:
                    99:c4:57:02:49:7a:ed:a5:55:32:87:23:1c:d6:77:
                    72:47:86:dd:39:97:a1:79:8b:16:47:37:7a:4f:fb:
                    c8:52:df:be:43:a1:86:ee:ed:a4:9e:3c:5c:60:f4:
                    70:e2:23:d4:4a:3d:8d:04:09:e4:ce:5b:aa:aa:c1:
                    80:40:d1:b9:84:ba:07:bd:d0:c9:56:1a:37:2f:c4:
                    7b:fc:da:fb:33:7d:ce:7a:77:01:07:29:de:08:52:
                    53:a6:96:61:c7:7a:2d:eb:06:25:74:d8:2d:dc:be:
                    39:89:46:88:84:f6:25:de:b5:19:fe:3e:0c:9e:88:
                    af:b4:9d:4a:a7:1d:4e:61:55:17:39:0d:39:b9:de:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:51:A1:66:C6:E7:22:93:C9:B5:93:AA:CE:26:8F:A6:2F:B1:11
            X509v3 Authority Key Identifier:
                keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3332203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:ad:41:dd:ab:27:20:af:15:cb:ff:3e:31:06:0c:c8:c8:
         c1:97:9a:4e:70:97:07:0c:2d:8d:21:64:6b:10:6f:aa:92:b2:
         bf:97:a3:e9:a8:d2:5a:e9:b0:f2:4b:02:87:14:89:79:39:c5:
         a8:50:11:56:a0:74:f3:15:d1:93:d7:12:22:65:bd:b4:5c:8a:
         8b:d5:ea:1f:b8:95:5a:97:44:e1:3f:75:10:d1:5e:bc:2f:73:
         19:7f:ee:c5:43:cc:81:42:75:e5:40:e4:83:9d:1d:54:0c:ee:
         1d:f9:c9:3c:36:5f:f6:2e:30:67:8f:85:95:62:f7:e9:03:a2:
         25:6d:17:6f:fd:df:89:6b:ec:1f:2e:4e:62:66:bd:24:fe:a2:
         65:c8:c2:97:bb:c7:77:55:f0:00:ac:ad:7d:7f:eb:48:58:11:
         f4:f7:de:60:87:35:33:af:d8:70:3c:a1:3a:30:6b:1a:a9:48:
         ed:02:63:f8:4e:3a:10:49:84:9e:ce:6a:fe:00:ca:e6:5d:76:
         bc:03:d5:7e:9b:26:c7:42:42:59:ce:ba:3a:76:dd:5f:bb:18:
         58:67:6e:ea:5e:52:b2:d8:b1:3b:fb:a9:4b:34:8a:c2:c3:6e:
         74:04:43:a6:c4:8a:69:7a:1a:89:1d:9e:7b:06:ac:b8:9a:60:
         1d:63:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:20 2025 by rpki-client