Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/3136382e39302e342e302f32322d3234203d3e20323635323737.roa
File:                     3136382e39302e342e302f32322d3234203d3e20323635323737.roa (raw, json)
Hash identifier:          b43v+r/ZTjQVi667Te2cvffjALo2ruL8KvF20l/isiw=
Subject key identifier:   20:4D:49:94:BB:F6:78:DE:B2:43:75:CB:8E:D8:C5:C1:84:43:AD:E9
Certificate issuer:       /CN=D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1
Certificate serial:       20C629302AF19EFA4BBB0898CF2F5257A819FF57
Authority key identifier: D6:5C:C0:47:5C:7E:C2:7C:65:BF:5B:CD:A9:D0:33:A4:8C:13:BE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/3136382e39302e342e302f32322d3234203d3e20323635323737.roa
Signing time:             Thu 06 Mar 2025 02:54:08 +0000
ROA not before:           Thu 06 Mar 2025 02:49:08 +0000
ROA not after:            Thu 05 Mar 2026 02:54:08 +0000
asID:                     265277
IP address blocks:        168.90.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.crl
                          rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c6:29:30:2a:f1:9e:fa:4b:bb:08:98:cf:2f:52:57:a8:19:ff:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1
        Validity
            Not Before: Mar  6 02:49:08 2025 GMT
            Not After : Mar  5 02:54:08 2026 GMT
        Subject: CN=204D4994BBF678DEB24375CB8ED8C5C18443ADE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:f2:c1:17:bd:c4:0c:8a:d9:c4:66:c8:ea:
                    43:81:49:30:bf:4f:4f:b9:91:2d:ad:b2:72:f9:16:
                    fb:05:85:b6:d5:c7:d8:4f:3a:11:1d:18:3a:3a:e4:
                    73:6b:b7:fe:fd:29:10:8e:07:28:e0:8e:94:bd:da:
                    2d:f9:1d:b3:a9:0b:19:1a:f9:74:89:85:88:e4:d3:
                    2f:28:49:a8:e1:87:19:3b:4c:06:80:25:66:fe:21:
                    f1:49:7f:e0:94:f3:b0:9c:85:21:6e:43:2f:f9:67:
                    e2:83:70:7b:04:e3:87:e2:66:76:b7:6b:42:a8:77:
                    ae:a5:f7:47:30:d3:0a:cb:9a:a9:74:47:16:b1:59:
                    cc:a6:4b:0b:23:96:47:14:3a:8d:7f:f4:37:05:47:
                    40:25:55:6c:6a:4d:19:1b:46:93:52:f6:4b:3e:a2:
                    c3:3f:6d:db:c9:44:53:df:a2:c2:cf:d8:aa:5d:35:
                    75:f0:fb:5d:aa:dd:d0:68:f3:25:68:a5:98:54:53:
                    86:69:ed:af:da:39:b9:f6:8f:5c:23:60:17:b8:ec:
                    e1:46:93:25:9a:01:ea:69:38:b2:82:9d:2c:09:c0:
                    a8:4f:1e:4c:37:a1:d3:08:fd:1d:3f:5a:31:12:4c:
                    f3:59:37:3b:41:15:b3:87:ba:59:9f:8b:0d:c7:12:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:49:94:BB:F6:78:DE:B2:43:75:CB:8E:D8:C5:C1:84:43:AD:E9
            X509v3 Authority Key Identifier:
                keyid:D6:5C:C0:47:5C:7E:C2:7C:65:BF:5B:CD:A9:D0:33:A4:8C:13:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/3136382e39302e342e302f32322d3234203d3e20323635323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:eb:ae:dd:0b:0e:14:be:d0:59:a5:51:29:54:12:4c:ba:
         60:23:e8:28:66:a1:c7:36:31:3c:32:39:aa:3e:51:c3:9a:3e:
         09:94:aa:07:90:27:d7:05:da:63:e7:fb:2a:52:8c:00:ae:35:
         ae:e0:0c:7d:2e:54:b4:c3:97:8d:06:58:f2:40:fc:7a:19:e4:
         bb:9e:8e:11:bf:03:7c:20:14:b1:a7:05:27:d1:73:bd:dc:9e:
         75:ff:53:cf:82:34:b0:79:93:1f:5c:ff:ec:c2:1b:19:11:7d:
         df:86:10:1d:a7:73:30:4f:a2:41:7d:44:4f:33:e3:8b:0c:7d:
         f3:49:b5:4c:be:3c:a0:2e:4d:6f:10:10:92:39:e8:7c:b4:af:
         5c:11:fc:d1:22:5d:ca:eb:f4:3f:95:df:5d:54:1c:5c:eb:fc:
         62:0f:81:33:af:1f:a2:00:e5:d3:fb:45:1c:8c:b3:32:33:1e:
         ae:94:69:33:bc:47:1b:30:f3:8f:4f:59:05:ba:70:be:64:d8:
         d0:60:67:36:61:21:63:54:52:d6:f8:30:1f:a0:22:93:e3:49:
         57:ec:ea:f9:44:dc:cd:94:30:da:d1:7c:22:3c:ad:7a:34:6e:
         3a:c1:81:55:35:27:72:0a:64:9e:60:db:c7:b9:60:5a:33:a8:
         71:cf:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:10 2025 by rpki-client