Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31362e302f32342d3234203d3e20323635313835.roa
File:                     3136382e3139362e31362e302f32342d3234203d3e20323635313835.roa (raw, json)
Hash identifier:          vJB3OKquVqV0ck7o3pKfhAsDINEoIS6KfFs87UzjsWo=
Subject key identifier:   FA:58:95:CB:C6:82:26:FC:FD:9E:42:81:11:41:EB:67:6B:00:F0:CC
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       051A9EB1517EB28C355914D512394121B4D7A54D
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31362e302f32342d3234203d3e20323635313835.roa
Signing time:             Thu 13 Mar 2025 19:44:02 +0000
ROA not before:           Thu 13 Mar 2025 19:39:02 +0000
ROA not after:            Thu 12 Mar 2026 19:44:02 +0000
asID:                     265185
IP address blocks:        168.196.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1a:9e:b1:51:7e:b2:8c:35:59:14:d5:12:39:41:21:b4:d7:a5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Mar 13 19:39:02 2025 GMT
            Not After : Mar 12 19:44:02 2026 GMT
        Subject: CN=FA5895CBC68226FCFD9E42811141EB676B00F0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:d5:24:e7:2e:a5:8b:41:e4:fe:fb:34:8b:
                    a7:dd:5d:44:f9:c8:d8:67:30:36:fb:fe:da:37:98:
                    d5:b2:7d:5f:6a:d9:ef:4a:97:3b:6c:ba:a3:51:f4:
                    68:da:b5:34:ae:0e:69:5f:89:fe:07:5d:4b:ab:ff:
                    3c:21:38:24:90:5a:58:3b:e3:bd:3b:2d:f8:14:04:
                    b3:cb:9d:8b:d4:8a:a3:cd:c5:a8:78:13:d4:01:43:
                    00:f0:63:5f:ee:7a:8f:6e:20:d4:ac:65:91:d9:66:
                    69:1b:ae:3e:fc:ad:57:46:55:1c:c3:2c:9b:4e:21:
                    9b:d4:de:4e:09:f5:ed:4a:05:ee:09:90:36:f9:a6:
                    3d:80:3b:29:a9:80:5c:36:e3:21:6f:f3:19:43:6c:
                    03:ae:60:97:87:3f:1c:cf:92:e1:81:d3:28:5e:b2:
                    d1:27:15:7f:04:cc:2d:73:b9:58:68:1f:ef:34:58:
                    97:f0:1e:92:e6:bb:7a:22:3b:b4:41:ec:cc:f0:fa:
                    30:97:55:fa:58:82:d6:14:b3:34:7c:f0:4b:5d:52:
                    25:42:24:e9:cf:1b:6c:33:fa:10:0a:14:5c:09:d4:
                    87:69:29:e6:ea:fd:5e:0e:d4:59:0b:51:85:c7:73:
                    6d:53:fd:ec:42:93:39:96:df:12:3b:66:3c:fc:ef:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:58:95:CB:C6:82:26:FC:FD:9E:42:81:11:41:EB:67:6B:00:F0:CC
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31362e302f32342d3234203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7d:c3:17:f1:be:46:5b:8e:49:04:ad:46:88:c7:3b:ad:0f:
         fc:13:4d:e5:47:3b:5d:82:b5:f0:4b:9b:73:36:f3:0e:ff:3a:
         e4:e3:29:bb:4c:e7:9d:a7:a2:11:f1:88:53:64:ba:b5:0d:df:
         25:99:34:f9:6b:01:ae:8a:34:f7:ae:cf:61:86:61:2f:c5:22:
         5c:40:80:9c:ab:b4:95:f0:33:78:73:fa:5b:f7:cb:7d:bd:18:
         46:04:e1:6e:d7:94:de:56:d5:d9:00:04:ea:12:34:59:23:a3:
         4d:c2:56:4a:69:4c:5e:e1:2f:8b:a8:62:88:ce:25:4c:83:06:
         fa:6a:8d:3a:01:51:db:54:9a:75:97:29:93:a9:b9:16:1f:f0:
         19:31:b5:2d:e4:15:e5:56:f4:03:89:38:e9:7a:2d:ee:20:60:
         94:00:07:f4:f6:fc:89:17:fa:da:1f:66:67:40:03:61:32:14:
         d5:a6:32:ab:62:62:5e:01:d2:71:c0:0d:d3:a6:08:c3:6c:4f:
         d6:38:72:69:b8:f1:90:69:0e:08:ca:b1:d8:92:8c:b7:a2:bb:
         f8:ae:9e:cb:95:c5:df:ff:c2:0b:27:be:af:40:49:89:f7:9f:
         91:2b:30:79:49:13:3f:06:c3:6f:ee:f8:37:81:bb:cc:cb:76:
         59:c1:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:13:40 2025 by rpki-client