Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa
File:                     3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa (raw, json)
Hash identifier:          bEcr6zVnd6j1AzmlsAQ5WSTPkRg+jzahYngk/py+YhU=
Subject key identifier:   81:3C:D9:D7:9A:FE:8C:F8:D2:99:F0:F9:C0:84:08:C3:3C:E7:AF:33
Certificate issuer:       /CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
Certificate serial:       5C8F1D6C0601839F1D8C1926802068AA8BD33F0E
Authority key identifier: BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa
Signing time:             Thu 06 Mar 2025 12:13:58 +0000
ROA not before:           Thu 06 Mar 2025 12:08:58 +0000
ROA not after:            Thu 05 Mar 2026 12:13:58 +0000
asID:                     265336
IP address blocks:        168.181.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl
                          rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:1d:6c:06:01:83:9f:1d:8c:19:26:80:20:68:aa:8b:d3:3f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
        Validity
            Not Before: Mar  6 12:08:58 2025 GMT
            Not After : Mar  5 12:13:58 2026 GMT
        Subject: CN=813CD9D79AFE8CF8D299F0F9C08408C33CE7AF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:bb:e4:69:59:39:dd:78:76:5c:6a:c7:58:
                    6a:f2:ed:06:5a:86:e6:c9:f9:2a:19:c8:d3:dc:ba:
                    fc:07:d6:fe:71:ff:2d:d7:2f:4b:03:b8:42:ab:f6:
                    2b:0c:bf:e0:70:98:2a:e2:8a:3b:14:f2:60:dc:7f:
                    80:2d:6f:c2:43:5b:11:10:51:29:52:92:12:56:ee:
                    c3:f3:d1:ab:3a:cf:64:80:e8:bc:b3:0a:48:f4:be:
                    27:42:0e:ba:6b:4a:8a:85:c0:ab:9a:b8:a1:70:9d:
                    ff:bd:67:3a:d9:81:bc:a8:13:37:85:ff:19:57:28:
                    18:78:61:11:33:bf:20:d1:31:d1:29:65:83:eb:e2:
                    52:50:44:59:7b:53:bb:12:d3:d3:c9:6a:aa:b9:f4:
                    d0:30:4e:3e:2a:43:76:7d:45:02:70:8a:15:0c:8e:
                    6c:41:6d:05:97:30:44:b5:91:87:fb:0c:c6:f5:17:
                    98:53:71:68:33:2d:14:41:40:90:72:da:33:e1:86:
                    8b:60:e0:a0:09:08:5f:d5:bc:2d:04:c9:43:44:9e:
                    9d:af:4e:6a:42:6c:b2:26:ce:9f:a2:b8:f9:7b:86:
                    e0:8c:f1:fa:c2:0d:e1:be:3b:ab:b3:3f:06:04:bd:
                    75:da:7f:0b:f5:93:4e:bb:2c:f7:55:99:bc:ea:16:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:D9:D7:9A:FE:8C:F8:D2:99:F0:F9:C0:84:08:C3:3C:E7:AF:33
            X509v3 Authority Key Identifier:
                keyid:BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:43:fa:96:63:6c:f2:f9:ad:6d:17:be:22:20:06:cc:21:
         49:c1:51:bb:00:69:a0:29:29:17:f7:4d:1a:2b:99:b6:f9:71:
         9b:fd:ee:8b:6c:4c:23:91:99:b3:bd:8d:78:03:dd:e2:0e:da:
         af:db:cf:51:37:33:bc:f0:7f:4b:6d:fa:87:87:6d:c0:eb:88:
         82:ae:9f:c8:88:c6:83:34:82:c0:20:1a:88:dd:89:12:85:d4:
         09:fa:8f:9d:fa:75:a9:33:4f:7e:93:cf:d3:0f:fd:d5:0a:7e:
         10:d8:ac:07:93:08:bb:0c:4e:ae:aa:5b:72:e3:5c:aa:b6:3d:
         25:84:a2:f4:8a:87:58:01:48:27:be:7d:cb:1f:15:ca:65:43:
         f8:bd:63:2a:ca:00:de:5b:6d:3d:ac:ee:9b:3a:44:06:33:ac:
         8f:db:17:a2:99:3e:69:78:ad:d3:72:ae:71:ca:8a:46:ad:8b:
         13:68:7e:d9:11:c5:7b:e2:6a:78:32:ed:e1:29:85:6c:c4:16:
         2c:ff:b0:98:26:7f:30:48:e1:c9:40:41:ea:5a:ca:25:09:3a:
         6d:53:f4:02:53:e4:ea:08:90:a1:ef:41:ab:6d:9a:3b:de:40:
         3e:92:db:9e:7a:f7:18:fa:4f:c8:b7:be:fd:ff:dd:2b:c7:4a:
         07:cf:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:45:59 2025 by rpki-client