Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa
File:                     3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa (raw, json)
Hash identifier:          i/IZmoYdY6acsu6clDLvKP//E57QY3tQMaBuG7uWYG4=
Subject key identifier:   34:23:2A:DD:BB:F3:C4:82:F6:7C:93:F1:F5:8D:05:48:BE:C7:C8:76
Certificate issuer:       /CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
Certificate serial:       3D0A6A53E9681E2745A911113AC3D3EF0E5BC196
Authority key identifier: BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa
Signing time:             Thu 06 Mar 2025 11:40:30 +0000
ROA not before:           Thu 06 Mar 2025 11:35:30 +0000
ROA not after:            Thu 05 Mar 2026 11:40:30 +0000
asID:                     265336
IP address blocks:        168.181.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl
                          rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 16:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0a:6a:53:e9:68:1e:27:45:a9:11:11:3a:c3:d3:ef:0e:5b:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
        Validity
            Not Before: Mar  6 11:35:30 2025 GMT
            Not After : Mar  5 11:40:30 2026 GMT
        Subject: CN=34232ADDBBF3C482F67C93F1F58D0548BEC7C876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:ad:f3:a1:03:8b:da:9c:b2:fb:b0:ee:c0:
                    0d:d4:ff:7a:64:b8:98:35:d6:40:49:54:0b:62:57:
                    b3:5b:2d:6b:e5:92:4b:8c:cb:0c:2b:5c:17:fe:7d:
                    a1:c7:20:81:83:db:e3:f2:6f:d0:cf:b9:e1:07:95:
                    70:ff:cd:2f:ee:40:af:14:12:fa:fc:7f:81:04:fb:
                    7e:19:73:28:bb:8b:5e:7b:98:01:77:94:db:17:ea:
                    d1:d8:dc:84:12:ce:89:25:7c:0d:17:ff:7b:50:be:
                    55:b3:9b:58:de:c1:f3:b0:bf:2d:2e:6c:cb:1e:8c:
                    ff:a6:ff:46:a5:a6:94:e3:3c:84:21:be:29:e8:06:
                    a1:18:14:49:3f:51:4b:69:47:83:3a:5d:ea:69:a5:
                    f7:a6:c0:06:ed:9f:9c:31:f5:30:34:41:3a:5a:df:
                    cf:6d:7d:ac:c1:ec:72:b2:72:a5:83:7f:f1:50:ae:
                    77:2b:b4:34:a1:59:3c:1b:34:8a:00:a3:bd:70:4d:
                    ea:2c:fb:bb:49:86:58:b8:0e:f7:8a:89:2b:67:b7:
                    9c:04:be:76:26:85:90:88:29:5a:3a:ec:6c:fc:e6:
                    19:10:16:cd:b0:6a:cc:35:b0:45:4e:5e:de:13:27:
                    cc:a7:0b:79:d4:92:19:b7:6a:04:c7:d4:a7:46:99:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:2A:DD:BB:F3:C4:82:F6:7C:93:F1:F5:8D:05:48:BE:C7:C8:76
            X509v3 Authority Key Identifier:
                keyid:BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:11:f9:2f:24:17:65:b4:dd:85:56:2e:99:a7:fe:b3:64:
         9d:f5:96:de:57:24:8e:dd:c2:9a:ba:e4:8e:c7:71:95:c2:c6:
         db:27:48:54:49:ca:6b:8f:c9:09:ea:ae:fb:d5:1a:56:3e:6c:
         54:75:88:3b:2a:8d:2a:ee:26:e8:76:d7:1a:e9:e8:f3:45:46:
         d2:75:8e:56:d5:08:65:a0:fd:98:d1:d6:c0:b4:49:7f:78:39:
         5b:5f:ba:2a:f5:b0:9b:74:5f:5a:c2:b0:dd:3f:0c:55:a1:cc:
         cc:7a:37:25:8f:bd:cf:a6:e6:d8:5e:cf:d3:3f:da:0f:fa:17:
         7a:f8:d7:a7:ef:78:f2:96:80:43:f4:28:84:a9:2d:f9:67:97:
         01:5d:b2:61:83:ff:10:69:fc:1b:9e:af:79:2e:8a:29:59:fa:
         ab:33:f9:24:fe:b8:19:80:c2:5d:86:6a:7b:b0:fc:8f:97:24:
         6f:26:c3:27:b0:9d:41:aa:ab:86:e0:f1:06:d0:09:d2:9d:80:
         6b:ed:5f:ab:94:b0:f3:af:a0:4d:2a:b5:50:40:ac:02:47:67:
         a4:f3:98:d6:84:42:a7:ba:ff:f3:cd:76:4f:d7:26:d0:35:17:
         f5:79:a6:d6:b8:a6:fc:7b:5c:72:4d:7f:34:6e:a1:7a:0f:04:
         9e:7c:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:30:54 2025 by rpki-client