Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          ANkhM7kd0YYJopgeylhIk1/HBd/BR/CZz2x9WOtYdZ8=
Subject key identifier:   F4:6D:A9:CB:1A:AA:C6:8E:4A:BF:14:06:F8:33:6D:4C:88:0B:C3:5A
Certificate issuer:       /CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
Certificate serial:       5F6D4074579721E2D69D6783FC95E771751C59CF
Authority key identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa
Signing time:             Wed 12 Feb 2025 19:52:22 +0000
ROA not before:           Wed 12 Feb 2025 19:47:22 +0000
ROA not after:            Wed 11 Feb 2026 19:52:22 +0000
asID:                     271267
IP address blocks:        168.197.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl
                          rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6d:40:74:57:97:21:e2:d6:9d:67:83:fc:95:e7:71:75:1c:59:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
        Validity
            Not Before: Feb 12 19:47:22 2025 GMT
            Not After : Feb 11 19:52:22 2026 GMT
        Subject: CN=F46DA9CB1AAAC68E4ABF1406F8336D4C880BC35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:76:54:d3:f9:47:af:db:6e:2e:ec:28:2c:
                    a5:e7:14:1a:b2:79:0a:d4:eb:39:09:ea:72:03:3a:
                    89:b8:07:1a:dc:cd:51:70:62:b6:08:43:7a:69:91:
                    73:13:68:a5:92:ec:df:1b:20:a6:64:2e:16:87:12:
                    73:14:8b:db:e0:c8:5b:a2:bf:f3:63:68:af:3d:58:
                    81:c1:d7:8c:af:ce:05:5e:7d:7f:dd:a2:33:d4:02:
                    5c:7e:a9:cc:31:c6:0d:e9:7b:98:38:7b:08:a1:68:
                    e6:55:31:42:7b:31:42:f8:97:7c:0c:52:7a:0f:4a:
                    5c:8c:6a:d6:d3:58:4e:c5:88:d6:be:88:a5:0d:c7:
                    d0:eb:2d:c6:70:f3:25:3d:3c:16:f9:aa:17:74:67:
                    71:bb:68:f5:e7:19:bb:d9:ad:67:f6:58:d0:ae:7d:
                    18:82:e1:b2:fe:28:0a:95:41:bb:8c:60:cb:31:24:
                    30:e3:66:8e:f3:ea:5d:17:95:a9:5e:51:d0:07:81:
                    3d:a9:39:4c:4a:b9:8b:52:ed:26:26:2c:3c:c4:03:
                    39:98:05:b0:49:81:c8:db:87:ce:20:19:c2:d1:d1:
                    31:81:8f:cb:bb:33:0e:e9:75:67:73:3a:f8:bd:86:
                    29:28:7c:65:68:6b:86:7e:e6:5d:88:36:7b:dd:03:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6D:A9:CB:1A:AA:C6:8E:4A:BF:14:06:F8:33:6D:4C:88:0B:C3:5A
            X509v3 Authority Key Identifier:
                keyid:8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:10:45:d5:f9:bb:4c:11:0e:bc:8b:5d:91:4a:ce:03:a4:
         ba:32:86:66:6b:87:c5:77:46:67:a7:33:a9:b0:e3:b7:47:e4:
         05:05:b8:50:08:97:4d:4a:de:39:bd:25:34:67:7e:a9:b3:ef:
         ed:b0:c4:75:8a:e2:d4:f4:12:b4:52:ba:f4:15:48:8f:85:d5:
         bf:b9:72:57:5f:e9:e1:8e:18:33:f6:7a:6d:b6:a9:39:0b:be:
         14:14:4d:97:72:ba:80:fd:09:c2:a9:6a:a9:c9:ca:9f:ed:43:
         9c:f1:93:f4:de:dd:5e:0f:03:9c:2d:d3:55:d1:78:5f:56:41:
         fb:1a:6f:88:f0:61:44:d7:d8:a4:c4:82:d1:5b:09:d2:e7:97:
         7f:b7:e6:18:75:81:4a:52:55:c7:b8:92:0b:18:1e:bb:09:55:
         54:28:86:ca:11:77:3b:f9:14:c3:a7:49:f7:36:9e:35:db:8f:
         56:6d:c9:17:19:97:2d:da:2a:6b:98:3f:34:66:6d:d5:a9:5a:
         24:3d:85:68:1b:fa:29:5d:5a:0b:7b:8d:69:65:d8:d6:12:71:
         66:9f:c1:18:1a:e9:88:31:fb:e2:ba:8f:e1:73:74:87:18:a3:
         39:8d:74:09:43:23:6c:80:4a:fa:da:82:86:27:96:d0:3c:9c:
         f7:88:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:57 2025 by rpki-client