Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          NI5agI1jhS22wVwTWRZUJ1DkzDyd5GXex4GlIZe4m6I=
Subject key identifier:   75:24:B3:EA:78:F8:EC:C3:1E:F6:21:DA:B9:E0:95:DF:09:B2:36:CE
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       4E063BB8B712964190D447A431901042ED53BE61
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:05 +0000
ROA not before:           Thu 29 May 2025 14:24:05 +0000
ROA not after:            Thu 28 May 2026 14:29:05 +0000
asID:                     263518
IP address blocks:        168.197.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:06:3b:b8:b7:12:96:41:90:d4:47:a4:31:90:10:42:ed:53:be:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:05 2025 GMT
            Not After : May 28 14:29:05 2026 GMT
        Subject: CN=7524B3EA78F8ECC31EF621DAB9E095DF09B236CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:82:3a:eb:00:04:ff:e9:ff:6c:8e:e8:fb:
                    47:4b:c3:e7:8d:64:ad:80:b1:ee:34:e0:08:3a:df:
                    e5:17:e2:b5:f0:d7:6f:a6:f0:2d:5c:f2:90:46:b6:
                    2c:7e:a3:f0:23:44:45:47:12:eb:a9:d2:d8:f7:f6:
                    8a:5c:df:54:59:0c:87:6a:eb:bd:19:42:fa:84:b1:
                    33:21:13:5f:76:c8:34:b0:0e:2a:b5:c9:42:b2:5e:
                    37:d1:ae:1e:43:b4:20:16:a4:8d:a1:49:9b:64:12:
                    a2:12:55:84:19:9a:3d:fe:fe:b8:3d:6a:10:28:8e:
                    53:44:6d:39:60:e6:4c:61:40:c5:74:fc:56:ac:cf:
                    3d:77:22:0f:e8:ff:3a:5b:ac:69:fd:99:9f:96:b1:
                    fb:e0:8f:2d:8a:9a:b3:9a:a2:8b:94:bf:9d:df:63:
                    6f:a2:8b:81:02:bf:db:ac:76:63:c5:e7:8b:9e:24:
                    e4:b4:fe:69:00:f7:43:02:66:af:e2:d8:7d:47:f8:
                    48:f5:d2:e8:13:4b:06:4d:7e:02:7d:7d:53:48:bc:
                    1f:c0:38:2a:fa:6f:03:fa:d5:d3:62:cf:5f:bc:11:
                    76:b7:33:66:ff:7d:52:ba:7a:99:f5:f5:d7:d3:1c:
                    f5:2e:cd:f1:cc:6f:cb:e8:57:be:c5:10:b9:1c:e3:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:B3:EA:78:F8:EC:C3:1E:F6:21:DA:B9:E0:95:DF:09:B2:36:CE
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:78:a3:e0:95:fa:21:10:e8:3c:5b:5a:fb:43:1b:8a:fe:4b:
         31:92:ad:c0:3b:14:11:ff:51:38:c8:22:22:fa:00:7b:8e:af:
         cd:22:aa:11:13:25:97:97:bb:fa:e3:f1:49:06:de:87:45:e2:
         66:b6:47:e9:57:b6:20:0e:da:0a:ea:a7:35:cc:5d:fe:ae:4c:
         d0:33:c6:67:34:87:1e:a1:ee:a1:ce:b8:78:dc:d3:65:ed:e8:
         69:aa:4d:31:38:06:fd:7c:73:cd:96:2c:0d:8d:45:4c:30:fe:
         58:b7:54:0c:84:1b:3f:b4:aa:98:ae:aa:e1:52:99:a5:d3:0d:
         bb:6d:f8:9a:12:10:a4:f9:de:ce:d6:0a:f9:11:00:be:dc:23:
         60:4f:c9:ef:69:f2:36:f0:c1:23:52:b2:a1:28:56:95:d2:5b:
         32:df:0e:f5:51:f7:55:de:82:96:b0:99:a2:36:32:ff:2b:a6:
         52:33:4d:77:0d:c4:a5:21:01:52:2c:cc:ac:41:c7:75:b6:a2:
         61:ba:d3:56:eb:b1:b3:bc:1f:ef:bd:16:95:5e:b8:7e:0b:74:
         0e:d7:01:5e:0c:37:9c:4b:41:54:c5:2a:2a:f2:2c:2a:be:55:
         43:14:d1:76:02:ec:d2:60:86:bb:aa:94:0c:2a:76:af:7e:35:
         37:9f:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:19 2025 by rpki-client