Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa
File:                     3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa (raw, json)
Hash identifier:          bQgVrelRATH6xAfKVw2kwpiKoWA3T8jv5N6Aa6jh6j0=
Subject key identifier:   FA:CB:51:E4:89:0C:48:18:44:BA:2E:F8:FE:5B:41:B4:C1:7F:A7:85
Certificate issuer:       /CN=F273DC2275FCAABA5AD0A3DECEED01396F697BA2
Certificate serial:       39A55722FCD10D367408CF0A53220CC77C1CB2C4
Authority key identifier: F2:73:DC:22:75:FC:AA:BA:5A:D0:A3:DE:CE:ED:01:39:6F:69:7B:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa
Signing time:             Sat 08 Mar 2025 02:17:23 +0000
ROA not before:           Sat 08 Mar 2025 02:12:23 +0000
ROA not after:            Sat 07 Mar 2026 02:17:23 +0000
asID:                     265334
IP address blocks:        168.181.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a5:57:22:fc:d1:0d:36:74:08:cf:0a:53:22:0c:c7:7c:1c:b2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F273DC2275FCAABA5AD0A3DECEED01396F697BA2
        Validity
            Not Before: Mar  8 02:12:23 2025 GMT
            Not After : Mar  7 02:17:23 2026 GMT
        Subject: CN=FACB51E4890C481844BA2EF8FE5B41B4C17FA785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:09:2a:05:08:fd:44:0c:5a:c0:89:48:88:
                    54:e1:e1:8f:51:c3:e2:d8:8a:ee:15:eb:86:0b:57:
                    14:24:32:44:37:25:d4:e8:6d:f6:66:28:95:59:b1:
                    f1:be:21:77:e2:bc:67:e0:21:49:c5:e5:6a:08:74:
                    c0:03:92:91:3e:df:2f:4a:48:99:2f:1a:15:6e:c4:
                    ac:db:6a:7f:f8:67:a6:01:f0:71:36:ce:45:d1:be:
                    1e:12:8e:58:1e:0b:a1:43:3d:9d:50:38:90:02:50:
                    ee:69:32:76:9e:a7:1b:31:df:63:e4:c2:dd:09:da:
                    10:2d:19:f7:8d:70:71:86:c8:43:59:9f:cd:f9:dc:
                    4b:d5:b4:ca:78:de:42:5e:3d:9f:62:d9:b3:1e:22:
                    e8:c8:2f:73:91:2d:62:1b:f8:8f:1c:27:64:ce:3e:
                    42:46:07:37:c3:91:35:e0:0b:f7:3c:ba:6b:1e:69:
                    ec:2d:a4:de:74:73:c7:97:34:95:5a:a9:12:f5:7c:
                    fc:5b:61:82:ed:2c:3a:69:4e:6d:47:a1:cf:8c:04:
                    73:58:e9:c6:f8:05:9b:e9:40:4d:8d:dd:78:ba:d6:
                    3b:5e:f3:0f:0b:4c:b1:5a:db:df:52:8b:7e:2f:8f:
                    23:fe:e3:8e:ee:ea:c0:de:71:d7:ad:9c:fb:75:26:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:51:E4:89:0C:48:18:44:BA:2E:F8:FE:5B:41:B4:C1:7F:A7:85
            X509v3 Authority Key Identifier:
                keyid:F2:73:DC:22:75:FC:AA:BA:5A:D0:A3:DE:CE:ED:01:39:6F:69:7B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F273DC2275FCAABA5AD0A3DECEED01396F697BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:bc:8d:92:14:99:f6:76:0f:d0:46:fb:3e:77:65:c5:98:
         f0:2e:d5:93:f7:5e:fc:7b:7a:a6:84:9f:f6:87:a4:dd:12:c9:
         1b:27:83:15:89:8d:79:cf:ac:3c:7a:c2:64:05:9c:55:e5:e7:
         54:7b:4e:c8:a0:52:74:e6:4f:fb:ed:5c:1d:eb:69:49:76:2d:
         56:b9:ab:29:3c:5a:e2:ff:ad:fe:df:14:14:49:17:ad:32:e9:
         33:b9:4b:bc:c2:8e:be:51:5c:c4:fd:f0:d4:f8:7b:6c:dc:fa:
         1a:2b:2f:b4:bf:15:3f:09:e6:67:44:3e:aa:b2:f1:97:d6:2e:
         37:a2:a8:e1:5f:ce:47:30:e6:73:d4:12:dd:57:4a:cf:7a:65:
         6d:b6:06:b8:7f:73:f1:49:84:1d:f3:bc:81:4a:68:ab:4d:24:
         7b:6b:c1:8b:14:9c:d5:2b:89:01:70:8a:ff:34:45:46:da:ad:
         80:f3:6a:05:11:ce:d0:f2:32:0f:a5:50:46:cb:92:a3:14:d6:
         85:4d:ea:6c:b4:3b:67:61:f3:d3:8d:de:a4:f3:bc:f3:b3:2d:
         be:bb:9f:64:bb:32:dc:22:0c:f3:5b:bf:01:1b:78:90:52:4f:
         0b:ba:5b:2b:fd:ef:01:11:fb:b7:4a:ef:57:7c:a9:a4:8b:e8:
         7a:c2:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:25:00 2025 by rpki-client