Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa
File:                     3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (raw, json)
Hash identifier:          CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=
Subject key identifier:   BF:1D:6F:27:69:AE:17:56:11:D2:FF:61:FA:68:0A:14:A4:4B:4E:3D
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       4DFBAD1E48627D21A79BF83D298A8290E4F6D46A
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa
Signing time:             Thu 08 May 2025 23:11:58 +0000
ROA not before:           Thu 08 May 2025 23:06:58 +0000
ROA not after:            Thu 07 May 2026 23:11:58 +0000
asID:                     264939
IP address blocks:        168.228.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fb:ad:1e:48:62:7d:21:a7:9b:f8:3d:29:8a:82:90:e4:f6:d4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: May  8 23:06:58 2025 GMT
            Not After : May  7 23:11:58 2026 GMT
        Subject: CN=BF1D6F2769AE175611D2FF61FA680A14A44B4E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:f4:0b:b4:b3:bd:e3:2c:2c:09:04:a4:75:
                    ff:fe:d7:79:83:26:51:2a:a2:c1:86:61:65:eb:df:
                    86:8c:2d:9f:0f:6b:d3:79:0b:cf:c4:d4:ca:03:e9:
                    91:4d:c9:db:08:54:6f:af:78:0e:eb:b2:5c:0f:0b:
                    77:59:36:10:b2:fd:79:32:9f:99:bb:03:50:b0:19:
                    8b:63:1e:5d:e6:f8:ba:47:02:e5:37:61:dd:36:59:
                    c8:26:78:83:a8:b2:bf:5b:9e:cd:4f:8c:a8:03:eb:
                    79:27:98:c1:92:c6:b2:57:cd:0e:f8:4c:75:ca:50:
                    4e:90:e5:50:6b:f0:e7:57:c5:8b:86:29:08:96:90:
                    f4:f9:89:7f:c5:ef:14:f4:f9:65:f5:06:72:43:f6:
                    8e:ef:9d:2f:83:73:69:0a:6f:27:9c:e4:8d:9e:be:
                    1e:4b:2a:cd:1a:25:08:89:c8:7f:82:09:a1:f3:82:
                    38:21:f9:ec:60:d0:0f:a9:5c:ec:0d:81:f6:04:06:
                    9e:47:e3:f9:7b:90:91:97:af:e9:7b:49:56:94:24:
                    7e:6e:72:51:ef:2c:52:bd:f1:09:f9:19:60:bf:61:
                    59:07:15:4e:14:7d:14:15:8a:2a:72:f4:12:4b:1b:
                    a1:5b:23:42:aa:b9:ed:05:c7:af:0e:67:a1:7b:3e:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1D:6F:27:69:AE:17:56:11:D2:FF:61:FA:68:0A:14:A4:4B:4E:3D
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:2e:c4:c4:11:09:a0:3e:e2:c1:e6:44:00:e3:d6:11:da:89:
         7d:3e:00:99:27:3f:3f:05:bc:9d:f4:d5:24:ef:b1:cf:4a:41:
         0e:e6:9b:39:85:e0:c2:ba:d4:15:1d:10:70:e2:38:4a:c6:63:
         d1:1c:84:af:86:0a:69:4e:d7:34:a0:12:fa:7f:5d:6e:4e:8e:
         ee:89:9d:4a:e8:ab:d9:56:1f:68:a7:36:b9:db:94:ab:33:df:
         cf:b7:fd:dc:ae:ce:f0:cd:d3:ef:c3:fc:9f:ba:ee:fc:68:c6:
         dd:78:04:d2:9a:fe:28:5a:cf:9f:46:48:66:9a:1f:60:b3:2b:
         1e:75:27:f3:70:98:40:30:a6:cc:30:f8:74:4a:61:d8:34:52:
         28:47:86:b1:43:25:3d:b7:ee:e7:03:58:07:99:fa:fc:b4:b7:
         06:51:67:9d:c0:fb:9d:89:84:0b:d5:d9:d2:b1:90:01:4d:e6:
         9c:84:f4:53:89:ae:1e:5a:31:33:5d:4f:01:f0:f2:d8:ce:a1:
         c4:e5:47:bb:b2:49:a0:1b:69:47:cf:7e:8c:83:f0:66:2c:dd:
         a9:f9:de:c3:e0:7a:24:fa:2b:f1:50:a7:87:98:65:d8:0f:b4:
         61:c4:43:bb:1a:08:1f:de:fa:39:99:91:fa:08:c5:d7:83:3a:
         d5:82:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:37:20 2025 by rpki-client