Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa
File:                     3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (raw, json)
Hash identifier:          gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=
Subject key identifier:   41:EB:AD:BB:C2:D4:DB:60:BF:5F:E5:2C:7B:F7:6C:56:66:44:77:28
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       254BBE9418C8BDD0A3EDAB26F866548D8E5583FF
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa
Signing time:             Wed 07 May 2025 19:31:15 +0000
ROA not before:           Wed 07 May 2025 19:26:15 +0000
ROA not after:            Wed 06 May 2026 19:31:15 +0000
asID:                     265436
IP address blocks:        168.195.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 23:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4b:be:94:18:c8:bd:d0:a3:ed:ab:26:f8:66:54:8d:8e:55:83:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: May  7 19:26:15 2025 GMT
            Not After : May  6 19:31:15 2026 GMT
        Subject: CN=41EBADBBC2D4DB60BF5FE52C7BF76C5666447728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:67:4d:94:c2:d5:ed:2f:7f:61:31:46:08:
                    e8:77:fb:4b:e7:c0:cd:87:ff:f1:1a:b4:2f:94:2a:
                    af:cb:19:9d:03:5d:75:cb:27:67:92:2a:da:11:6d:
                    4c:ba:7b:6e:c8:4b:06:ac:8b:90:a4:f1:bc:0e:91:
                    25:a2:d9:16:6b:2f:13:b5:d8:74:61:62:c1:a8:3d:
                    06:21:1c:0c:38:93:82:83:2b:c7:78:bf:fe:21:2a:
                    fa:17:97:38:89:54:eb:03:e2:4d:1e:83:12:85:3b:
                    48:1f:1c:e0:60:a2:9c:77:ae:2e:86:ae:38:bd:1d:
                    2c:97:21:43:f7:1e:8d:e7:1a:fb:7e:2b:cb:57:41:
                    41:32:2a:fb:4f:e6:3c:77:f4:7d:dc:0f:da:bb:ee:
                    5d:79:80:da:01:a7:78:ad:0e:86:14:ba:53:cb:32:
                    1b:21:63:3e:80:38:2b:c8:a5:b2:93:de:e6:42:c6:
                    3f:f4:fb:33:fc:f1:d8:80:93:f2:d3:92:42:e2:b7:
                    f8:d1:6b:e5:8c:5f:58:ca:cb:d0:ab:0a:15:31:a5:
                    37:43:30:66:80:ec:a6:0e:b0:d4:69:50:8c:73:ba:
                    6f:6f:a2:06:ae:c2:2d:08:23:08:82:99:0d:ae:b3:
                    38:31:fe:ff:03:6f:50:73:77:af:5d:53:b8:b7:d2:
                    ca:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EB:AD:BB:C2:D4:DB:60:BF:5F:E5:2C:7B:F7:6C:56:66:44:77:28
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:6e:d7:9e:a4:e0:f1:9a:fa:86:7e:20:6e:29:a6:3e:2f:
         21:a8:72:64:99:20:fc:3b:d2:7a:ec:c7:90:3e:5c:65:ae:be:
         64:36:1d:60:0e:13:af:dc:fb:b5:86:13:d2:42:37:12:93:1d:
         75:90:73:f8:d6:7b:36:e1:bd:6e:34:b6:2c:cf:d6:57:c9:55:
         6c:af:99:aa:05:cf:26:c8:7a:9b:91:80:54:51:d5:c5:50:9f:
         6e:ec:19:22:0b:ae:48:6f:e9:27:64:34:db:25:20:db:71:e7:
         c5:31:f1:1c:57:25:a0:06:3a:51:8a:28:14:9a:44:c4:89:23:
         09:49:aa:4b:14:13:c6:36:3e:b9:94:71:d3:c2:42:0a:9b:69:
         ba:22:94:9a:11:0a:c0:a2:47:70:d1:d3:03:9e:1d:22:74:f3:
         67:e6:3d:b7:08:8f:89:d2:20:f3:7c:e9:d1:8d:89:96:b4:f4:
         28:14:9b:41:81:fe:6b:32:43:8e:4e:ad:88:a7:d5:f5:0c:41:
         04:ff:24:7b:40:a8:d4:8a:fb:e7:41:20:b5:a6:e3:b6:18:81:
         d1:4f:63:b5:5e:b0:bb:d8:03:b3:94:3d:e2:4e:19:04:9d:84:
         f5:0f:24:aa:7c:81:80:c8:2f:89:94:51:d2:87:e8:68:b2:ef:
         bc:fe:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:55:43 2025 by rpki-client