Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa
File:                     3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa (raw, json)
Hash identifier:          YGT7eR9A74xbUoTG2Zd/HC6GVpnv6i90vE4wFW91pTA=
Subject key identifier:   B8:7A:42:22:D4:74:C6:2B:28:92:6C:00:31:7B:87:2E:8C:61:94:9F
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       36453DF1EA715F66F0310F8BD5D49E83D24754BB
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265429
IP address blocks:        168.195.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:3d:f1:ea:71:5f:66:f0:31:0f:8b:d5:d4:9e:83:d2:47:54:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:54:7e:cf:10:fb:11:d4:e8:9b:cd:35:d1:
                    86:1b:82:d0:35:f8:6d:4a:e4:f4:83:a3:f4:5d:38:
                    61:d8:4b:63:2d:1e:49:69:73:20:54:68:2e:a8:bf:
                    c1:ba:9e:e9:70:54:ee:60:46:bc:38:73:f9:44:5e:
                    e0:42:dc:ab:fc:b2:96:7c:cf:5b:5d:29:f3:30:71:
                    16:42:53:48:ab:fc:66:46:96:ed:2b:eb:70:84:09:
                    a8:f3:c3:28:de:83:d3:a0:34:c8:e2:ce:9e:70:b1:
                    28:99:81:9d:f6:4b:79:1a:d3:6b:37:84:47:4d:10:
                    66:ad:57:46:cf:f8:3d:20:cf:14:9a:05:70:ef:c5:
                    98:f1:5d:6d:5f:fc:72:b4:84:9e:87:d9:e1:3f:66:
                    39:3b:02:0d:d5:a8:7f:02:45:58:ac:c2:46:c1:e4:
                    54:e1:48:24:4d:ff:6d:ae:59:c6:f2:fe:ed:ed:b8:
                    aa:bd:24:05:26:a0:ec:59:0c:51:70:b0:5d:54:3e:
                    da:28:03:e4:d0:3c:16:60:12:52:1f:7d:ee:36:e8:
                    21:07:b3:60:47:01:67:91:20:86:bf:54:79:fd:c1:
                    29:aa:6c:85:ab:8b:3b:6a:19:aa:04:80:33:40:9b:
                    42:da:e8:91:3d:9d:da:d8:ed:9d:9d:8a:42:31:04:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7A:42:22:D4:74:C6:2B:28:92:6C:00:31:7B:87:2E:8C:61:94:9F
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:10:40:f1:26:fc:1e:5f:e3:b3:68:a1:19:7c:80:44:43:
         6c:c3:e1:55:3b:0d:c1:27:30:db:af:03:93:08:de:0d:91:fb:
         44:8e:4d:79:3b:30:c1:cc:5c:cf:a7:f5:c5:52:51:d9:73:f7:
         e7:69:ac:0d:f0:27:99:eb:4f:a3:88:30:08:74:c8:ab:84:b1:
         63:fd:4b:03:f7:01:15:92:8e:4f:34:05:c3:41:4f:60:e9:f4:
         01:30:8f:8d:a5:08:eb:86:e6:f2:2a:a4:fc:34:51:7b:ed:9a:
         e5:d7:bb:a5:d6:a9:9e:34:82:a1:a7:ce:df:bb:a5:55:ff:5e:
         18:b8:1f:e2:f1:3a:3d:9a:df:18:57:b1:62:9d:4f:f1:34:68:
         43:ec:f4:2a:dd:5f:7e:4c:a1:30:fc:e4:ff:76:1d:ba:cc:5d:
         d8:7e:8f:40:a6:14:20:f4:2c:8e:19:be:ae:bc:18:93:2f:7b:
         6f:9c:74:5d:9c:a5:5f:7c:50:69:6e:fa:4c:38:d9:5d:d8:3e:
         42:38:50:4c:52:61:95:61:1e:ef:d8:c3:6e:e0:2e:8e:0a:45:
         07:f8:ef:4a:07:0a:e5:86:ee:ce:bd:d2:6e:64:43:23:e3:e4:
         ed:01:0e:29:ee:7a:25:35:aa:46:5c:28:82:e0:a0:b9:e8:09:
         fe:df:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:35:20 2025 by rpki-client