Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3234203d3e20323635333134.roa
File:                     3136382e39302e35322e302f32322d3234203d3e20323635333134.roa (raw, json)
Hash identifier:          pWMcT9+w2i5n30ps7Uc3O0J5G0bTps79UAY+3vAcSdo=
Subject key identifier:   C6:23:8A:75:AA:73:A4:A4:9B:72:B3:42:93:9F:0A:28:B1:5B:00:0C
Certificate issuer:       /CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
Certificate serial:       7B2B82F29BDA72EA98CC98BA9F0DFC7B4CD24CF7
Authority key identifier: 6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3234203d3e20323635333134.roa
Signing time:             Wed 07 May 2025 20:31:27 +0000
ROA not before:           Wed 07 May 2025 20:26:27 +0000
ROA not after:            Wed 06 May 2026 20:31:27 +0000
asID:                     265314
IP address blocks:        168.90.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl
                          rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 14:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2b:82:f2:9b:da:72:ea:98:cc:98:ba:9f:0d:fc:7b:4c:d2:4c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F9672098FA97F6AFC6506273D5BC75FAABA2C
        Validity
            Not Before: May  7 20:26:27 2025 GMT
            Not After : May  6 20:31:27 2026 GMT
        Subject: CN=C6238A75AA73A4A49B72B342939F0A28B15B000C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:76:42:00:25:2c:66:4f:fb:58:84:08:1b:
                    aa:d6:5a:7a:c6:34:58:b2:98:be:92:ad:6b:7f:8b:
                    cc:f7:72:91:a4:df:aa:a3:63:95:e4:f3:1a:b2:72:
                    7d:bd:a9:8e:c7:95:6a:d4:28:e2:a7:9a:7b:52:3f:
                    1b:ea:70:e9:72:44:5e:78:ad:f8:36:5a:31:7e:1f:
                    d8:e8:a1:b9:9d:e2:c5:5e:5c:80:22:58:1d:1d:0a:
                    fe:b3:58:7c:c9:b4:f3:48:03:d5:49:14:9e:40:75:
                    cb:1d:b6:38:84:6d:d2:07:c5:a2:5d:1a:fb:f7:e5:
                    19:f9:0b:00:f4:94:18:0c:0b:18:68:c7:25:ac:3f:
                    06:ac:27:03:14:ed:72:3b:1b:c8:21:85:6c:2b:b2:
                    ce:87:83:68:1e:5d:d7:8e:cc:61:2e:da:9e:bc:09:
                    1e:84:af:19:99:75:a7:f8:88:6b:20:10:5a:1a:18:
                    54:35:c7:3f:05:0b:ca:f7:50:3b:aa:e1:8c:83:c2:
                    14:ac:00:19:83:e4:0b:47:45:51:7f:fb:2f:40:2c:
                    29:9e:b1:c6:dc:ef:28:fc:66:17:74:e2:d3:69:65:
                    ad:4a:5e:9c:f0:19:d0:20:e6:f3:fe:c5:91:99:a3:
                    d6:e8:f0:95:2e:f8:2f:b8:55:11:02:67:bd:ea:5e:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:23:8A:75:AA:73:A4:A4:9B:72:B3:42:93:9F:0A:28:B1:5B:00:0C
            X509v3 Authority Key Identifier:
                keyid:6C:7F:96:72:09:8F:A9:7F:6A:FC:65:06:27:3D:5B:C7:5F:AA:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7F9672098FA97F6AFC6506273D5BC75FAABA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/3136382e39302e35322e302f32322d3234203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:0e:04:06:f4:55:49:7e:28:63:9c:fe:67:fb:99:7a:3c:
         c1:95:2d:84:45:d2:bf:02:f9:5e:35:58:fc:7f:de:82:b9:da:
         0b:e4:53:9f:f5:d7:1f:9a:47:f3:e3:92:6b:ee:cf:3d:46:ee:
         df:87:81:8d:c2:d4:1f:f2:ce:98:78:f1:ea:ee:17:98:a2:51:
         e1:78:f8:ec:07:13:67:dd:b1:75:ec:f0:e7:a2:2d:d2:e5:06:
         00:8a:1a:d9:10:25:d3:85:96:c4:91:5a:c1:c1:a4:10:3f:aa:
         72:5c:7f:da:b5:85:de:03:3b:1e:86:e5:93:f4:70:87:30:b0:
         23:92:75:9a:d6:01:98:1b:b7:c3:34:fe:34:43:6e:62:8f:5e:
         34:05:86:cb:ed:a7:47:24:f9:ac:eb:00:f4:b9:98:e0:7d:a4:
         1a:1e:52:e2:60:a1:fe:4b:88:1f:f6:11:db:ae:02:98:dc:23:
         c4:35:e9:3d:ae:da:98:fd:f5:75:17:a7:e3:cf:bd:fe:d9:01:
         05:30:2d:6f:7c:fd:5d:63:7f:73:3d:47:73:ea:54:76:b3:2b:
         5f:81:3e:23:33:df:6d:eb:13:af:0e:2a:f1:7a:f0:fa:1b:04:
         05:93:75:dc:b8:4a:35:de:c6:27:e1:26:40:a5:2b:61:ea:de:
         1e:2d:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:16 2025 by rpki-client