Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/3136382e3232372e36302e302f32322d3234203d3e20323634383736.roa
File:                     3136382e3232372e36302e302f32322d3234203d3e20323634383736.roa (raw, json)
Hash identifier:          lHmKigbnys/AlDmuQcLMXQbEySqFh0VG7JZegt2BOqY=
Subject key identifier:   B6:5B:72:A4:F8:1F:37:64:99:C8:D5:78:EC:7F:4F:82:27:A0:8C:9F
Certificate issuer:       /CN=01BE770C878B9D4B6C5F729CF1FD4CA769B68676
Certificate serial:       4F5ACF493E6DD6694098C735635C5E06FB3BF836
Authority key identifier: 01:BE:77:0C:87:8B:9D:4B:6C:5F:72:9C:F1:FD:4C:A7:69:B6:86:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/3136382e3232372e36302e302f32322d3234203d3e20323634383736.roa
Signing time:             Thu 13 Mar 2025 12:15:21 +0000
ROA not before:           Thu 13 Mar 2025 12:10:21 +0000
ROA not after:            Thu 12 Mar 2026 12:15:21 +0000
asID:                     264876
IP address blocks:        168.227.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.crl
                          rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 May 2025 08:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5a:cf:49:3e:6d:d6:69:40:98:c7:35:63:5c:5e:06:fb:3b:f8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BE770C878B9D4B6C5F729CF1FD4CA769B68676
        Validity
            Not Before: Mar 13 12:10:21 2025 GMT
            Not After : Mar 12 12:15:21 2026 GMT
        Subject: CN=B65B72A4F81F376499C8D578EC7F4F8227A08C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:b2:ff:fb:0f:93:9a:26:12:18:3d:e0:f5:
                    6a:a2:ef:92:de:52:24:43:0f:40:0e:6f:ba:3e:b9:
                    73:aa:77:e7:3c:5c:1f:f5:b3:6e:36:88:e2:71:b4:
                    f7:6e:ce:ab:dd:a9:fa:c9:8e:29:dd:68:59:ea:4f:
                    06:82:2f:b0:14:b3:8f:f0:81:2d:cc:55:19:74:f5:
                    6b:0e:c0:c6:7b:8a:ce:c9:db:bf:47:29:81:16:0e:
                    b8:34:ff:17:8a:4f:37:74:67:54:9a:fe:2a:8a:2f:
                    8e:14:3b:55:ad:7c:c5:82:b7:46:90:b4:b7:ae:c4:
                    04:b8:76:29:8e:e1:16:a9:08:81:4f:f8:b5:6c:d6:
                    86:fc:d4:c3:93:b6:e2:a7:a1:34:c0:57:40:cd:82:
                    9c:c9:e5:23:7a:97:de:a3:b7:31:ad:61:6d:7f:63:
                    8c:50:cc:12:8b:1b:bd:6d:6e:9a:01:ca:bb:a5:22:
                    07:75:15:06:c4:06:c7:ea:db:10:52:ea:06:cd:fe:
                    a6:4d:09:88:ff:71:09:d6:bf:92:2e:d3:76:01:29:
                    9f:1c:a8:0d:90:66:e7:89:91:da:e9:01:be:7e:24:
                    79:49:e8:34:a5:b1:74:40:1f:7c:18:e8:10:3a:00:
                    9d:0e:44:89:27:33:a3:60:e6:63:4c:1f:97:7f:9a:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5B:72:A4:F8:1F:37:64:99:C8:D5:78:EC:7F:4F:82:27:A0:8C:9F
            X509v3 Authority Key Identifier:
                keyid:01:BE:77:0C:87:8B:9D:4B:6C:5F:72:9C:F1:FD:4C:A7:69:B6:86:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01BE770C878B9D4B6C5F729CF1FD4CA769B68676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xBoBDpk4muRyxxLa4oZqcTzg3MNZJcVhwegqn5TDUa4/1/3136382e3232372e36302e302f32322d3234203d3e20323634383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:75:c1:74:69:89:1c:7a:b1:b1:eb:8a:da:24:9d:30:3e:d1:
         ee:de:cb:82:46:67:c3:64:5a:65:3b:fd:fa:01:10:42:40:e0:
         df:57:a7:3c:69:2f:a9:9a:b6:d0:9d:43:39:f1:6a:24:51:22:
         b3:bf:4a:39:98:f7:c1:47:22:6f:f4:3c:63:89:6d:8a:80:46:
         75:30:d8:29:34:09:6f:a5:eb:a1:30:49:5c:69:ab:cc:b3:45:
         c5:80:f5:58:38:3f:3c:6b:58:a5:33:ec:7a:d8:17:dc:5e:e0:
         46:3e:a6:83:f8:ce:3c:7c:f0:55:4e:24:de:3c:87:3f:30:83:
         97:10:44:a7:65:e6:1d:1c:87:cd:e1:a3:b9:f2:31:47:87:bf:
         2c:4c:f9:5d:73:0e:df:a3:e4:93:5c:68:aa:d3:60:ec:a8:57:
         72:3d:08:4a:f3:42:b0:5c:14:73:dd:9d:d3:a6:56:5a:c5:09:
         0f:75:85:ec:3b:1a:6c:47:6c:35:9d:72:bf:f1:67:3f:8a:31:
         71:b7:4c:71:7b:67:93:f8:99:c5:9b:23:f7:73:18:2e:74:b1:
         b3:3d:65:d6:2e:a4:dd:4c:a6:24:7d:68:44:e2:4f:72:d6:81:
         12:73:42:0f:cb:66:ce:2b:da:c9:4c:59:26:e2:09:a3:84:39:
         f0:e3:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:54:52 2025 by rpki-client