Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3136392e302f32342d3234203d3e20323632363131.roa
File:                     3136382e3232382e3136392e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          qRch1oQCDFZPnsu+HbD7Il5/55+XVnyRgEerO8YUa+E=
Subject key identifier:   FE:F9:60:2B:5D:98:DD:92:10:7D:E9:FF:1C:1F:90:21:30:B8:30:CC
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       765F287D08C40A2DA06E4F68710E0B67CB8A8DF3
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3136392e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:12 +0000
ROA not before:           Wed 19 Mar 2025 14:25:12 +0000
ROA not after:            Wed 18 Mar 2026 14:30:12 +0000
asID:                     262611
IP address blocks:        168.228.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 10:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5f:28:7d:08:c4:0a:2d:a0:6e:4f:68:71:0e:0b:67:cb:8a:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:12 2025 GMT
            Not After : Mar 18 14:30:12 2026 GMT
        Subject: CN=FEF9602B5D98DD92107DE9FF1C1F902130B830CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:a0:4b:4e:a2:33:12:d9:1c:a7:b0:07:47:
                    9b:2d:b0:d6:54:9a:53:39:b6:f1:5b:21:ff:53:31:
                    26:33:85:2e:38:06:58:aa:66:9f:55:0f:d0:e3:72:
                    9d:89:94:52:4c:f6:7a:ae:a2:ee:79:c5:72:81:7e:
                    07:33:96:03:9f:08:3b:de:80:d9:16:eb:6c:07:b4:
                    56:fb:8b:9b:4f:16:91:26:0d:0d:a0:bf:e1:52:ce:
                    9c:46:54:83:43:c0:47:a5:a6:a7:4b:b7:f6:77:16:
                    23:7f:c9:f5:72:b9:b6:a6:1e:62:c4:a7:66:a1:60:
                    14:2d:a5:52:d3:58:47:ac:32:6b:ad:f3:21:cb:ae:
                    2e:6c:f4:0f:30:0a:c6:fe:dd:08:b4:38:a0:29:e4:
                    49:8d:bc:0b:56:2d:9d:ad:7c:ba:86:ef:61:99:ef:
                    2b:64:55:2c:49:71:76:78:84:f1:5c:fa:37:e6:53:
                    31:90:31:3b:c8:2d:17:2f:0d:9a:6d:00:bf:9e:af:
                    fd:16:f1:b3:8a:38:76:1a:5b:bc:1b:1c:c6:77:e2:
                    24:f4:04:75:4c:dd:62:7c:d1:65:a0:41:6e:75:6d:
                    0f:92:28:6c:8d:8d:52:5e:90:7f:f2:a7:81:19:01:
                    a8:32:68:84:60:0b:b8:7a:86:f0:52:ce:83:e4:db:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:60:2B:5D:98:DD:92:10:7D:E9:FF:1C:1F:90:21:30:B8:30:CC
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3136392e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:17:84:1a:66:c4:22:96:c6:bd:1e:00:73:28:1e:4a:f9:
         bd:99:a3:be:7c:d1:21:b2:a3:fc:43:48:e9:b1:19:06:c6:46:
         5e:65:fb:30:e0:2a:f0:fc:5f:0e:f4:78:1d:cc:72:ea:11:81:
         1d:f2:2b:97:65:ef:a0:f9:c9:de:b3:5c:fc:e0:27:23:3f:4c:
         42:70:60:61:be:be:ca:85:42:66:2e:39:62:02:23:fe:1d:70:
         d6:95:71:4c:59:34:da:97:c1:9f:82:e8:11:a3:f3:78:2d:c9:
         8b:f0:26:fa:5a:36:fb:e7:c5:7b:e8:56:7b:23:a4:44:bb:45:
         da:5a:af:63:f6:9f:b4:3f:da:9b:11:86:de:fc:df:ea:37:40:
         3b:3d:12:00:c0:22:ac:1a:b9:cc:05:a7:ad:c6:d6:4b:5c:bc:
         96:db:fd:63:84:a6:e3:b2:e3:05:16:b0:f0:0e:45:88:ce:9c:
         ef:c1:7d:30:25:9a:a8:2f:fb:ba:83:48:da:62:f6:ff:82:02:
         2f:e0:6f:fe:d1:85:7e:89:18:b3:55:ff:cb:28:9f:8d:91:7d:
         c1:d8:7a:ad:b2:b0:74:3a:80:1c:97:a0:91:94:04:bf:02:12:
         63:40:cf:87:15:c3:be:52:df:e6:3d:21:0b:f3:06:f2:ba:1c:
         60:ae:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:26:56 2025 by rpki-client