Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3134382e302f32322d3234203d3e20323634343332.roa
File:                     3136382e3139352e3134382e302f32322d3234203d3e20323634343332.roa (raw, json)
Hash identifier:          fChbI+iH/E5Rt/yCAFNGtbBkNukaxVqvlfDA8ch5mw8=
Subject key identifier:   C4:99:F5:57:7D:76:93:36:05:86:6B:9C:12:D5:6D:4E:7E:B7:19:19
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       71085FD28EA73AAF125830201A4DC18D4545B8F3
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3134382e302f32322d3234203d3e20323634343332.roa
Signing time:             Wed 07 May 2025 19:31:24 +0000
ROA not before:           Wed 07 May 2025 19:26:24 +0000
ROA not after:            Wed 06 May 2026 19:31:24 +0000
asID:                     264432
IP address blocks:        168.195.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl
                          rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 09:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:08:5f:d2:8e:a7:3a:af:12:58:30:20:1a:4d:c1:8d:45:45:b8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: May  7 19:26:24 2025 GMT
            Not After : May  6 19:31:24 2026 GMT
        Subject: CN=C499F5577D76933605866B9C12D56D4E7EB71919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:08:17:78:20:32:45:97:e4:ca:35:db:11:
                    bd:47:74:38:dd:92:83:60:9f:6a:e0:57:b0:e7:e2:
                    60:ff:e0:69:a4:78:9d:45:a8:c6:4f:bc:22:57:62:
                    07:5b:e4:8e:6d:97:d2:28:91:6c:1e:7a:1e:d7:95:
                    87:3b:5f:fa:0c:c0:fd:af:b6:c0:b1:77:33:e6:95:
                    a6:40:f9:21:79:8f:cf:3c:86:f8:dd:0f:42:1c:cf:
                    01:f3:a7:c6:67:52:bb:9f:b0:a6:e0:ad:c9:5d:56:
                    c3:1d:8a:29:93:aa:71:12:23:3e:0d:41:1f:c3:38:
                    38:96:95:f7:0f:f8:5d:99:99:34:8f:88:33:ad:13:
                    4f:5f:fb:c3:ae:aa:a8:89:b5:99:1e:c4:51:7a:8a:
                    ed:88:b5:47:eb:30:47:ae:00:1d:a2:78:8e:45:f3:
                    69:33:1f:83:8f:eb:56:33:0d:c8:69:04:de:b5:92:
                    2c:b7:64:b3:41:45:d6:64:cd:6d:01:c6:68:77:e7:
                    e2:b5:7d:0e:9a:32:27:75:42:69:15:b3:85:02:09:
                    70:45:3c:2b:b6:82:22:26:b0:f8:f2:67:47:12:f7:
                    5d:79:80:f3:d7:9e:32:f3:fd:3a:9a:5d:3c:8b:ee:
                    32:39:76:b7:8c:0b:dc:69:b9:85:71:6f:ff:b3:69:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:99:F5:57:7D:76:93:36:05:86:6B:9C:12:D5:6D:4E:7E:B7:19:19
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3134382e302f32322d3234203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:15:98:d7:e5:4e:5a:51:bd:d5:ce:ce:c2:d4:53:ac:a9:74:
         fb:a8:e9:6b:ed:28:b2:72:32:fb:aa:be:37:2b:e5:84:6c:4c:
         7c:81:cb:ee:b6:e5:39:d3:76:4e:c8:59:55:d7:b3:55:be:7e:
         e0:9b:30:f4:d8:e5:98:21:56:da:83:37:96:06:ab:5c:c3:a2:
         6f:4e:0e:14:68:a3:c0:33:e9:da:12:b3:3a:2f:4e:38:47:55:
         e3:3b:15:5f:b7:e5:46:79:06:0b:55:3f:f9:48:6a:5d:7f:ed:
         b7:f4:61:31:7d:4c:66:65:4c:24:7c:d6:f6:81:2b:c6:ea:82:
         30:85:f1:ec:be:9a:8f:f9:dc:4e:b1:15:f4:63:7f:19:97:84:
         a8:bf:04:90:1e:ea:60:ec:e6:db:ce:52:f2:13:b5:c8:a2:9b:
         7b:a1:43:df:cc:9f:70:f3:f5:9e:dd:72:30:29:0a:a6:5a:31:
         bf:00:c9:93:e8:43:e5:d2:3a:e5:14:ad:3d:28:4d:32:d5:c1:
         b8:e2:e2:56:75:14:c6:c6:44:67:5f:65:3c:54:0b:5d:6b:06:
         d0:66:af:c4:6b:1e:35:31:c7:72:0d:37:3f:bb:8d:64:71:67:
         96:db:f8:93:b6:76:e2:2b:1d:28:41:f7:8e:e5:59:39:16:73:
         7e:d2:6d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:03:45 2025 by rpki-client