Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137372e302f32342d3234203d3e20323635343337.roa
File:                     3136382e3139352e3137372e302f32342d3234203d3e20323635343337.roa (raw, json)
Hash identifier:          D1C79lBH+jVXW1EkY+7X/h8ZTrYeSHka0gMceLxNyuA=
Subject key identifier:   E9:33:AC:8C:05:69:51:F4:75:43:82:07:D8:08:E2:60:13:8F:60:EA
Certificate issuer:       /CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
Certificate serial:       593131441652A169591AC793E60A15229C30C353
Authority key identifier: BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137372e302f32342d3234203d3e20323635343337.roa
Signing time:             Mon 28 Apr 2025 17:06:46 +0000
ROA not before:           Mon 28 Apr 2025 17:01:46 +0000
ROA not after:            Mon 27 Apr 2026 17:06:46 +0000
asID:                     265437
IP address blocks:        168.195.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl
                          rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 15:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:31:31:44:16:52:a1:69:59:1a:c7:93:e6:0a:15:22:9c:30:c3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
        Validity
            Not Before: Apr 28 17:01:46 2025 GMT
            Not After : Apr 27 17:06:46 2026 GMT
        Subject: CN=E933AC8C056951F475438207D808E260138F60EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:c8:a9:70:70:e1:47:24:d4:35:77:8d:02:
                    55:8b:99:3f:ed:e9:90:c9:0d:be:a4:89:db:3b:f8:
                    f8:73:d0:10:ea:86:46:89:68:31:cf:85:b5:81:ee:
                    6d:ae:69:1f:97:5c:a6:ca:b9:d3:94:d3:e9:ae:2a:
                    d8:52:9f:64:24:f0:f7:a0:d5:d7:c9:c9:99:a5:5b:
                    41:bc:11:19:5d:83:5b:1a:0b:c8:c9:ef:e3:27:35:
                    56:c3:e9:ef:71:e6:39:9b:de:5b:19:b3:d3:85:6f:
                    17:9e:8b:ab:c9:bb:40:bd:26:18:61:3f:4d:3f:9e:
                    33:9d:bd:5d:2d:32:6b:82:d2:f7:87:bf:2c:63:d7:
                    2b:63:ba:06:ef:4f:bb:aa:f3:ad:ef:fe:68:16:9e:
                    0e:ce:21:00:fa:6c:ad:f0:4d:69:51:a8:39:43:df:
                    a6:06:a0:d1:22:b2:9e:d7:94:9d:1a:0f:58:21:96:
                    d0:fd:16:2f:b1:53:52:8d:3a:b0:01:97:ef:42:f7:
                    1f:1b:b4:09:aa:c3:b0:ac:d5:83:82:7d:96:aa:a6:
                    da:8a:12:01:ee:f5:df:ad:72:1a:ec:43:84:5b:1d:
                    54:fc:2d:29:e7:a9:dc:88:f8:53:8d:c2:2d:97:e0:
                    37:2a:e7:49:83:0a:01:59:0a:cc:92:06:7d:80:b4:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:AC:8C:05:69:51:F4:75:43:82:07:D8:08:E2:60:13:8F:60:EA
            X509v3 Authority Key Identifier:
                keyid:BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137372e302f32342d3234203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:8a:6a:f1:a4:bc:92:d0:17:20:f2:8f:37:a0:81:c4:5c:
         de:43:8e:e9:3f:06:65:ac:84:54:9e:76:68:34:a1:3a:94:b6:
         bf:ef:ce:b7:f1:a4:fb:26:0b:06:80:37:0d:f4:a7:53:b6:05:
         cb:1d:c4:7e:22:33:34:22:05:42:f7:61:50:bd:44:b1:fc:3b:
         16:82:be:b8:d1:9f:ea:39:c1:b7:01:72:f5:ba:4d:60:6d:90:
         fc:d3:4b:47:4e:cf:f9:40:c2:f2:38:9e:d4:f6:4d:ef:9d:4c:
         08:95:e8:44:d4:6d:81:fa:3b:28:c5:c3:03:0a:4e:81:9a:dc:
         72:5d:28:58:93:d2:d0:0e:15:fe:ea:f4:12:a7:b8:2c:92:09:
         81:31:cc:fd:5a:1a:5e:29:ac:04:cd:49:08:58:cb:3f:3c:fb:
         93:e5:c5:93:de:17:83:86:a0:9a:42:4a:f7:e5:12:ca:72:22:
         b4:1f:9f:69:00:ff:33:db:01:0a:c2:28:18:b3:3e:f6:f9:fc:
         54:43:36:10:a7:c1:3e:4c:8e:cf:f9:a4:86:95:42:e7:14:ba:
         3c:02:7d:7a:89:5f:d2:8a:bc:79:18:aa:54:75:8d:c8:c6:99:
         e4:91:ec:4c:9c:dc:0b:25:74:43:e7:3d:16:6a:8d:95:1a:eb:
         34:96:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:45:45 2025 by rpki-client