Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137382e302f32342d3234203d3e20323635343337.roa
File:                     3136382e3139352e3137382e302f32342d3234203d3e20323635343337.roa (raw, json)
Hash identifier:          qIYnD23QvOGiTrR7ZhmR1VzJzD/1KZKzix2eSFZKYfc=
Subject key identifier:   A6:FA:B0:B2:84:07:E0:5C:6C:44:19:F4:6D:78:B3:48:FF:4F:90:03
Certificate issuer:       /CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
Certificate serial:       454C85F98FC3F64EC270A0F3EE474C8B732E6301
Authority key identifier: BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137382e302f32342d3234203d3e20323635343337.roa
Signing time:             Mon 28 Apr 2025 17:06:57 +0000
ROA not before:           Mon 28 Apr 2025 17:01:57 +0000
ROA not after:            Mon 27 Apr 2026 17:06:57 +0000
asID:                     265437
IP address blocks:        168.195.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl
                          rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 15:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4c:85:f9:8f:c3:f6:4e:c2:70:a0:f3:ee:47:4c:8b:73:2e:63:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
        Validity
            Not Before: Apr 28 17:01:57 2025 GMT
            Not After : Apr 27 17:06:57 2026 GMT
        Subject: CN=A6FAB0B28407E05C6C4419F46D78B348FF4F9003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:6b:46:23:da:27:20:c1:d6:6d:52:13:8f:
                    e3:da:79:c7:df:ab:a0:8f:44:8e:d9:26:8a:80:f3:
                    08:31:ed:84:cb:2b:8a:79:0e:aa:1e:39:3a:75:b1:
                    90:db:a6:9a:91:8e:53:0a:a0:0c:30:7b:10:29:7e:
                    f9:a3:78:07:2f:12:f3:e8:bd:86:6b:9d:5a:6e:3a:
                    e9:65:ac:99:a4:55:ce:fa:ef:b3:61:89:23:8d:f8:
                    c8:be:64:ec:a9:da:1c:00:50:82:0a:19:d5:af:4b:
                    5b:49:96:40:22:ee:dd:c6:87:b0:26:e0:49:c3:ec:
                    1c:0a:9f:72:02:7f:7e:aa:18:8b:88:06:e7:84:e8:
                    ef:29:7f:19:e8:5d:f4:6f:ee:c6:dc:b4:ca:6e:56:
                    e8:1f:c7:fb:e9:5a:f6:68:60:79:86:80:fa:ed:43:
                    24:19:bf:61:04:8f:19:5d:5d:44:62:1e:a4:ab:2e:
                    f1:34:da:c3:a3:12:8f:dc:7f:3e:70:d0:ba:ae:7e:
                    63:4f:76:cf:cd:cc:d1:16:d0:c2:60:e1:0a:32:01:
                    99:3a:b2:40:c0:14:b9:78:53:f1:8f:d5:56:75:53:
                    9e:6d:1b:29:02:ca:7c:98:5e:83:d2:b9:a6:ba:af:
                    50:82:95:e9:35:60:01:13:a3:1b:86:87:38:0a:81:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:B0:B2:84:07:E0:5C:6C:44:19:F4:6D:78:B3:48:FF:4F:90:03
            X509v3 Authority Key Identifier:
                keyid:BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137382e302f32342d3234203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:24:d3:dc:25:f4:aa:94:1b:19:e3:4e:39:03:57:77:be:
         40:3a:57:7f:0a:fb:00:d0:8e:91:2f:81:1a:3a:69:6e:9b:d9:
         74:55:cf:10:ff:3e:d7:94:91:7f:ca:1a:5c:d0:80:09:cf:44:
         14:00:09:1d:72:69:5f:95:9b:fe:23:6d:89:3d:4c:11:fe:85:
         bd:53:b6:12:e0:c4:37:8c:cb:29:27:28:b2:8d:b7:33:92:94:
         fe:00:f6:7d:1c:29:d9:3d:a6:aa:7f:ed:ec:56:0a:77:10:e8:
         cd:97:b5:f2:1c:31:86:5d:11:bb:d5:ba:df:1b:55:0d:b2:9b:
         ff:29:96:cf:b0:5b:c4:9c:db:3a:d5:a2:b6:ab:9f:e0:02:9d:
         fd:da:13:70:1e:80:2b:37:53:a7:c5:a7:52:d2:82:34:1e:0c:
         2c:78:03:96:f4:49:b5:66:67:a3:6a:54:96:86:23:dc:8e:5b:
         0d:66:b6:6b:e5:21:a4:6a:9d:ac:dd:96:18:c6:67:33:a5:b6:
         cd:4e:3c:a0:1f:4f:00:55:be:62:03:7b:f0:41:90:b6:74:07:
         a3:c9:63:a2:79:59:95:d2:b0:77:89:9f:4e:53:19:27:50:6f:
         bf:79:06:1e:16:8d:27:5b:0e:f8:69:bb:b2:da:01:1d:d2:25:
         bf:a3:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:53:23 2025 by rpki-client