Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137392e302f32342d3234203d3e20323635343337.roa
File:                     3136382e3139352e3137392e302f32342d3234203d3e20323635343337.roa (raw, json)
Hash identifier:          wOTTaqaAd9/6iNzuB3EVRrAcm2Kd5itDSrEeETJIMJI=
Subject key identifier:   2E:BA:32:5F:3B:9F:17:ED:B9:D1:23:D1:38:7C:48:BA:C8:C8:6A:9F
Certificate issuer:       /CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
Certificate serial:       4D283CC7763D1B625CFE019A618A070460909A27
Authority key identifier: BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137392e302f32342d3234203d3e20323635343337.roa
Signing time:             Mon 28 Apr 2025 17:07:04 +0000
ROA not before:           Mon 28 Apr 2025 17:02:04 +0000
ROA not after:            Mon 27 Apr 2026 17:07:04 +0000
asID:                     265437
IP address blocks:        168.195.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl
                          rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 15:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:28:3c:c7:76:3d:1b:62:5c:fe:01:9a:61:8a:07:04:60:90:9a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5F73267A0876B9F6FDA75E2467704D6BFB84D0
        Validity
            Not Before: Apr 28 17:02:04 2025 GMT
            Not After : Apr 27 17:07:04 2026 GMT
        Subject: CN=2EBA325F3B9F17EDB9D123D1387C48BAC8C86A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:49:f4:c2:23:23:af:f3:06:03:6d:69:8e:
                    a0:eb:d6:ac:35:1b:3d:65:7d:ac:5d:60:3b:5d:ef:
                    62:48:66:b1:bf:61:c6:40:dd:0d:13:d2:cb:4b:60:
                    2a:1b:af:2c:ca:b6:b8:09:b4:cc:62:1d:6a:e0:39:
                    a3:f7:09:a2:48:45:a2:ce:61:54:17:11:50:4a:3f:
                    0e:c8:ea:f9:c2:92:43:d6:d4:e6:0e:35:b0:58:b7:
                    d7:4e:9e:a4:06:77:90:38:cb:08:d2:58:7a:9c:f9:
                    6b:38:69:03:9e:ca:0b:29:20:02:a1:16:95:69:af:
                    ba:22:5f:04:8e:fa:a5:e5:eb:e9:23:18:a0:e2:a2:
                    97:87:25:4c:9e:92:93:00:3b:1c:82:86:a0:4b:b7:
                    b7:f1:ba:9f:d5:c9:c3:52:f4:83:bd:fd:d2:18:07:
                    fb:51:12:c0:a4:72:74:a0:c9:e2:58:e1:83:87:43:
                    72:28:c0:e0:55:35:ab:9e:e9:fe:7e:c3:09:95:c2:
                    7a:78:dc:f5:30:94:75:0b:37:6d:4d:53:8c:99:bd:
                    49:b7:72:f3:4b:20:c4:bd:fb:81:12:a0:8c:f3:2e:
                    94:ad:05:11:78:aa:91:28:1c:a3:a3:b5:ef:48:c7:
                    93:07:e9:17:de:9b:89:9d:7d:e4:4f:1b:7c:53:ad:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BA:32:5F:3B:9F:17:ED:B9:D1:23:D1:38:7C:48:BA:C8:C8:6A:9F
            X509v3 Authority Key Identifier:
                keyid:BF:5F:73:26:7A:08:76:B9:F6:FD:A7:5E:24:67:70:4D:6B:FB:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF5F73267A0876B9F6FDA75E2467704D6BFB84D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/3136382e3139352e3137392e302f32342d3234203d3e20323635343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:40:d3:25:67:1e:db:c9:b6:23:94:02:76:a6:ae:cf:46:fd:
         16:c8:4e:71:d0:ee:58:41:e8:9b:d3:c2:26:b8:98:c9:a3:7a:
         d0:37:d5:6f:86:f9:d3:6c:62:8f:2c:b0:79:47:21:11:2f:6a:
         10:c7:2b:f9:69:f7:0e:c1:7b:28:e8:97:2e:07:6e:11:38:53:
         2a:2e:3e:df:e0:68:b8:08:68:2f:cf:57:0d:d6:93:78:36:ad:
         20:b9:82:83:6a:53:8f:23:8f:98:80:53:1d:7e:84:04:10:d8:
         74:ed:1f:d7:b3:3a:53:a2:cd:75:77:d2:8f:04:e0:6c:43:79:
         d3:1c:70:e1:11:d6:50:3d:d4:c5:43:7a:c4:fc:db:0b:00:4f:
         f5:a5:0e:9c:ff:66:45:1a:72:09:7c:e8:4c:4f:73:19:60:5d:
         88:80:42:bc:c8:d2:19:e7:cf:cd:20:da:7d:30:ee:66:55:9e:
         12:93:98:5f:e2:24:2d:08:15:a0:85:2c:dc:14:0d:ce:0d:65:
         08:ee:b1:93:74:c3:0b:ab:80:ae:12:01:ae:cf:5a:cb:f9:88:
         de:0b:cb:38:60:8c:00:77:15:81:d7:64:66:e2:7f:3c:dd:2f:
         59:67:c2:bb:f2:65:84:35:c1:4f:ca:ad:21:74:4a:fd:74:30:
         9d:50:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:23:55 2025 by rpki-client