Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32342d3234203d3e20323633363431.roa
File:                     3136382e3230352e36322e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          teshNfxbIMhlFO7YMy9UetDhmZe0kBZA+t85MelPyMU=
Subject key identifier:   25:53:ED:B7:9B:87:B4:20:D6:CC:F5:E9:BC:84:B8:5A:84:DD:17:AD
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       048B4E9732B779E71342E7629D73FEFEE8DC9E58
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32342d3234203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:21 +0000
ROA not before:           Mon 30 Jun 2025 01:05:21 +0000
ROA not after:            Mon 29 Jun 2026 01:10:21 +0000
asID:                     263641
IP address blocks:        168.205.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8b:4e:97:32:b7:79:e7:13:42:e7:62:9d:73:fe:fe:e8:dc:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:21 2025 GMT
            Not After : Jun 29 01:10:21 2026 GMT
        Subject: CN=2553EDB79B87B420D6CCF5E9BC84B85A84DD17AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:39:ce:98:00:25:db:0b:6d:fa:f7:44:56:
                    6a:ce:27:92:07:d8:0e:dd:97:b3:1e:83:57:87:51:
                    12:a9:37:39:4f:20:d4:5d:aa:c0:93:d3:30:37:72:
                    78:1c:7e:3b:b6:e6:7c:40:9e:8d:ab:d9:e1:ac:a6:
                    11:c8:e6:a6:7a:f6:8c:cb:f3:74:5c:cd:d0:f6:8a:
                    45:6b:ec:79:81:bd:43:c0:4b:3f:df:d9:1f:e4:9c:
                    2d:58:0f:dc:83:9a:13:3d:44:c7:41:a1:d8:88:c8:
                    cb:f0:eb:3e:3c:a5:40:f9:91:6f:71:d0:70:03:55:
                    36:87:d7:8b:d0:6f:c7:57:04:f4:88:60:68:37:88:
                    3a:92:61:28:a7:e4:bd:fd:c5:9d:90:50:8f:21:b8:
                    39:df:a7:0e:59:6c:1d:da:ca:47:f1:f5:16:a7:2f:
                    50:90:43:1d:26:69:5a:83:8a:af:39:4f:c8:0a:ae:
                    ac:2f:49:5f:33:8a:3e:9c:60:25:93:7f:f6:68:e5:
                    d0:63:a3:6e:6e:d5:86:e5:07:f5:4f:1c:3c:53:a3:
                    c9:a8:52:3b:31:42:3e:5c:81:49:ef:56:8f:54:0a:
                    61:7e:02:94:74:76:d6:6b:0c:f6:a9:14:3f:20:c2:
                    54:1e:7f:b5:d9:21:a1:ec:9f:8f:84:44:19:85:c7:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:ED:B7:9B:87:B4:20:D6:CC:F5:E9:BC:84:B8:5A:84:DD:17:AD
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:28:23:d0:14:fe:7a:4e:a2:3a:e7:26:e9:2f:f8:1f:8b:f7:
         25:3d:88:40:ed:8a:88:0a:57:37:8d:0b:e8:21:26:6c:40:48:
         52:fa:08:3a:3d:e7:bb:45:97:bf:4b:46:14:85:bb:2d:16:f8:
         a4:8f:35:26:16:a7:c9:65:87:6b:b5:63:65:55:cd:ce:74:07:
         c7:cf:0e:d3:4f:3d:06:f3:44:c5:ee:65:d3:b7:49:12:78:05:
         81:24:23:c9:ab:27:98:7d:dd:a4:fc:29:b9:ac:17:e6:1c:e7:
         38:b8:95:ff:15:f9:53:d7:ef:52:47:1e:95:34:af:0f:d0:a5:
         66:de:39:56:66:1d:59:bf:8a:3d:46:70:7f:39:e6:9d:16:f7:
         19:b4:34:a8:ff:ed:dc:0c:44:6c:10:5f:21:64:55:a0:4d:ee:
         8a:b5:e1:a8:06:da:24:96:53:44:4a:83:2e:36:48:e8:4e:14:
         f6:ef:86:09:f3:fa:3a:20:f7:f8:77:d8:cd:ec:3e:d0:bf:ca:
         be:1c:b7:e6:48:e6:41:bb:a0:43:c5:89:b0:fa:a2:ae:bd:25:
         c7:73:a1:50:57:85:86:c5:d6:ca:79:5f:51:8a:b7:ec:39:30:
         5c:ae:68:1f:71:2a:c1:be:b0:0a:86:e5:12:7c:d0:91:67:c9:
         d5:44:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:56:56 2025 by rpki-client