Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa
File:                     3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa (raw, json)
Hash identifier:          zrUA2JelUr/zj18FkaaxxkENGXSchFJFJ27lH37QvkI=
Subject key identifier:   B2:69:60:4E:FB:9A:33:81:82:3F:6C:81:ED:81:58:19:E2:95:BC:4E
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       46C417D3966BBA6701F126ED48BB6DD398E117B5
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa
Signing time:             Sat 12 Apr 2025 15:02:57 +0000
ROA not before:           Sat 12 Apr 2025 14:57:57 +0000
ROA not after:            Sat 11 Apr 2026 15:02:57 +0000
asID:                     265295
IP address blocks:        168.90.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 21:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:17:d3:96:6b:ba:67:01:f1:26:ed:48:bb:6d:d3:98:e1:17:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Apr 12 14:57:57 2025 GMT
            Not After : Apr 11 15:02:57 2026 GMT
        Subject: CN=B269604EFB9A3381823F6C81ED815819E295BC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:fb:35:35:d8:b9:36:84:8e:d6:a2:58:32:
                    28:c4:23:1c:7b:86:12:f7:2b:ab:50:65:7a:e3:43:
                    15:8a:23:ea:1b:a7:3d:13:50:e0:7f:31:fa:e4:6d:
                    24:55:0c:4d:98:82:79:6d:bc:f5:e0:40:92:8e:df:
                    d6:dd:72:5f:0b:f7:19:c4:4d:f6:2c:5c:58:f8:30:
                    06:93:1a:3e:97:34:03:15:79:82:bb:70:68:fd:bd:
                    5c:4d:f6:8b:a3:1b:51:70:40:51:cf:07:14:19:03:
                    fc:f5:85:36:d1:78:c4:d0:02:c7:ea:52:d4:28:a6:
                    9f:8d:49:00:38:76:9c:a4:b0:0a:39:09:dc:7b:8d:
                    1c:29:88:0a:1d:5e:c3:8e:64:83:2a:1a:ac:a4:ef:
                    4d:b8:a5:c2:62:9d:7c:6d:3a:c5:95:ff:a9:81:fe:
                    1d:d2:74:3b:4d:f0:18:b5:ee:a1:69:7b:91:46:52:
                    11:ef:7d:62:df:bb:5f:54:08:9d:5b:f1:07:86:4c:
                    2a:49:39:d3:e9:14:e8:44:b0:42:5e:48:60:64:e4:
                    bf:dd:bc:8a:e9:93:f3:52:25:21:b4:ba:cc:bb:60:
                    3e:03:c4:c4:26:ab:3b:e9:b6:02:f3:99:c1:b8:76:
                    70:28:a8:57:91:f6:51:5f:ab:0a:6f:b2:c4:c1:69:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:60:4E:FB:9A:33:81:82:3F:6C:81:ED:81:58:19:E2:95:BC:4E
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:e2:7d:19:ab:94:c1:5c:af:be:c5:95:cf:17:a7:e2:66:91:
         98:8c:dd:47:ad:55:fd:30:3e:a7:de:38:c0:01:ca:c5:a3:d2:
         f7:46:5b:0f:60:28:fe:87:8d:fd:f2:46:01:a1:e8:a5:d2:0b:
         6e:3a:e5:96:2b:35:e9:6d:2b:46:f2:40:1f:af:00:80:20:6e:
         bf:47:e4:e6:53:73:b3:24:81:31:74:0c:92:33:0a:74:3e:78:
         5c:55:1b:4e:6b:6a:d5:d1:f6:6d:71:50:df:d8:dd:ad:65:58:
         f5:2e:be:66:af:d5:66:1d:65:81:3d:36:82:a9:16:f2:53:43:
         ca:89:43:6c:e8:4e:6f:91:6c:28:a3:25:3d:c6:ed:c2:19:6b:
         07:3d:23:07:34:01:dd:1a:01:b8:97:7f:dc:a1:85:be:b5:a8:
         7f:27:94:a4:4e:29:63:e0:e8:f2:d5:b0:5e:af:26:fc:a7:49:
         66:dd:f7:58:b8:69:4c:64:cc:40:94:59:fc:c5:97:04:fb:34:
         4e:8e:27:c5:d5:b3:33:03:bf:88:e8:4c:0f:db:c7:2c:44:d9:
         4f:df:ec:12:fe:40:f2:16:ab:36:2f:e6:52:4e:7f:f1:11:64:
         e1:21:07:f3:c4:f3:4b:5c:c6:b8:eb:e8:0f:15:73:99:e2:65:
         03:b1:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:59:09 2025 by rpki-client