Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa
File:                     3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa (raw, json)
Hash identifier:          zIpFHpl0NjG4j1jIuF7zIzE8MexII0DnHNZVW+FPO2o=
Subject key identifier:   C7:00:C1:80:6A:1A:26:4D:28:3E:EE:0A:1A:87:CA:7A:BD:38:36:66
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       74D7D641E69CE902ECB0BDF092E397868F8124F6
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa
Signing time:             Sat 12 Apr 2025 15:02:56 +0000
ROA not before:           Sat 12 Apr 2025 14:57:56 +0000
ROA not after:            Sat 11 Apr 2026 15:02:56 +0000
asID:                     265295
IP address blocks:        168.90.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 14:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:d6:41:e6:9c:e9:02:ec:b0:bd:f0:92:e3:97:86:8f:81:24:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Apr 12 14:57:56 2025 GMT
            Not After : Apr 11 15:02:56 2026 GMT
        Subject: CN=C700C1806A1A264D283EEE0A1A87CA7ABD383666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:61:95:6d:94:cf:98:d6:cd:e4:f7:50:05:
                    1d:22:56:31:89:f1:f7:cd:85:73:3a:c7:01:97:75:
                    78:34:26:fd:9d:e5:f3:27:b6:79:21:5c:e7:90:01:
                    f3:eb:be:b1:e4:aa:2c:6e:c6:a2:c6:14:a6:cc:ac:
                    cf:84:0f:55:81:6d:0f:fa:80:ff:0f:8c:5b:2a:61:
                    b9:87:4d:02:1d:3f:fb:36:39:6e:79:d0:8d:6c:23:
                    03:7c:b4:16:17:67:2d:49:ce:3a:5d:62:5e:2f:a0:
                    11:dd:92:9f:38:fd:f0:ab:05:e6:53:da:c0:c3:48:
                    44:ab:4a:bb:38:b9:d1:82:fc:18:b2:be:1c:ff:0b:
                    69:50:78:2e:35:7a:91:f3:2f:2f:f8:cd:17:f4:c3:
                    33:ac:a6:f2:6b:a1:2a:71:c5:48:86:df:2e:e0:f9:
                    98:be:fd:1d:95:cb:b3:82:75:ab:4f:94:be:e9:4d:
                    87:6e:af:b6:6d:6b:e2:67:4f:31:0a:6a:ea:cf:4c:
                    8f:c7:bf:e8:f3:07:a1:d7:5e:b9:16:ff:4c:5f:0f:
                    0b:f7:73:b0:4d:12:b7:82:e4:ff:44:7e:85:07:21:
                    fb:26:26:b1:e5:52:3c:fd:df:a8:08:3b:4e:01:6d:
                    78:56:98:f2:d7:e8:5a:2b:69:6f:e9:5b:18:39:d0:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:00:C1:80:6A:1A:26:4D:28:3E:EE:0A:1A:87:CA:7A:BD:38:36:66
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:6b:92:6e:eb:bc:84:63:94:dc:4a:68:65:53:99:07:02:
         bf:c9:e3:eb:2c:45:33:d3:c5:1e:a3:5c:bc:7f:c4:2e:06:e1:
         99:2e:36:51:9b:3a:97:c3:eb:1d:71:97:2f:e1:d7:9b:c7:65:
         6f:51:c0:09:b1:2e:61:33:0c:21:33:7d:19:49:b3:84:0f:c9:
         99:ec:93:a0:11:3d:b6:4d:92:5c:0f:80:e0:5f:b3:e8:af:15:
         0b:ef:00:8a:6f:73:fe:7e:36:22:a2:1b:41:d8:ad:64:d6:84:
         07:8c:b9:b1:4d:ce:c4:ef:34:7b:0c:c1:e6:75:7b:39:c2:31:
         13:8b:3e:ba:2d:c5:22:f7:9f:62:8a:b0:2e:b1:e3:21:26:dc:
         61:7a:c4:b7:5f:3a:cf:c5:46:f2:8d:26:ee:5d:5d:23:b9:42:
         49:7e:de:17:e2:c7:d2:b8:f1:b2:3b:b1:47:43:53:31:90:1e:
         30:b4:bf:19:6e:e7:0e:8d:11:41:04:11:0f:03:19:95:32:df:
         d4:24:c5:8e:1b:a6:7b:28:0b:64:15:95:1e:16:2d:06:e3:2a:
         01:c0:25:1b:b1:6e:97:86:71:30:db:b2:f6:2a:9b:f1:fe:72:
         ae:68:91:a9:bf:1e:ba:20:da:dc:a8:9f:31:fb:bf:d5:5c:7e:
         8c:fc:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:27:32 2025 by rpki-client