Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32342d3234203d3e20323635323935.roa
File:                     3136382e39302e3231342e302f32342d3234203d3e20323635323935.roa (raw, json)
Hash identifier:          XeU9QdJ95jkwzeU36O56NuL/L0pOPuzYg2O0pGRnMzk=
Subject key identifier:   DA:26:28:A4:34:2A:B9:74:CD:F5:24:DF:BC:3E:F3:4B:52:15:2D:F5
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       3136C09838DE9E0171CF42DAECD95F59CCC10CF0
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32342d3234203d3e20323635323935.roa
Signing time:             Sat 12 Apr 2025 15:02:58 +0000
ROA not before:           Sat 12 Apr 2025 14:57:58 +0000
ROA not after:            Sat 11 Apr 2026 15:02:58 +0000
asID:                     265295
IP address blocks:        168.90.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 14:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:36:c0:98:38:de:9e:01:71:cf:42:da:ec:d9:5f:59:cc:c1:0c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Apr 12 14:57:58 2025 GMT
            Not After : Apr 11 15:02:58 2026 GMT
        Subject: CN=DA2628A4342AB974CDF524DFBC3EF34B52152DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:0a:72:c4:08:b9:9f:4e:28:79:36:a6:54:
                    7b:35:ed:76:ff:6d:5b:1b:b7:f5:0b:da:7b:82:fd:
                    60:7b:29:cb:de:52:2a:90:59:60:8e:1c:43:ef:b0:
                    ea:ef:68:15:0a:ba:64:2c:0a:d9:68:ae:e1:38:39:
                    ef:60:39:3d:72:ea:9b:f9:76:97:99:fc:69:6e:08:
                    11:95:48:d1:bc:69:7b:27:35:a2:99:ec:fa:f6:2c:
                    82:f4:a6:d3:22:83:ca:3a:b0:6a:a0:66:52:65:af:
                    91:e4:90:e2:79:47:f9:df:ad:ca:09:d0:44:92:25:
                    4a:97:d8:cf:00:aa:5f:4a:c3:b8:13:07:2c:a5:29:
                    8c:0f:40:f2:be:83:23:64:3c:e0:54:2a:37:c5:3d:
                    8f:8e:c9:25:90:f8:fb:eb:31:ab:a5:e5:dd:c6:c8:
                    ba:52:a2:b6:00:ed:8d:f8:91:c7:a3:4c:78:be:76:
                    f4:8f:d1:1d:68:24:b0:f2:c1:af:69:18:95:c6:8c:
                    5e:21:f9:d0:fe:8a:b5:81:1d:ac:da:db:5f:8c:b2:
                    5b:09:b9:85:dd:79:ef:ff:a9:8e:17:f5:83:f7:47:
                    fb:02:d2:d4:30:3d:e8:09:c4:b2:7c:d2:57:df:d7:
                    6d:57:bb:8a:7b:59:5b:9b:59:8c:6c:97:5c:70:da:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:26:28:A4:34:2A:B9:74:CD:F5:24:DF:BC:3E:F3:4B:52:15:2D:F5
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32342d3234203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:22:0a:fe:22:b1:c2:f5:1b:c3:0d:6e:5a:e7:2a:23:a0:73:
         fc:03:17:1c:5c:0f:9a:c1:75:3b:ce:83:27:fb:84:c9:f2:a8:
         a9:ab:ba:98:b0:6b:0b:ad:09:48:8d:e8:1a:3e:41:97:3d:4f:
         1d:98:b3:73:45:3f:1e:62:f6:01:5d:bd:f0:1d:4c:56:ec:dd:
         07:44:e1:13:92:74:61:7d:ef:b2:f7:ad:0c:30:cf:ae:0f:3b:
         f0:f9:57:eb:fa:30:a6:45:c3:31:3d:31:29:51:a6:f2:ec:60:
         92:31:59:27:86:5b:35:03:4c:21:c6:9f:47:f1:ee:ab:a8:de:
         a4:11:04:86:e6:ad:41:44:a7:ef:d7:13:98:cd:9d:b2:cb:e2:
         7a:d7:49:2a:cc:a6:fd:94:fb:78:59:e9:79:bf:41:e0:63:ae:
         6d:db:49:25:d9:7d:d5:4f:2b:b7:2b:11:b0:2d:9b:9f:ff:55:
         ec:39:21:82:11:cb:cb:1e:42:34:7b:ef:76:82:0a:34:58:9f:
         42:12:5b:d8:4c:1d:94:27:ab:8c:fb:84:e7:66:3a:e1:d9:11:
         ea:15:eb:c8:66:4e:dc:3e:9a:86:03:21:f0:c1:87:d2:64:09:
         3b:4a:08:72:ea:17:c3:a9:9d:2a:69:41:4b:f9:d2:d5:4a:39:
         88:c0:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:52:31 2025 by rpki-client