Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135352e302f32342d3234203d3e203532393434.roa
File:                     3136382e3230352e3135352e302f32342d3234203d3e203532393434.roa (raw, json)
Hash identifier:          WyB6mog//y7cyimLLdEpVLZDOaUxQVMlMzuhGhnXs1Y=
Subject key identifier:   E3:15:7E:2E:9A:BE:72:8B:75:75:41:D7:76:8F:A4:FF:04:9F:13:CC
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       135B4F249C3E1E2D56A283C5CE65CB1E7C9CD17B
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135352e302f32342d3234203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:32:00 +0000
ROA not before:           Tue 06 May 2025 14:27:00 +0000
ROA not after:            Tue 05 May 2026 14:32:00 +0000
asID:                     52944
IP address blocks:        168.205.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 13:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:4f:24:9c:3e:1e:2d:56:a2:83:c5:ce:65:cb:1e:7c:9c:d1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:27:00 2025 GMT
            Not After : May  5 14:32:00 2026 GMT
        Subject: CN=E3157E2E9ABE728B757541D7768FA4FF049F13CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:7c:26:86:e5:d1:3a:e2:ad:a0:b4:47:f8:
                    07:57:51:3a:03:6a:d9:00:21:ce:c0:f0:07:be:34:
                    c2:cf:16:4e:c8:2f:7e:5d:3e:73:5d:54:ab:4f:37:
                    8c:e1:4a:37:b0:80:92:a0:60:70:89:cf:72:1c:2f:
                    24:6f:bd:6d:0d:4d:74:a2:be:7a:ca:ce:a8:95:ba:
                    da:2d:38:82:1d:6a:a1:1f:95:21:1d:22:f5:32:d6:
                    2c:ba:a2:72:a0:34:40:b0:3b:0a:b3:6a:37:b2:7b:
                    f2:c6:fa:c2:69:16:71:03:15:05:ba:1f:f3:c4:f3:
                    da:c5:c7:7d:0a:26:7f:b1:97:2f:7b:bc:41:3e:0b:
                    96:01:e2:b7:1d:a6:ba:fc:8a:d2:1c:73:2e:4b:02:
                    35:1f:95:4c:e6:de:e4:f7:b0:8f:3c:4c:24:1d:ad:
                    a1:19:36:da:aa:20:28:69:5a:45:7f:33:7a:74:69:
                    5e:b6:e2:b5:47:36:d4:73:5d:1e:5a:1f:bd:4e:62:
                    b2:ad:af:de:d8:93:9b:64:1f:d7:00:07:6c:26:7a:
                    3f:fd:5a:2f:a3:44:3d:b2:b6:64:0c:ba:a1:b6:48:
                    b4:11:fd:dd:9d:6b:db:4a:36:ea:10:86:31:2e:be:
                    2e:4d:0e:a8:00:56:54:c9:56:30:17:b5:16:c1:1a:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:15:7E:2E:9A:BE:72:8B:75:75:41:D7:76:8F:A4:FF:04:9F:13:CC
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135352e302f32342d3234203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:56:1f:e0:57:2e:c2:04:66:09:c1:a0:b1:d0:cd:fd:18:
         c9:3f:3a:a7:ce:b0:43:42:58:0a:eb:b9:29:12:72:ea:32:a6:
         1e:3d:a1:6f:7c:c6:53:55:86:dd:f6:6e:69:86:bb:6f:e0:21:
         ed:87:bc:cd:ca:70:94:4e:cb:af:44:2d:ca:46:65:26:b9:c7:
         03:08:f5:bc:3c:e4:7c:5c:b5:0e:83:50:79:43:d7:5a:13:f7:
         9b:c7:84:4c:c9:69:a3:be:4e:e7:bc:97:16:bc:a2:41:aa:05:
         77:bc:bc:08:74:12:e7:b7:fc:9e:60:a8:76:69:0d:1c:4c:5a:
         a8:11:dd:5e:73:4e:71:6f:5f:ed:e2:f7:6d:a4:0e:e7:f8:ed:
         ec:69:32:29:ba:fe:1d:0a:7b:ef:b1:5a:7f:31:ac:7e:e2:b2:
         e8:17:25:8f:e9:d8:20:2d:53:d2:77:55:37:59:6c:9b:b4:c8:
         8d:7f:29:44:f3:61:da:0c:3d:7b:c1:79:da:0a:13:28:85:8d:
         68:f5:55:01:d4:57:66:e8:4d:97:32:b4:93:d1:09:39:75:74:
         59:d9:76:c8:25:00:4b:b0:70:fb:3b:27:0c:f0:aa:52:c9:2f:
         0b:30:a1:2d:de:2f:94:c0:4e:48:e6:af:98:c8:81:67:f4:9a:
         a6:44:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:40:57 2025 by rpki-client