Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa
File:                     3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa (raw, json)
Hash identifier:          NWnxh6GhDoqnsKlpAvb3P82Ykq1Lf5tVvPsJktOu4Ww=
Subject key identifier:   B5:15:3F:9D:66:27:B7:D8:74:0D:89:95:F8:C6:DD:1F:0D:47:6F:40
Certificate issuer:       /CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
Certificate serial:       117415AB1A4912BC57742360F58E1BA37F26549F
Authority key identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa
Signing time:             Fri 02 May 2025 21:22:43 +0000
ROA not before:           Fri 02 May 2025 21:17:43 +0000
ROA not after:            Fri 01 May 2026 21:22:43 +0000
asID:                     270980
IP address blocks:        168.196.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:74:15:ab:1a:49:12:bc:57:74:23:60:f5:8e:1b:a3:7f:26:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
        Validity
            Not Before: May  2 21:17:43 2025 GMT
            Not After : May  1 21:22:43 2026 GMT
        Subject: CN=B5153F9D6627B7D8740D8995F8C6DD1F0D476F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:cb:58:cb:eb:07:92:41:73:2d:28:5c:e5:
                    4c:e5:15:3d:f4:52:0d:6d:fd:42:21:de:46:35:1e:
                    70:81:3d:23:ce:24:f5:78:8e:38:cb:88:37:63:a5:
                    ea:b8:7f:17:ac:b5:0c:aa:b4:ed:3e:f8:e8:41:d6:
                    8c:2a:77:91:0b:57:fa:75:92:7c:e9:36:4b:fe:06:
                    13:2e:af:3b:b0:07:fa:81:90:24:10:0b:9f:19:2f:
                    5c:a5:07:13:d9:f9:ff:1c:50:78:90:40:a2:6c:a6:
                    a6:1e:39:53:9b:c8:9f:7c:c1:57:c0:00:9b:2d:51:
                    77:05:07:11:d9:77:ec:54:88:19:28:0f:b0:e6:b8:
                    31:f6:7a:e3:44:4c:be:53:bb:b8:b4:33:cf:91:40:
                    37:84:ef:f3:7a:e5:46:13:2c:83:80:54:81:11:75:
                    4d:d6:40:1f:bb:37:07:36:60:49:fa:ab:b8:af:45:
                    41:07:38:b3:5e:2d:58:55:d5:6b:36:c3:2b:50:7d:
                    9f:31:01:9d:fe:c9:2d:ca:5e:7d:68:53:f7:b7:26:
                    8f:e8:2b:a4:29:6d:b8:b7:da:2c:9c:90:fa:d1:2a:
                    92:d2:00:89:e6:16:3c:35:ef:df:71:86:83:f1:bc:
                    e9:57:fa:f5:95:1b:fc:48:74:0f:f6:30:9b:fb:3d:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:3F:9D:66:27:B7:D8:74:0D:89:95:F8:C6:DD:1F:0D:47:6F:40
            X509v3 Authority Key Identifier:
                keyid:DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:85:50:82:f2:07:3a:71:ac:d6:f6:1a:b7:70:bc:ad:36:90:
         ac:6c:07:f5:fc:a4:4d:ed:9d:ad:e9:34:d0:52:dd:7e:2a:40:
         91:00:69:87:e3:d7:4b:39:bc:cb:a2:21:f1:a9:9f:a5:56:c1:
         b0:e8:b3:cc:17:26:18:ed:e6:83:6e:c3:33:d1:7f:74:5b:35:
         58:93:0f:ae:d0:eb:79:c6:b5:b6:60:00:20:63:e5:ce:ba:3c:
         27:07:37:d2:64:7c:c5:8c:a5:90:e5:6a:f1:b3:f9:7c:ca:6d:
         4b:5b:95:5a:35:d3:65:b7:e6:65:c5:ee:f8:9d:00:f4:a3:84:
         77:64:d7:3a:91:14:ad:36:f2:16:0f:3f:78:22:54:fa:72:45:
         1e:45:33:e0:71:66:e4:6d:79:51:8d:b4:bf:32:5f:ee:b9:d8:
         10:e3:10:a9:1e:24:8f:d4:b1:8b:27:c9:5f:06:23:26:c4:f8:
         d6:cf:82:25:2b:d1:32:2b:a1:3f:1c:cf:e2:6e:42:cc:18:ff:
         0e:a9:4d:a7:e7:a0:39:92:58:5e:7b:38:3a:02:93:26:8e:80:
         8f:ae:22:5e:f8:7f:ef:0d:0b:97:da:52:f7:c3:aa:4a:5f:29:
         a4:77:30:dd:52:f2:39:03:98:1f:d9:d0:78:d5:98:3b:0c:c4:
         c0:d3:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:31:57 2025 by rpki-client