Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/3136382e3233322e31322e302f32322d3332203d3e20323634393332.roa
File:                     3136382e3233322e31322e302f32322d3332203d3e20323634393332.roa (raw, json)
Hash identifier:          XQV9ITgLOsFBl27F3MB4ndsCDl++tbva0OH6+A6TgBM=
Subject key identifier:   FC:B6:C0:7A:57:36:CB:F0:0A:AE:37:80:B9:93:BE:09:3E:96:12:F2
Certificate issuer:       /CN=78BB725DD620FC3670B009AE72263BDA1E7AC92C
Certificate serial:       387C7031C07630FC011841EAC45D663A7C0B6830
Authority key identifier: 78:BB:72:5D:D6:20:FC:36:70:B0:09:AE:72:26:3B:DA:1E:7A:C9:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BB725DD620FC3670B009AE72263BDA1E7AC92C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/3136382e3233322e31322e302f32322d3332203d3e20323634393332.roa
Signing time:             Mon 02 Jun 2025 13:40:59 +0000
ROA not before:           Mon 02 Jun 2025 13:35:59 +0000
ROA not after:            Mon 01 Jun 2026 13:40:59 +0000
asID:                     264932
IP address blocks:        168.232.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/78BB725DD620FC3670B009AE72263BDA1E7AC92C.crl
                          rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/78BB725DD620FC3670B009AE72263BDA1E7AC92C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BB725DD620FC3670B009AE72263BDA1E7AC92C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 04:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7c:70:31:c0:76:30:fc:01:18:41:ea:c4:5d:66:3a:7c:0b:68:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78BB725DD620FC3670B009AE72263BDA1E7AC92C
        Validity
            Not Before: Jun  2 13:35:59 2025 GMT
            Not After : Jun  1 13:40:59 2026 GMT
        Subject: CN=FCB6C07A5736CBF00AAE3780B993BE093E9612F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:82:2f:5d:b7:20:03:0b:a0:b9:48:d8:fc:
                    b4:11:0a:e4:e8:80:69:d8:aa:6e:e7:79:db:e0:e3:
                    5c:f4:55:f2:93:b6:5b:e2:1a:b3:b5:d5:f0:7a:7b:
                    55:dd:91:41:ef:05:05:2c:d2:71:e2:d5:07:96:7b:
                    7f:82:a7:3d:07:2d:ad:82:83:f6:6d:fa:8f:01:6a:
                    d8:6e:71:c6:5c:76:a3:6b:9f:8e:a1:ba:b5:b0:49:
                    ef:23:2c:72:2a:23:2a:1f:cf:d5:bc:bc:11:0f:2a:
                    1b:a5:19:36:23:d7:a2:18:d1:36:e3:4a:d0:e2:dc:
                    83:fb:c3:93:eb:4e:bb:4a:33:34:b7:94:cf:4f:a9:
                    fb:f7:a3:ed:f4:da:e3:6c:c6:ed:7f:b1:db:a7:82:
                    f3:bc:9a:ae:51:91:6b:a0:0c:f5:35:dc:0f:01:66:
                    32:30:76:28:60:fa:cd:0d:3c:de:31:f7:fe:30:1f:
                    a2:2e:ac:36:0c:e0:46:7e:ab:d1:a8:3f:69:cd:2b:
                    d2:c7:23:f6:0f:b7:bb:0a:f3:c6:82:16:f7:aa:14:
                    14:7c:f6:27:b4:24:51:72:ab:5e:fb:8e:11:46:15:
                    2b:3c:9f:36:1f:ac:c9:d4:7c:9c:73:bc:44:ab:0b:
                    9d:fb:83:71:77:2e:c8:16:49:92:fc:19:07:41:04:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:C0:7A:57:36:CB:F0:0A:AE:37:80:B9:93:BE:09:3E:96:12:F2
            X509v3 Authority Key Identifier:
                keyid:78:BB:72:5D:D6:20:FC:36:70:B0:09:AE:72:26:3B:DA:1E:7A:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/78BB725DD620FC3670B009AE72263BDA1E7AC92C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BB725DD620FC3670B009AE72263BDA1E7AC92C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/3136382e3233322e31322e302f32322d3332203d3e20323634393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:fb:98:7e:a7:ab:06:b7:00:a6:27:eb:28:03:da:66:76:
         df:00:37:39:86:47:e1:4a:d4:a5:02:b0:b4:e4:88:61:f8:c5:
         57:10:d2:36:95:60:84:1d:f2:cb:80:da:97:5f:3f:cf:a2:35:
         5c:cc:c4:54:44:43:ef:96:31:53:11:fd:01:3c:e5:6a:63:ff:
         30:68:9f:13:f4:04:ea:e4:af:1b:89:37:46:6d:2d:b2:d2:25:
         13:eb:e0:c1:c9:d5:e8:1f:76:83:6d:53:51:96:a9:b9:dd:47:
         a4:5a:d8:be:ea:c7:05:c1:96:b6:38:fd:b5:fe:49:64:2d:78:
         8b:8e:33:eb:f8:cf:e9:f0:6f:8f:8a:27:90:83:d0:d6:16:d5:
         e1:fd:31:ab:dc:45:ac:64:75:a2:a6:13:b5:b4:7e:dc:f0:34:
         f0:9a:ce:f5:9d:56:2a:85:54:bc:83:20:51:53:f4:6f:c6:7c:
         38:f6:17:b7:00:65:a4:2d:b4:ff:6a:54:4f:88:c2:1d:f8:98:
         4c:bc:60:f1:6b:04:ca:63:20:b8:ec:1f:a4:2a:f0:db:72:84:
         d9:54:64:99:13:9a:61:eb:d4:f1:45:d7:bd:27:24:09:d4:89:
         cc:50:79:a8:31:d3:63:65:f4:a9:49:48:38:83:d4:41:38:cd:
         a9:5f:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:28:03 2025 by rpki-client