Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa
File:                     3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          YFKon24S/WEPBe2+IiEl86Zm0p6UjRlUplkQpiRB6yk=
Subject key identifier:   52:46:01:AD:C7:04:15:89:D2:24:A8:39:F5:72:8A:31:42:A5:BB:40
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       3FF33D47379AE46E7A8E351651B4C2906D08D37B
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 01 Apr 2025 15:26:44 +0000
ROA not before:           Tue 01 Apr 2025 15:21:44 +0000
ROA not after:            Tue 31 Mar 2026 15:26:44 +0000
asID:                     264952
IP address blocks:        168.232.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f3:3d:47:37:9a:e4:6e:7a:8e:35:16:51:b4:c2:90:6d:08:d3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr  1 15:21:44 2025 GMT
            Not After : Mar 31 15:26:44 2026 GMT
        Subject: CN=524601ADC7041589D224A839F5728A3142A5BB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:8e:04:0a:3a:c2:e1:c1:32:1b:6a:65:c3:
                    1c:ff:e2:30:54:8f:2e:64:a6:a6:72:cf:26:13:e2:
                    48:5b:19:5e:4e:ca:25:e3:bb:7f:1b:3c:8a:90:a0:
                    cb:d1:2a:48:e5:3a:86:f9:c5:77:94:cf:8d:d7:2a:
                    c7:a9:c7:f4:a6:fd:67:8c:1d:ec:b1:a8:ee:b8:f2:
                    8b:93:2b:c0:86:63:6d:0e:6e:22:2f:28:b1:28:2b:
                    c0:96:03:06:47:b3:06:fc:7c:c4:8e:aa:4c:c0:46:
                    ca:0a:e4:95:f9:c9:b6:80:25:72:89:76:7a:3b:f0:
                    23:e7:60:7d:aa:32:04:e7:09:38:66:d2:91:ba:dd:
                    e2:fa:68:d4:48:18:8b:52:73:7d:b0:6f:f3:9c:a6:
                    2b:ae:23:51:52:9a:84:ae:e2:9f:8a:ff:e2:d5:30:
                    78:dd:f5:ba:b0:12:db:f8:33:12:28:40:7a:44:ff:
                    ab:de:8a:8b:31:b0:33:09:e7:b2:97:00:bc:e5:d6:
                    8b:88:91:67:18:81:19:55:01:8c:d1:01:ec:c1:61:
                    41:de:0c:7f:cf:54:6a:ea:79:f4:77:8b:7e:59:e7:
                    af:a8:5a:be:e9:14:4f:c1:e3:59:89:d2:0c:84:78:
                    f4:11:a3:9e:26:64:0c:31:ab:a8:25:2a:0f:6a:d2:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:01:AD:C7:04:15:89:D2:24:A8:39:F5:72:8A:31:42:A5:BB:40
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1f:c0:b9:24:ce:cd:a1:1b:e9:5f:b4:64:e8:93:4b:15:05:
         2d:c8:c8:a4:9c:ce:be:f9:fe:68:ed:5f:da:9d:eb:63:b3:ae:
         a0:0b:55:2b:79:39:e3:63:0a:22:5b:31:a2:36:27:a5:2d:56:
         f6:2e:16:78:43:c3:a8:c2:9e:4a:de:3d:06:82:e5:ae:e1:28:
         64:6a:d4:55:31:f8:c0:d8:2b:93:2e:33:25:3f:f1:3e:b9:3a:
         d8:86:08:94:f2:2f:b0:ac:b9:41:e7:90:c0:a9:f4:36:a8:9d:
         a4:42:47:12:1b:ea:17:84:76:1c:88:ac:83:6e:f1:31:71:09:
         e9:a7:0d:46:59:98:af:9c:e4:cd:6f:5d:71:66:72:84:2b:51:
         e9:96:e9:30:f9:7e:11:e6:00:b2:fc:e4:5d:69:c9:3f:a8:8a:
         10:f7:94:70:d8:e5:9c:d8:ad:93:df:91:f4:57:8e:68:e4:99:
         36:18:36:58:9f:63:48:c8:49:77:5c:86:b6:63:0c:93:6a:ad:
         6b:0a:8f:53:15:b5:c8:96:75:12:ab:d8:f4:2e:0b:28:1a:f5:
         3d:40:fa:d8:9c:a4:05:44:d9:10:72:95:84:9a:8f:05:ef:04:
         21:2a:fa:10:52:cc:90:de:ff:79:e7:32:f5:aa:36:05:7a:8e:
         5a:70:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:52:16 2025 by rpki-client