Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa
File:                     3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          V3wgXrb7gov88RL+yTt35fIY5RiNAOD8nbDVvzlHK1s=
Subject key identifier:   65:3E:67:68:ED:06:84:0A:72:42:93:8A:3E:94:59:9A:AB:4F:FD:5F
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       7999112BD259FB7CB15EF2036F1C6877DAC1348B
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:31 +0000
ROA not before:           Mon 31 Mar 2025 17:52:31 +0000
ROA not after:            Mon 30 Mar 2026 17:57:31 +0000
asID:                     262296
IP address blocks:        168.181.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:99:11:2b:d2:59:fb:7c:b1:5e:f2:03:6f:1c:68:77:da:c1:34:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:31 2025 GMT
            Not After : Mar 30 17:57:31 2026 GMT
        Subject: CN=653E6768ED06840A7242938A3E94599AAB4FFD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:1f:3d:ff:18:0b:21:cf:e6:4f:79:e0:6e:
                    a1:a6:40:ac:17:6c:74:e3:95:42:b1:6f:56:49:fe:
                    3f:de:6e:7c:df:9e:8f:95:8a:7a:e0:07:92:bb:2b:
                    23:f6:bd:ea:08:1d:5e:a7:e8:73:4a:1e:41:1f:38:
                    05:53:9f:ca:9f:b0:09:27:1e:5c:c9:cb:3b:18:b2:
                    8c:99:09:8d:d9:34:4b:21:15:4a:02:8d:15:64:88:
                    4b:7e:75:57:49:af:44:b5:3f:5a:af:d1:c8:4f:a5:
                    60:b6:61:96:4a:71:59:f4:7e:4a:6c:a0:11:f1:eb:
                    ee:fe:1d:55:cc:bc:99:4d:f3:37:16:19:45:bd:bd:
                    54:16:38:28:78:31:01:94:13:0b:82:27:bc:b2:98:
                    8a:50:34:5f:a7:c2:31:62:70:1b:0e:5b:63:75:0e:
                    65:f2:6d:0c:8a:92:69:a5:3f:c5:f1:04:78:2d:58:
                    c6:bc:71:d1:f0:b5:21:9e:f1:e0:c8:e1:a8:25:c8:
                    9c:fc:a7:db:d6:18:12:fe:18:2e:57:0f:89:fc:d6:
                    d8:fa:71:eb:2e:8a:74:ff:23:49:d2:f7:af:56:c9:
                    a6:42:28:fc:6c:5a:2f:b3:1c:da:f1:6a:db:54:24:
                    d7:21:89:cb:f9:ef:11:83:6f:1d:5d:7f:d4:fd:27:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:67:68:ED:06:84:0A:72:42:93:8A:3E:94:59:9A:AB:4F:FD:5F
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:98:e1:7b:41:a6:1f:f7:04:5f:2e:17:03:fc:e8:52:50:c8:
         08:0a:d8:63:91:1e:44:ff:7d:ec:37:10:40:b8:0b:f3:d1:f1:
         70:a8:6b:8b:8e:c2:f6:dd:2b:f2:75:b8:b2:64:62:e8:7c:e8:
         4a:58:6a:44:3a:32:83:4e:9c:56:b0:7c:6e:99:f6:ea:cd:86:
         47:a0:29:9e:48:57:ea:48:a2:54:2b:74:a8:c8:02:b6:fe:d3:
         9f:b1:87:c8:23:74:38:8d:3d:c6:95:a0:4d:8d:ef:15:f1:f5:
         5c:07:b6:92:1f:75:87:d9:c8:95:6a:b4:74:2b:31:46:5d:5b:
         49:da:06:8b:05:7c:09:ce:94:fa:08:3f:20:2b:92:f3:8b:44:
         61:a8:86:6b:5a:87:ca:83:ea:02:3d:c4:a9:21:f1:64:3d:17:
         37:2d:b1:9a:a0:b3:ee:a8:8d:fb:10:12:90:9d:54:33:81:1b:
         d7:8d:f4:93:ca:da:87:af:0d:a4:6d:a4:fb:9d:70:d3:ea:53:
         1c:e3:6b:f8:07:85:d5:01:52:73:da:8b:c3:46:e7:07:52:02:
         6d:7e:ff:9a:a6:aa:7c:58:4e:31:4d:3e:7b:89:18:fe:2a:28:
         9c:f4:23:8a:57:4d:0a:fd:c6:95:46:37:86:fa:11:9e:65:10:
         9a:99:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:13 2025 by rpki-client on console.sobornost.net