Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          VuRhlRWfyAfYbe8vizGC7u3itLTJib4uzKA6ADVpj38=
Subject key identifier:   F3:3C:A9:DA:1B:F3:44:06:D3:C8:A2:A6:00:93:D8:96:D8:81:22:AC
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       52CE1AAF6C0C8DA9017E73E05754037D4789A07C
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:30 +0000
ROA not before:           Mon 31 Mar 2025 17:52:30 +0000
ROA not after:            Mon 30 Mar 2026 17:57:30 +0000
asID:                     262296
IP address blocks:        168.181.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ce:1a:af:6c:0c:8d:a9:01:7e:73:e0:57:54:03:7d:47:89:a0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:30 2025 GMT
            Not After : Mar 30 17:57:30 2026 GMT
        Subject: CN=F33CA9DA1BF34406D3C8A2A60093D896D88122AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:c8:f2:3c:98:29:0f:19:2a:96:9b:b8:b4:
                    68:05:09:b2:f1:74:2a:d9:40:92:3f:d5:70:d0:45:
                    6e:33:35:80:3c:3d:14:15:7a:7e:08:ae:e9:f2:42:
                    92:fd:41:26:ee:15:60:92:13:8e:a9:60:fd:a0:86:
                    ff:6a:85:c1:09:92:9b:3f:cc:88:a6:5c:d7:3c:d6:
                    9e:69:44:47:c4:14:e4:ab:2c:4a:35:d7:52:d9:fb:
                    76:8d:1e:d2:16:4a:cb:dc:50:57:d5:48:69:86:24:
                    17:2f:f1:de:75:d5:2b:5d:3e:1d:d1:cb:b0:c3:fb:
                    ab:df:d8:8b:7a:e2:81:00:85:9a:0b:a6:d9:27:9c:
                    83:ae:e1:16:9b:13:17:b2:51:2e:8f:69:f1:43:b5:
                    f4:bf:0c:61:81:0b:fd:fc:c9:a4:f7:9c:94:b6:34:
                    db:4b:aa:a4:6e:5d:11:58:1b:5a:9c:13:0a:3c:9a:
                    81:d9:a2:a3:b4:4f:70:2e:32:15:83:24:d5:1b:87:
                    2b:46:30:5f:f9:84:cf:b2:82:26:c1:fc:07:da:3d:
                    ee:8b:88:df:21:26:b6:b5:71:9c:67:00:ef:d2:3f:
                    5c:f0:c2:9d:16:11:4c:67:78:56:88:94:f3:9b:fb:
                    45:55:ac:98:8b:a1:6f:a9:10:e5:85:60:42:80:4d:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:A9:DA:1B:F3:44:06:D3:C8:A2:A6:00:93:D8:96:D8:81:22:AC
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:4f:f8:f9:b4:8b:3d:85:1b:01:47:e0:bb:ba:d5:2b:38:77:
         55:c4:76:e9:7c:ae:52:f4:87:73:97:32:40:e8:52:50:b9:55:
         c9:ec:1b:08:20:50:4b:19:8c:d4:a1:bb:47:a4:13:88:35:9b:
         f5:97:32:20:84:44:7c:92:85:5d:af:de:52:b2:c9:ea:f1:5a:
         7b:d8:12:63:e4:34:08:d9:67:ca:c8:ef:c5:c2:c8:88:27:79:
         05:4d:1d:f0:e1:81:4b:9e:fc:d4:19:7a:7a:61:37:fd:cc:b0:
         08:19:d9:ec:bc:86:cd:7a:8e:0d:d7:af:36:8c:f6:87:60:d2:
         fe:cd:7c:6c:f7:cb:0c:13:5f:c7:27:64:f2:de:0d:f4:f8:c5:
         d1:d3:a5:e1:2c:b0:0a:8a:fe:bd:47:8e:8e:4e:08:31:8b:07:
         7c:95:58:61:6d:e2:3a:70:c6:56:12:fe:2c:3b:d3:13:f4:3b:
         e1:f2:5d:ed:56:a9:e9:72:7e:c9:ff:c4:59:85:fc:4e:0c:20:
         8f:0b:ee:09:49:8b:38:4d:b7:60:d7:33:c7:a8:17:d6:02:16:
         19:5e:1a:67:76:6f:46:84:d8:95:64:c2:62:12:96:eb:13:53:
         1b:e6:7a:0e:0f:f5:a0:5e:23:22:02:b8:7b:6c:c5:97:d2:ac:
         f3:66:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:13 2025 by rpki-client on console.sobornost.net