Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa
File:                     3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          BRgCknZ0wSNoJNQHkNBR1FHuSqFsYEkL6RmP2EagiEs=
Subject key identifier:   EC:33:74:92:D8:E7:EF:67:87:39:80:CC:DB:B8:BC:4A:BA:14:AD:A3
Certificate issuer:       /CN=56B0D4522C382D2528E989DFA8E7662C852D4861
Certificate serial:       5FBAEAC9A3319D8AD39F3115EE5F1BA58F740F56
Authority key identifier: 56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa
Signing time:             Wed 02 Apr 2025 00:06:09 +0000
ROA not before:           Wed 02 Apr 2025 00:01:09 +0000
ROA not after:            Wed 01 Apr 2026 00:06:09 +0000
asID:                     265369
IP address blocks:        168.205.100.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:ea:c9:a3:31:9d:8a:d3:9f:31:15:ee:5f:1b:a5:8f:74:0f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B0D4522C382D2528E989DFA8E7662C852D4861
        Validity
            Not Before: Apr  2 00:01:09 2025 GMT
            Not After : Apr  1 00:06:09 2026 GMT
        Subject: CN=EC337492D8E7EF67873980CCDBB8BC4ABA14ADA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:6b:ab:89:ad:70:5d:ad:06:18:2b:14:cb:
                    12:45:03:40:c4:f9:b6:b6:78:31:e9:38:e6:a6:de:
                    69:89:b0:59:5f:5a:34:03:04:27:ee:d0:9b:2e:e0:
                    5f:11:fd:32:1b:d5:45:05:71:79:8e:2b:d0:82:34:
                    64:95:52:89:3e:ee:d8:e8:8e:01:81:a8:0b:cb:2e:
                    f9:6c:0a:25:6e:a0:fe:97:14:59:b5:65:50:79:c4:
                    24:a8:ad:e3:e5:34:92:89:9e:44:79:24:e1:38:c6:
                    cf:17:a1:11:6a:ab:f9:79:35:a9:3f:08:b1:a5:8c:
                    15:9f:b7:ad:60:b6:7d:23:c1:a5:b9:f7:59:95:f8:
                    1a:15:84:f3:aa:95:9a:51:fd:56:8c:e3:2b:9a:b5:
                    f5:5a:e1:00:e1:d3:ba:64:ae:96:8d:36:81:66:8a:
                    ca:00:e4:c3:db:a2:96:23:f3:b9:09:67:56:1f:7c:
                    c0:45:a4:7b:e2:7c:00:ac:5a:01:52:30:04:92:d1:
                    96:b9:d6:59:8c:3d:be:a0:ce:ce:67:99:73:9f:75:
                    43:f8:1f:8c:b3:b4:2f:f2:0b:24:35:c7:b9:28:66:
                    56:16:81:20:1d:91:06:b3:10:f3:8f:62:7c:11:99:
                    c7:49:11:c3:84:af:dd:96:24:13:e8:81:83:d4:15:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:33:74:92:D8:E7:EF:67:87:39:80:CC:DB:B8:BC:4A:BA:14:AD:A3
            X509v3 Authority Key Identifier:
                keyid:56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:1e:ae:cc:07:68:86:2b:ae:6f:00:52:70:e2:14:60:52:
         19:77:86:bd:dd:f4:cd:d3:9d:c6:45:b8:8e:75:31:97:07:46:
         5c:55:54:9c:83:27:3a:de:13:e8:18:fc:40:f9:59:b1:17:41:
         41:18:c0:7b:45:16:5e:a9:a4:dc:37:5c:93:10:89:2d:b4:e8:
         e5:20:a8:0e:1e:79:97:40:20:ba:95:cc:3e:4a:1e:2e:93:32:
         2e:ee:8f:97:36:c8:bc:a0:42:d6:1f:f8:4c:a3:89:4a:3c:d9:
         4a:51:1a:e3:78:da:1e:bd:5c:51:64:33:a7:a2:3d:43:cf:db:
         53:18:b1:8e:54:2e:82:42:c1:46:9a:ed:ca:73:da:df:cd:98:
         50:ae:64:16:95:4e:40:8f:b3:14:df:9a:8c:eb:ad:15:04:f3:
         08:6a:f9:04:51:57:95:f5:3f:a8:3d:f2:0c:6e:27:52:e1:04:
         96:cb:d5:60:63:4b:8d:ef:22:c2:6b:13:9e:5d:e0:d7:d5:28:
         ee:09:4f:9d:0e:69:91:d9:ce:77:cf:12:ac:53:64:cd:4d:ef:
         cf:a2:42:b7:3e:ae:47:db:a3:de:19:21:35:3d:a9:10:33:61:
         42:3a:49:a8:53:10:86:7e:37:09:a4:64:c5:65:8c:c0:e2:1f:
         27:fb:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:37 2025 by rpki-client on console.sobornost.net