Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa
File:                     3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa (raw, json)
Hash identifier:          miWyRi5Wy54osDX4WtXOd4oFcI5wptcjy31ToN1P8S4=
Subject key identifier:   CF:5C:EB:C0:66:2B:DA:F9:F8:40:64:45:78:6A:48:1A:C4:68:B9:DB
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       6EB6B964036F771505454C64EFEF16E3187A45BE
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa
Signing time:             Fri 07 Mar 2025 00:36:00 +0000
ROA not before:           Fri 07 Mar 2025 00:31:00 +0000
ROA not after:            Fri 06 Mar 2026 00:36:00 +0000
asID:                     264926
IP address blocks:        168.228.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b6:b9:64:03:6f:77:15:05:45:4c:64:ef:ef:16:e3:18:7a:45:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Mar  7 00:31:00 2025 GMT
            Not After : Mar  6 00:36:00 2026 GMT
        Subject: CN=CF5CEBC0662BDAF9F8406445786A481AC468B9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:e9:76:f2:c0:3e:ad:f0:d6:a3:8a:74:74:
                    b6:a0:16:55:64:4b:f9:1f:57:2a:bd:77:a6:ec:44:
                    b0:81:6c:ac:53:d1:05:13:a4:2d:45:ad:2a:9f:72:
                    1b:df:ad:a1:d4:27:e2:ef:c1:1e:a1:e6:c2:d7:5c:
                    a2:fa:1d:4e:db:b5:3b:55:65:be:36:26:82:a7:d3:
                    3d:7d:d8:7d:e3:a9:22:e7:bd:d0:11:4f:44:f3:da:
                    9f:40:77:d0:4c:8e:a4:76:3b:d0:a9:8b:8e:0e:1d:
                    88:78:1b:9b:b0:37:6b:10:3a:92:9f:f2:08:85:25:
                    00:f9:bb:d3:71:c6:bb:66:db:76:10:cc:16:15:66:
                    a6:f2:b9:a3:1c:12:bf:67:60:76:67:6a:eb:e0:ee:
                    b8:f3:0c:f2:d8:9b:23:3b:bb:eb:b3:92:71:ab:fd:
                    cd:a1:2c:c4:a9:d8:6f:be:c6:0e:09:2b:8a:2a:d2:
                    58:1a:40:b1:de:e2:83:74:ee:14:a2:65:f8:31:cd:
                    57:2e:c2:af:b4:f1:b2:27:e5:29:3e:0a:4a:6e:d4:
                    f5:b4:43:a4:f4:14:08:3c:8c:ee:cd:54:39:d2:de:
                    c0:17:e6:a7:99:75:69:5c:d3:93:e4:11:96:10:20:
                    ac:23:97:39:c3:b8:c4:47:92:df:cd:5d:8f:e3:af:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5C:EB:C0:66:2B:DA:F9:F8:40:64:45:78:6A:48:1A:C4:68:B9:DB
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137382e302f32342d3234203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:41:ea:dc:5b:68:8f:e7:d4:b1:54:b6:4c:96:f7:51:e3:e6:
         0a:7c:e4:c8:9c:2f:80:96:9f:d6:a4:e6:40:eb:61:ab:30:e4:
         d7:8d:b0:1e:d5:0f:07:2f:58:99:a7:8b:3f:8b:af:8f:7e:c7:
         62:2e:c4:25:11:15:2d:f9:6e:cf:cc:0a:87:11:9b:28:e0:29:
         27:82:be:4a:c4:23:fe:eb:f3:08:ca:db:68:b9:24:76:dc:f5:
         ba:be:c9:3c:9f:bd:cb:d6:c0:4a:bb:8c:d0:22:81:41:ed:d9:
         f2:c6:46:5f:13:f1:d1:2d:ff:07:73:5c:3d:7d:9c:c1:18:2a:
         45:31:4b:1f:c9:cb:68:8f:73:d2:16:d9:bd:46:d3:66:f8:a0:
         4d:d6:20:9d:76:09:1c:52:f2:6d:62:ed:48:42:09:70:41:f2:
         b0:e2:07:06:98:b9:34:9f:b9:65:4d:a6:e8:2c:d7:f6:37:23:
         02:e4:b7:20:e6:b2:03:89:c4:25:31:79:5a:00:23:03:e3:9c:
         ac:81:40:b6:ec:55:d9:03:bb:f7:69:d0:a9:82:af:cc:fd:f7:
         56:3e:dd:96:df:8c:3a:e7:e3:40:5b:58:26:0e:a2:c8:79:08:
         06:d6:41:b1:6f:34:be:57:23:e8:3d:dc:50:9a:d2:ca:2b:f1:
         8f:99:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:36 2025 by rpki-client on console.sobornost.net