Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31362e302f32322d3232203d3e20323635313835.roa
File:                     3136382e3139362e31362e302f32322d3232203d3e20323635313835.roa (raw, json)
Hash identifier:          uG4FGIlZt8/SEK2hGin2obNrSlP8VYyKrSAlcGaRX5c=
Subject key identifier:   62:3A:C1:B4:0A:F7:FE:2F:B2:C2:44:1D:40:39:33:E5:CD:8F:D1:47
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       4DC241736FD0F388111613C39A6DE425D945DCE0
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31362e302f32322d3232203d3e20323635313835.roa
Signing time:             Thu 13 Mar 2025 19:44:01 +0000
ROA not before:           Thu 13 Mar 2025 19:39:01 +0000
ROA not after:            Thu 12 Mar 2026 19:44:01 +0000
asID:                     265185
IP address blocks:        168.196.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c2:41:73:6f:d0:f3:88:11:16:13:c3:9a:6d:e4:25:d9:45:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Mar 13 19:39:01 2025 GMT
            Not After : Mar 12 19:44:01 2026 GMT
        Subject: CN=623AC1B40AF7FE2FB2C2441D403933E5CD8FD147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:30:03:25:03:c8:11:8a:56:47:d0:36:31:
                    c6:95:10:e8:f6:ff:cc:62:f6:87:82:56:67:98:c2:
                    b1:72:6b:48:e2:0e:16:b5:d8:53:16:ee:32:ed:a2:
                    af:5b:3a:de:bf:bb:e9:67:9a:90:f9:da:01:df:f0:
                    61:30:3d:fd:7c:b8:d0:7a:b8:79:3e:dd:37:67:db:
                    7f:bc:b9:21:fb:3b:6e:ce:48:eb:34:b2:3d:36:f6:
                    26:2a:c9:7a:be:4e:a4:36:a1:d2:b8:eb:99:52:9c:
                    cc:02:f9:d2:57:15:ff:d4:52:f2:a6:15:10:be:18:
                    e9:1d:73:52:1b:44:9e:1b:0d:64:67:1b:a4:ec:2b:
                    65:ed:cb:3d:4b:29:ed:01:ca:ef:48:11:e7:bd:33:
                    70:62:d2:d6:4e:33:98:37:67:98:c7:4f:4a:60:65:
                    ab:aa:38:26:2a:e3:b3:27:c9:09:33:0e:6b:c1:8e:
                    f7:db:fe:d1:6c:18:29:b5:b1:ad:df:9d:5b:d1:fc:
                    7c:e8:79:5b:62:1c:5e:d0:f8:3a:3c:20:80:98:38:
                    c1:e2:91:33:ad:67:24:ec:e5:47:4f:3c:c0:37:8f:
                    73:7f:12:af:80:22:40:14:22:4e:e6:04:70:aa:ff:
                    74:66:4c:b8:43:6f:5d:77:71:91:62:5b:8d:93:dd:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3A:C1:B4:0A:F7:FE:2F:B2:C2:44:1D:40:39:33:E5:CD:8F:D1:47
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31362e302f32322d3232203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:57:dd:41:64:79:b7:e9:e9:3e:f9:f2:88:20:e4:c2:5e:
         90:04:dc:c9:60:84:69:6b:2f:62:22:61:eb:16:5d:62:1d:cd:
         f4:27:e8:f0:37:e2:6d:18:9e:86:0b:c3:7b:d8:d6:45:48:d4:
         00:4b:86:f9:46:93:20:45:92:c9:1e:e7:6e:ed:b9:59:4c:17:
         ac:13:1b:06:45:67:3a:56:8c:38:b9:c1:da:fc:a1:2e:dd:00:
         f5:0d:c9:b5:c9:01:68:db:ba:4f:d0:86:49:64:92:5e:b1:f0:
         df:0a:76:1a:67:d8:1b:39:eb:dd:db:5d:6c:1b:f3:78:39:ca:
         7e:21:4b:a0:22:7d:18:3d:8f:95:03:ee:45:fb:dc:b6:42:f2:
         67:ec:6e:ba:15:ff:96:a1:97:e5:4f:ae:77:7a:d3:d6:c6:10:
         c5:e3:c5:05:f0:97:8c:74:d0:12:f8:d2:12:0b:16:d1:a8:3c:
         80:4e:93:65:cc:cf:69:c8:07:cf:b1:f6:7c:ba:10:13:f8:c6:
         d4:84:ea:a1:da:64:5a:d0:d2:b0:aa:13:c8:5e:43:80:da:19:
         8c:e2:1b:ed:46:f5:55:09:34:59:3b:6e:d2:10:23:0e:7c:16:
         7e:80:0a:cb:e2:40:cf:a9:97:c1:d5:b5:5f:8d:35:b5:07:a2:
         86:88:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:22 2025 by rpki-client on console.sobornost.net