Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa
File:                     3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa (raw, json)
Hash identifier:          Ni/9Ai6zzFQ5KqWk1BquuuEqfJvYCcrp/z5RKPxBAQs=
Subject key identifier:   F0:28:31:0D:5D:1F:1D:8D:EA:08:17:D1:83:96:E1:0B:8C:55:06:9B
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       711868F16A99DA3E5D4D8F08330983CF0697F93D
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa
Signing time:             Thu 06 Mar 2025 04:54:19 +0000
ROA not before:           Thu 06 Mar 2025 04:49:19 +0000
ROA not after:            Thu 05 Mar 2026 04:54:19 +0000
asID:                     264913
IP address blocks:        168.228.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:18:68:f1:6a:99:da:3e:5d:4d:8f:08:33:09:83:cf:06:97:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Mar  6 04:49:19 2025 GMT
            Not After : Mar  5 04:54:19 2026 GMT
        Subject: CN=F028310D5D1F1D8DEA0817D18396E10B8C55069B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:fa:21:e0:76:49:f8:f3:12:12:92:c9:56:
                    a8:fc:09:7f:77:cd:68:57:3c:6d:22:12:c4:43:64:
                    0a:b7:84:ad:91:b3:8a:77:4d:b1:7c:6a:a1:fb:19:
                    cb:24:3d:9d:27:dc:90:93:ba:3b:65:dc:b3:5c:40:
                    99:f1:bb:a3:ba:c4:44:46:88:ca:d2:c8:3a:26:f4:
                    50:20:57:87:1f:28:7e:77:30:5e:9e:bf:c3:5e:07:
                    e5:0d:21:e6:80:03:83:d1:03:f2:ad:b0:b5:c1:24:
                    2f:d5:78:c3:7c:a0:a4:ec:13:17:32:f1:f8:7f:e8:
                    d4:52:4d:1f:50:df:bd:d1:75:34:53:af:66:1e:bf:
                    70:93:b3:af:8b:e0:0e:99:7c:f0:96:4f:22:6f:09:
                    7c:ac:2d:29:e3:b8:07:94:c3:35:4d:2b:b2:b7:93:
                    b4:ac:12:0b:b6:43:d8:d4:c5:7f:30:11:7a:e4:62:
                    24:26:f8:f0:66:69:74:ab:63:ec:b0:19:34:9a:72:
                    6b:72:0f:d8:7f:4f:df:6f:22:cc:a8:c4:b9:b1:a0:
                    71:75:6e:cb:b9:b8:6b:59:3a:cb:bd:12:76:7a:f4:
                    ac:ca:9f:e7:1c:10:9d:26:a2:f4:25:91:58:d3:f0:
                    b4:b8:20:c9:3e:b1:4f:79:9f:03:a4:82:40:9a:15:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:31:0D:5D:1F:1D:8D:EA:08:17:D1:83:96:E1:0B:8C:55:06:9B
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32322d3232203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:57:58:0e:97:bb:40:30:a7:01:21:a2:c7:67:98:f7:a3:
         7d:76:2a:e0:7e:ac:60:f1:06:b5:07:02:e2:02:bb:aa:e7:7e:
         54:df:04:57:05:10:9d:65:13:29:0a:ab:c9:89:45:a2:af:c3:
         53:44:29:04:aa:0f:4a:5e:a1:58:b6:77:8c:33:8e:0f:e0:9c:
         28:17:ac:6c:4c:8d:67:1a:97:36:b1:94:35:bb:96:79:28:04:
         14:30:0e:2b:03:db:9f:99:66:f5:38:74:31:fe:bc:34:44:f8:
         1b:2e:71:f5:33:02:2a:00:c0:a0:46:75:5e:57:2e:f9:be:02:
         3f:03:47:d0:0d:c6:97:da:1c:c8:fe:14:ab:07:74:84:a5:a0:
         19:e0:39:27:b4:b4:b9:e4:b4:c5:d9:82:f2:c3:ed:4c:23:af:
         2f:3b:18:db:b3:5b:db:b3:ba:dd:33:ff:7d:ea:32:97:c4:4f:
         eb:13:9f:e8:ec:b3:18:dd:47:84:54:7a:1d:21:4d:2c:3f:1b:
         8a:69:fc:b9:e5:26:6f:2b:bf:f0:77:0c:6b:4a:35:28:01:75:
         10:7c:54:98:d2:2a:fb:e1:04:15:cc:16:61:e6:97:47:46:98:
         8e:53:8c:03:24:80:5f:db:8e:99:76:84:5a:2c:d4:cd:89:f6:
         e2:6d:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:29 2025 by rpki-client on console.sobornost.net