Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          QKjm9KcdHoQiSzcccjCHUfP3MDeZCgTjBw5MX53StvY=
Subject key identifier:   66:33:81:B3:04:03:3D:05:F0:41:4E:36:BE:8A:19:DF:6B:9D:B8:E2
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       6FCBF601C6CCC209B8D385C503F678B422E7B345
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:03 +0000
ROA not before:           Sat 18 Oct 2025 22:56:03 +0000
ROA not after:            Sat 17 Oct 2026 23:01:03 +0000
asID:                     28270
IP address blocks:        168.227.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cb:f6:01:c6:cc:c2:09:b8:d3:85:c5:03:f6:78:b4:22:e7:b3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:03 2025 GMT
            Not After : Oct 17 23:01:03 2026 GMT
        Subject: CN=663381B304033D05F0414E36BE8A19DF6B9DB8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:c9:11:9e:41:96:80:f0:2a:2b:7a:36:54:
                    63:9b:37:96:7e:f4:c6:0d:ad:fc:f5:ed:9c:77:3f:
                    92:f2:f8:f1:16:95:dc:91:b0:98:12:b8:e4:83:a8:
                    73:18:15:93:51:4e:52:bf:bf:98:4a:30:fe:61:c2:
                    8d:66:e5:ba:99:39:0b:14:eb:3d:5a:93:38:3c:27:
                    65:b7:78:3c:ff:a6:c8:29:2d:2d:e5:c3:f1:02:f1:
                    d9:10:4f:99:14:20:d4:7d:ce:4f:5e:7a:6f:11:90:
                    35:4f:72:d2:8f:9d:8d:9e:73:5d:74:74:7d:1e:38:
                    b1:c3:b8:14:ab:20:37:4c:cc:89:57:21:3d:a5:3e:
                    47:61:35:92:01:b7:00:bd:d6:4e:91:14:b5:df:59:
                    a0:c6:9c:43:31:fb:76:c6:6c:66:31:e6:6d:8e:a8:
                    52:c7:ab:be:f6:7a:c2:05:7a:64:77:46:5c:92:63:
                    7e:9b:86:9a:3a:a8:59:01:8c:ea:18:7e:9b:1d:d0:
                    51:36:82:b1:8d:e1:8e:96:b5:1a:88:ec:19:d7:ad:
                    83:6f:03:26:d7:4f:c6:1e:cc:bd:12:34:60:13:c9:
                    c3:9a:d0:1a:b0:70:9d:24:32:c6:99:d8:fb:5d:24:
                    98:70:51:20:a3:28:eb:6f:84:1c:60:e4:37:8a:c0:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:33:81:B3:04:03:3D:05:F0:41:4E:36:BE:8A:19:DF:6B:9D:B8:E2
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:b0:a2:4c:e9:bc:20:8f:d3:66:ab:d1:70:19:e2:d5:de:
         e7:89:40:57:68:67:b6:36:bb:2f:97:b8:78:83:b4:2d:20:db:
         67:43:79:07:bc:7d:68:1a:48:35:d0:2d:37:de:5d:09:90:92:
         2a:51:c3:4a:db:58:65:21:2c:b4:dc:46:9f:eb:2e:6e:8b:37:
         b1:7d:e9:66:62:a3:0a:2c:4d:ee:0c:da:d8:9f:6c:33:f6:4a:
         bb:1b:21:c4:e0:d7:45:53:59:56:26:51:bf:7f:ff:4c:88:83:
         7a:d3:a9:14:a5:7a:c6:2f:2b:3c:56:9c:a7:71:f3:0f:2a:80:
         c5:bf:0f:83:e9:1f:2e:fc:f1:60:e9:9a:c0:cf:9d:6b:c2:a9:
         d7:89:07:22:5f:ff:f9:15:3c:94:eb:52:fd:7b:4e:bb:bf:ce:
         a5:ba:75:c3:23:11:26:35:b2:42:be:2c:bd:fa:6a:1c:c9:48:
         bb:53:ed:14:2b:a8:9f:c5:2c:71:e6:97:de:79:28:01:37:d4:
         b0:40:4a:d1:b2:31:8c:a4:6b:94:2e:04:a1:1e:72:73:11:60:
         a7:78:0f:10:9d:32:7c:15:5b:ca:00:e0:e8:b2:45:7b:cc:a3:
         c9:ed:4d:d0:d9:f8:59:57:f3:c5:bd:37:0e:88:82:c4:73:37:
         38:b3:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:31 2025 by rpki-client