Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier:          p/f9WMgk5TtK110gPA24AZ2OwCTIhCwLfAsFip2SxTc=
Subject key identifier:   1C:26:1E:82:2E:9B:40:E1:90:27:AA:E4:3B:8F:95:AD:9B:81:7A:30
Certificate issuer:       /CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
Certificate serial:       07FE54611B99A6B0561909546123A46156A9F83E
Authority key identifier: C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time:             Mon 07 Jul 2025 16:53:33 +0000
ROA not before:           Mon 07 Jul 2025 16:48:33 +0000
ROA not after:            Mon 06 Jul 2026 16:53:33 +0000
asID:                     52898
IP address blocks:        168.227.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl
                          rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fe:54:61:1b:99:a6:b0:56:19:09:54:61:23:a4:61:56:a9:f8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
        Validity
            Not Before: Jul  7 16:48:33 2025 GMT
            Not After : Jul  6 16:53:33 2026 GMT
        Subject: CN=1C261E822E9B40E19027AAE43B8F95AD9B817A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:2b:6d:98:f6:2b:90:2c:e5:1e:60:9a:8b:
                    42:15:54:59:82:38:2e:65:d7:ea:cf:a1:62:3b:0b:
                    f0:a8:ef:c5:06:00:ff:a3:e6:05:d2:51:66:58:f2:
                    7b:99:ba:07:05:cd:0a:92:eb:9c:71:83:bb:ea:62:
                    05:78:61:5e:a4:db:c3:28:44:77:93:61:28:89:37:
                    4f:28:12:60:7a:a9:ed:b5:5e:97:6d:50:8d:02:b9:
                    10:fc:84:81:55:9a:ff:2e:1f:15:da:10:78:1b:48:
                    16:dc:20:49:f8:69:df:9c:36:4e:58:ae:54:ff:3e:
                    2e:2c:e9:77:94:3f:f0:b4:d0:d9:c0:5a:71:e0:e2:
                    c2:6e:67:b6:a4:72:2f:a5:a6:02:76:11:61:44:f9:
                    13:a2:1e:20:f1:3e:f2:69:f2:4a:de:ca:93:00:09:
                    6a:37:d9:bb:ad:28:23:15:44:bd:f9:78:08:f6:de:
                    e0:f1:0a:7e:93:2d:df:dd:82:ef:36:af:e1:62:62:
                    88:e0:76:d8:04:6b:35:ee:37:85:f5:15:42:4e:d5:
                    4a:e4:a6:24:c5:56:d4:23:7d:46:c2:a4:f8:81:ad:
                    a3:b3:97:9a:3a:97:a1:4a:05:73:68:55:f0:60:15:
                    0c:1e:f3:51:a3:a7:fa:bf:f6:3d:8d:3d:f4:bd:a3:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:26:1E:82:2E:9B:40:E1:90:27:AA:E4:3B:8F:95:AD:9B:81:7A:30
            X509v3 Authority Key Identifier:
                keyid:C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:06:02:55:56:53:92:84:60:d6:ee:04:27:85:12:c2:02:dd:
         2d:f5:5c:2b:d1:b8:aa:a7:f9:cc:86:16:3a:a3:d9:cb:b0:70:
         09:6b:ed:63:a0:a8:48:36:c2:79:0b:73:83:75:08:0b:19:bc:
         a4:7d:19:2f:75:44:41:c2:60:a6:b7:66:a3:2b:7f:92:6e:5e:
         a5:5e:b7:60:0f:33:d9:ac:63:d9:e3:bb:c9:4f:f7:40:3a:17:
         76:07:a9:b4:bf:e2:b6:83:1e:3d:07:c4:b1:64:4a:01:d5:a0:
         ec:9a:d4:7f:44:c0:be:c8:41:f6:7f:9b:f8:3f:95:4b:4e:c4:
         47:13:c8:2a:06:ae:51:2d:0f:3b:8a:ce:e6:78:f2:d4:09:50:
         e4:80:ce:75:ce:ef:59:71:3f:0d:98:4b:38:53:6c:57:0b:fe:
         36:2c:cc:8a:9f:46:3c:fb:b3:d9:63:d7:96:21:5b:41:d3:69:
         df:c0:c9:24:53:d7:58:5b:d4:40:68:da:48:fe:e9:5e:43:14:
         64:4c:0f:8b:04:7d:03:30:0b:2e:a3:a3:af:df:a0:b6:0a:93:
         19:30:05:95:48:62:fe:50:96:86:d3:a8:6b:a0:7b:41:00:aa:
         14:7a:20:19:c3:d3:5d:38:35:74:b7:42:1b:12:8d:c4:63:b1:
         c4:ce:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 11:56:17 2025 by rpki-client