Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa (raw, json)
Hash identifier:          A6T6GLDOHXYq0cSf09U1zdeANErXw7Evsm6yP00IOqI=
Subject key identifier:   F9:05:BC:EF:54:BB:C3:72:66:A4:69:AB:51:84:BA:B3:51:2F:5E:7C
Certificate issuer:       /CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
Certificate serial:       60BCB3BF76D2BCB722186102404C315406C7D951
Authority key identifier: 62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa
Signing time:             Sat 20 Sep 2025 12:49:34 +0000
ROA not before:           Sat 20 Sep 2025 12:44:34 +0000
ROA not after:            Sat 19 Sep 2026 12:49:34 +0000
asID:                     265463
IP address blocks:        168.197.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl
                          rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:b3:bf:76:d2:bc:b7:22:18:61:02:40:4c:31:54:06:c7:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
        Validity
            Not Before: Sep 20 12:44:34 2025 GMT
            Not After : Sep 19 12:49:34 2026 GMT
        Subject: CN=F905BCEF54BBC37266A469AB5184BAB3512F5E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bc:05:db:0f:a2:c8:75:cb:6a:ca:3b:fc:0a:
                    39:38:40:ee:e8:4c:c3:8b:fc:6d:bb:42:ae:c8:53:
                    2e:19:ed:61:fe:3c:ec:5c:bf:43:75:e8:b7:aa:11:
                    c7:f5:8e:cc:e2:78:a3:91:31:d7:ea:fd:d8:91:ca:
                    db:d9:c5:db:7e:a2:5b:4b:89:ba:58:c8:6e:d5:27:
                    62:53:fb:9d:86:e7:c0:15:39:e2:0d:e4:62:c6:22:
                    bc:26:4d:d1:5f:57:9d:d4:cc:de:8c:f6:ac:c4:51:
                    9d:f0:af:e4:6a:34:c5:9d:c4:01:ce:b6:ba:b7:34:
                    1b:df:d8:a2:2f:91:86:95:93:ab:91:76:b8:01:35:
                    19:f3:c6:60:83:97:72:2d:33:b1:a6:cf:11:2f:67:
                    38:ed:1a:03:23:64:53:13:6e:da:f6:c7:94:6d:44:
                    c0:e8:eb:11:21:20:67:66:7e:bf:84:ca:63:45:05:
                    0d:24:0c:50:43:ad:7f:ca:9a:f9:98:02:cb:ae:1c:
                    a0:92:29:9f:b0:bf:3b:7a:7f:9d:f7:de:0f:f5:4f:
                    3a:fe:ac:fb:ac:ad:6a:7d:33:16:0d:c5:3d:49:62:
                    09:54:94:3c:91:4d:03:8c:41:20:fe:e8:20:42:83:
                    b0:2f:53:e8:83:1c:97:77:fb:ce:bd:77:5e:0d:d2:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:05:BC:EF:54:BB:C3:72:66:A4:69:AB:51:84:BA:B3:51:2F:5E:7C
            X509v3 Authority Key Identifier:
                keyid:62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32332d3233203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:b9:e4:4d:e8:1c:16:86:e0:ab:43:d0:26:a0:14:1c:dc:51:
         e0:3f:87:9e:48:c4:8d:fc:bf:e7:e3:bd:7a:c6:36:2d:85:bd:
         7b:ac:9b:a8:46:94:8b:09:f9:1c:a2:f1:7d:da:b0:cf:9b:7d:
         e8:00:c9:f8:9d:29:09:da:52:66:23:38:4d:24:d5:38:59:40:
         65:e5:26:29:a5:5a:0c:8b:f4:0c:9c:ee:19:98:2e:92:ae:6a:
         c7:c0:21:5b:21:d2:b2:c4:92:07:d1:ff:c7:f8:24:f0:5f:db:
         93:1f:42:83:36:ad:a2:33:d4:c5:a2:b3:62:fa:17:1a:b5:eb:
         d0:a3:c1:ba:90:2d:18:f5:ab:f1:5a:1c:45:e4:b8:27:7a:61:
         7d:55:57:d6:14:70:46:c0:21:23:c7:fd:00:bc:4a:43:8b:0a:
         67:3d:31:c6:20:62:6e:fc:56:2c:57:c9:79:eb:ad:b5:97:1e:
         72:2d:f0:02:f0:d0:6c:c4:28:15:70:5a:3c:dc:c8:ec:75:09:
         4a:22:f0:3d:d7:95:81:95:64:d5:23:63:a1:01:2c:b4:2b:8a:
         f3:c3:0f:46:40:f6:06:18:7b:18:9d:db:8e:9c:fa:04:5d:50:
         63:77:06:27:20:6e:4a:b9:3b:c7:fa:92:51:93:ef:fd:d0:ea:
         80:01:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:17 2025 by rpki-client