Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
File:                     3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa (raw, json)
Hash identifier:          xae2mKDybcZ7oikF0rpBnLGrbdru+3EKJDky9epdXcc=
Subject key identifier:   F6:1D:B2:E7:55:69:32:CA:1F:DF:E7:81:02:B6:58:75:FB:DA:83:36
Certificate issuer:       /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial:       74265F10C6688F85888B0D487DA30E1BEC37831D
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa
Signing time:             Wed 01 Oct 2025 22:07:08 +0000
ROA not before:           Wed 01 Oct 2025 22:02:08 +0000
ROA not after:            Wed 30 Sep 2026 22:07:08 +0000
asID:                     264936
IP address blocks:        168.232.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:26:5f:10:c6:68:8f:85:88:8b:0d:48:7d:a3:0e:1b:ec:37:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Validity
            Not Before: Oct  1 22:02:08 2025 GMT
            Not After : Sep 30 22:07:08 2026 GMT
        Subject: CN=F61DB2E7556932CA1FDFE78102B65875FBDA8336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:54:69:97:9f:00:ab:ba:a2:ea:70:d1:28:
                    fa:0d:8d:87:58:36:1e:ac:d5:6f:19:17:f9:77:37:
                    da:13:a5:d6:af:c9:4a:e6:44:b3:68:52:a4:c2:f4:
                    25:04:f5:38:59:1e:0e:80:0d:c1:18:a5:2c:72:6f:
                    0c:42:f0:9a:dc:35:15:53:33:9b:eb:a9:0f:f6:6b:
                    d4:0c:03:bb:fd:0d:23:dc:16:c4:7b:bd:97:e7:dd:
                    42:a2:9d:75:d1:58:9e:16:d5:24:9e:ff:da:c8:2e:
                    eb:56:22:c8:37:e1:ff:13:16:cf:30:ee:a2:42:1c:
                    86:cd:e8:5f:09:b6:b4:b3:11:a4:c0:4c:4c:67:44:
                    90:a6:4f:a3:92:d3:3c:75:48:70:3b:40:17:90:cd:
                    d2:1e:c9:cd:d8:77:48:bd:61:02:80:c4:92:6c:ba:
                    a4:7b:b4:1d:7c:3d:02:8c:9c:5b:dd:60:41:c4:58:
                    8c:8f:49:86:41:b1:99:ef:70:6b:49:6a:d4:99:4a:
                    80:65:64:68:be:72:06:ac:44:e6:90:ff:e9:44:ae:
                    9b:77:39:cb:f8:bc:7c:3f:de:1a:0c:c3:88:30:84:
                    f0:a7:c4:f0:66:81:ab:f7:33:db:cd:2c:07:03:ea:
                    a8:ab:c0:09:21:7a:ba:e4:62:74:81:08:19:89:61:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1D:B2:E7:55:69:32:CA:1F:DF:E7:81:02:B6:58:75:FB:DA:83:36
            X509v3 Authority Key Identifier:
                keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:a1:12:8f:dc:8c:0e:b7:62:f8:ac:0b:84:40:fe:2e:86:
         6b:08:c5:44:c3:42:02:e3:70:b4:d8:67:f2:a0:9b:81:5a:17:
         81:f6:57:c1:d2:08:d3:72:57:2d:1d:0c:58:d8:9c:c2:05:e6:
         85:4d:57:12:ed:ac:25:b6:42:da:26:a8:f1:64:0c:21:1e:26:
         63:5b:19:76:05:03:b1:42:b9:ae:9d:1e:35:23:be:15:a3:3f:
         72:34:47:f0:74:07:d0:48:82:db:b2:51:c2:a3:8f:e4:d0:22:
         d6:6b:a1:a1:b1:b7:9e:29:99:97:f6:3c:08:e6:de:c1:54:05:
         0f:3b:12:1e:00:78:91:5d:c3:9f:00:15:80:e4:5c:6c:ea:2c:
         b0:ad:6e:7d:08:83:95:61:19:d4:ea:88:a9:62:0c:64:46:d0:
         9d:af:4d:e9:32:86:de:ad:6f:9f:ea:38:ee:4c:8d:22:52:15:
         86:c5:f8:b4:f9:f7:b1:f8:f9:29:35:63:75:ff:37:4f:ef:9f:
         61:d6:30:f8:c3:e5:7a:b8:2d:a6:92:e8:a1:66:b5:de:28:e9:
         5a:2f:0d:a9:ff:cf:ea:67:49:3d:b6:df:35:14:ad:7e:a5:2b:
         fd:a2:93:6a:45:bb:31:15:fb:8e:95:6c:7f:63:1b:d5:40:7c:
         0b:df:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:55:15 2025 by rpki-client