Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa
File:                     3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa (raw, json)
Hash identifier:          uOMlG7emJhAcOmnt2y63/gr5exheo0/CTQ7G3xlBGlo=
Subject key identifier:   30:41:F4:F1:A6:4B:D4:31:A4:2D:C7:3E:49:78:F3:1B:69:6E:E4:A3
Certificate issuer:       /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial:       794D490D48C40A57525861FE2AC5914619E238A1
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa
Signing time:             Wed 01 Oct 2025 22:07:09 +0000
ROA not before:           Wed 01 Oct 2025 22:02:09 +0000
ROA not after:            Wed 30 Sep 2026 22:07:09 +0000
asID:                     264936
IP address blocks:        168.232.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4d:49:0d:48:c4:0a:57:52:58:61:fe:2a:c5:91:46:19:e2:38:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Validity
            Not Before: Oct  1 22:02:09 2025 GMT
            Not After : Sep 30 22:07:09 2026 GMT
        Subject: CN=3041F4F1A64BD431A42DC73E4978F31B696EE4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:25:6c:02:ea:d5:11:b5:5b:07:4c:6c:42:
                    10:1b:2a:66:0f:76:33:94:f6:a8:64:78:51:4f:9d:
                    4a:24:9e:7e:9f:3d:96:9a:83:31:8f:2b:61:cf:78:
                    98:ca:72:46:f7:8b:90:1f:3b:2e:be:08:69:0e:c6:
                    54:cc:1d:ba:91:fa:fc:dd:46:50:68:2c:3b:4c:39:
                    f6:8b:50:18:53:23:aa:21:3e:e1:12:d9:f4:70:cd:
                    80:fd:e2:f1:0b:6c:1f:d5:af:6c:17:cf:40:51:57:
                    88:a9:f6:1c:62:d6:49:45:48:96:1b:07:95:02:3f:
                    2e:a6:26:6f:ad:f6:6b:1d:04:8d:d8:3b:ce:ca:22:
                    3d:b2:2e:c0:49:af:97:63:be:70:54:f8:4d:81:87:
                    e5:ea:a6:30:33:8c:d2:53:86:44:85:20:56:ee:40:
                    98:28:df:b3:83:1d:49:11:08:ff:fb:53:0c:e0:20:
                    9c:fe:fc:1b:60:87:59:97:65:a7:e7:2c:fa:be:dd:
                    37:78:e9:a6:66:06:de:33:bc:93:86:97:7d:cc:11:
                    44:a6:bc:81:db:41:a5:e7:b2:5f:0b:00:b1:43:c0:
                    52:f1:c0:09:72:79:71:bf:96:75:c7:f1:40:0b:e2:
                    17:09:1f:d1:76:dc:7b:42:6d:96:03:7b:a4:fc:9a:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:F4:F1:A6:4B:D4:31:A4:2D:C7:3E:49:78:F3:1B:69:6E:E4:A3
            X509v3 Authority Key Identifier:
                keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:41:0c:7f:fd:9b:cf:5a:3e:af:8a:59:9b:0a:16:4d:95:f9:
         11:08:52:36:3b:63:69:b3:43:2c:0e:ff:30:be:d0:a3:7b:fe:
         cc:07:78:26:c0:5e:83:9d:99:50:c3:40:b3:d7:22:e2:ff:c7:
         04:85:25:77:43:e4:6f:cb:c3:b2:ea:bd:1b:44:ce:52:f4:3f:
         13:68:16:2c:65:a4:42:89:0a:29:16:01:14:26:48:44:5d:9e:
         d2:ac:ec:a4:fe:b1:fd:bd:d2:f7:a7:19:71:06:d1:4e:79:f2:
         bd:7f:d5:bb:f9:f8:df:f3:60:a7:a5:40:8a:67:df:e7:19:68:
         e0:2c:65:79:41:3b:7a:a9:6f:f6:ba:f9:a5:d1:5b:74:68:0a:
         b6:f1:44:89:de:95:2d:d1:84:57:55:92:b8:7f:17:48:2a:8b:
         ca:42:c8:e8:36:a8:05:20:79:84:e0:48:0b:58:a8:eb:cc:55:
         88:8b:f9:b1:d7:70:30:a7:4d:10:99:c1:2e:ee:c6:d6:24:5a:
         29:f8:a9:10:c5:15:1e:4e:75:c9:35:0c:42:8d:e2:a1:3b:9d:
         0a:fb:62:a5:8f:7d:d1:4d:db:1c:ae:6e:aa:d5:d1:24:40:2c:
         2b:4b:02:4d:53:c2:00:da:ba:0d:fd:ba:de:de:e1:af:83:b8:
         10:75:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:23 2025 by rpki-client