Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          hxnu60ZFPuIK4+FaDUjDlsEKN1s18PXnG61xACasDAk=
Subject key identifier:   37:8F:E8:F9:1B:13:12:4B:54:C1:A8:C3:1D:80:AC:89:DB:E4:2E:A9
Certificate issuer:       /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial:       165221734B983FAB7A29129963BD16034E8EB0D5
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa
Signing time:             Wed 01 Oct 2025 22:07:08 +0000
ROA not before:           Wed 01 Oct 2025 22:02:08 +0000
ROA not after:            Wed 30 Sep 2026 22:07:08 +0000
asID:                     264936
IP address blocks:        168.232.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:21:73:4b:98:3f:ab:7a:29:12:99:63:bd:16:03:4e:8e:b0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Validity
            Not Before: Oct  1 22:02:08 2025 GMT
            Not After : Sep 30 22:07:08 2026 GMT
        Subject: CN=378FE8F91B13124B54C1A8C31D80AC89DBE42EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:64:83:cf:5e:01:d7:5e:0b:d3:9b:b5:bc:
                    f2:12:ae:0e:75:90:75:6a:14:02:53:8f:6b:0d:1c:
                    df:cc:27:b4:6c:62:b1:92:02:83:2f:4b:55:b2:1e:
                    6f:1f:53:4a:39:9b:95:0b:35:6b:10:c4:b4:2b:08:
                    70:f2:d2:ff:30:5e:b7:45:bb:3a:d6:af:02:66:35:
                    de:7c:b7:26:29:da:87:25:f9:94:0e:d0:1d:11:69:
                    77:0b:90:3f:e2:de:bc:c5:3b:2b:4a:c7:22:cd:13:
                    b1:af:8c:a7:67:17:0e:11:3b:3e:a3:ea:46:8b:84:
                    97:a7:60:ba:82:9d:e7:a1:e2:a8:76:31:26:ca:e4:
                    57:00:9e:8d:e8:50:66:9d:a2:4b:fb:cf:9f:f8:c6:
                    ba:1c:e7:68:ad:22:68:2a:c7:dd:bd:96:94:18:c1:
                    6b:7b:ae:ef:a0:d7:74:53:a6:26:dc:80:50:de:41:
                    73:08:5a:0a:0b:6c:c1:6e:25:1d:c7:ce:a4:ce:c8:
                    bb:c9:0b:de:6d:31:75:ce:b0:82:e2:c0:f8:d7:6c:
                    87:83:0e:7a:12:22:11:af:6d:a4:2c:b1:70:c9:cc:
                    ac:ae:9c:96:bd:02:d8:f3:31:c3:1d:27:cb:c4:dd:
                    18:d2:1d:59:2a:37:b3:0f:c8:76:81:6e:c6:1c:34:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:E8:F9:1B:13:12:4B:54:C1:A8:C3:1D:80:AC:89:DB:E4:2E:A9
            X509v3 Authority Key Identifier:
                keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:0f:de:db:ea:e9:e9:21:2a:e8:fe:d5:bc:2c:08:7b:cf:86:
         83:85:d7:5d:ab:5a:b4:56:01:f2:1b:8f:82:b0:21:38:3d:39:
         c4:73:7a:cd:1b:aa:88:3d:28:55:cc:f5:a7:e7:6d:b5:51:bb:
         b6:3d:b4:78:12:3b:ae:7a:0e:8d:79:c2:f4:d6:58:ce:61:1d:
         c0:e2:97:91:9f:06:ea:a9:bc:87:67:48:fb:ea:93:2f:4c:3d:
         cc:ad:aa:56:33:59:9d:12:14:9b:cc:2c:93:a7:4e:f4:df:de:
         90:e9:d0:a8:36:10:9a:42:b2:3a:fd:aa:90:de:cd:98:2f:17:
         80:f8:9f:ba:fc:04:fe:ca:26:d3:9d:c9:47:df:39:35:4b:b7:
         cb:26:46:7a:03:55:ee:c3:1d:11:64:a6:88:f1:ac:df:9e:88:
         87:07:49:d8:be:a5:3b:35:54:e2:45:56:47:b8:b4:8c:67:0b:
         34:af:c3:91:18:a0:85:8d:0b:e5:09:0e:a9:2a:9e:ef:7c:4a:
         84:cd:4f:3d:20:47:20:49:e9:d7:5b:75:ba:22:9f:ce:7c:66:
         9d:40:c7:38:26:5b:66:0e:c2:07:7d:98:58:0d:d9:9a:b5:c7:
         e9:30:3a:38:69:e5:de:11:a1:f5:95:43:fa:55:7f:69:95:fe:
         54:30:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:04:12 2025 by rpki-client