Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          b6n2K8VgfOBIcOW4G8ookE/jtZrX4YEx5fYCGRlMwwI=
Subject key identifier:   D7:4E:5D:6B:EA:77:30:A5:9D:4F:D6:DA:CC:B9:72:EC:8C:C7:86:43
Certificate issuer:       /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial:       67ACCA46A56327358582295750551213E5A33BE8
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
Signing time:             Wed 01 Oct 2025 22:07:09 +0000
ROA not before:           Wed 01 Oct 2025 22:02:09 +0000
ROA not after:            Wed 30 Sep 2026 22:07:09 +0000
asID:                     264936
IP address blocks:        168.232.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ac:ca:46:a5:63:27:35:85:82:29:57:50:55:12:13:e5:a3:3b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Validity
            Not Before: Oct  1 22:02:09 2025 GMT
            Not After : Sep 30 22:07:09 2026 GMT
        Subject: CN=D74E5D6BEA7730A59D4FD6DACCB972EC8CC78643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:c2:98:2c:fb:20:4c:71:1c:00:26:d7:88:
                    90:99:e5:9d:80:a5:e1:82:8d:60:f3:88:2a:26:96:
                    9d:1f:d4:fd:92:a6:f0:10:d1:d2:9a:42:2f:bb:83:
                    07:81:32:d8:0a:44:c6:c8:d2:58:9a:0d:ea:1e:39:
                    a6:ba:8f:cc:b6:4f:08:91:79:dc:b9:97:54:a2:d3:
                    0f:75:80:4a:d2:72:4b:88:b2:10:16:bb:1d:99:ba:
                    ff:05:f3:e0:c8:7c:1c:7a:53:b2:92:87:04:0c:bf:
                    6a:60:c7:e8:03:51:29:43:0b:57:a8:4b:c4:0b:15:
                    c9:db:88:66:65:9f:b2:0a:02:cc:0c:5d:43:b9:ee:
                    3d:0e:95:dc:d5:26:1a:d9:e0:d8:11:8c:8e:c4:45:
                    95:91:a7:6d:54:c5:25:db:16:f3:bf:f4:f0:ee:f5:
                    8d:43:17:66:8f:3c:95:7d:9e:dc:6f:0a:ef:39:26:
                    66:b9:28:6c:af:09:12:37:df:90:3f:32:98:2e:b6:
                    ad:ea:1a:3a:33:3a:d8:13:97:fd:6f:f8:a3:3f:c6:
                    f9:60:eb:37:3a:d5:54:59:c7:8b:35:83:76:43:0b:
                    21:88:a7:6d:6b:4e:23:a5:92:40:4a:14:de:17:be:
                    4a:63:86:1b:78:6e:a1:c8:62:25:6c:14:e5:21:d7:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:5D:6B:EA:77:30:A5:9D:4F:D6:DA:CC:B9:72:EC:8C:C7:86:43
            X509v3 Authority Key Identifier:
                keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:bf:88:a1:47:d5:0f:6d:8c:b1:39:f1:4a:18:43:79:52:cf:
         2d:c5:40:65:81:c4:34:a9:43:7a:d0:04:4a:64:17:e3:d1:31:
         cb:ef:a5:94:cb:a0:35:7a:0e:87:e7:21:f5:a5:38:eb:35:cc:
         2f:d7:27:72:be:5f:35:cd:0d:94:cc:66:a4:79:ef:39:f9:29:
         79:81:ad:99:97:11:de:18:70:fa:f8:19:34:e9:35:13:df:4e:
         72:d2:85:b8:dd:a5:34:d5:fb:73:1a:0a:c3:29:66:7e:60:14:
         f4:3c:0a:73:bb:59:f5:a0:6c:31:2d:3a:43:98:02:ab:70:b6:
         2c:94:3c:c6:ee:3b:d9:15:19:d6:40:15:29:77:c1:17:cd:42:
         af:1b:1f:12:fd:01:87:1b:8f:17:30:9b:60:c0:2a:bb:56:21:
         21:b0:54:25:0e:17:56:d6:77:1e:61:fb:23:f8:19:3f:f0:14:
         c2:75:7b:9a:01:38:97:63:51:6a:14:19:0d:9d:4d:10:d3:bb:
         1c:53:b4:9a:e7:71:7f:90:bc:b9:ea:c8:a8:ff:b1:d0:c4:3d:
         ed:c9:53:b2:69:21:12:5d:73:e0:8d:dd:3d:8b:00:9e:f6:d6:
         79:ea:a4:50:68:07:9b:bd:de:f8:d9:cd:18:4a:e8:75:f0:2a:
         52:e4:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:10:46 2025 by rpki-client