Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa
File:                     3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=
Subject key identifier:   66:BF:D9:02:C3:D1:F7:CF:79:1E:A7:D0:63:38:A1:DF:DF:20:D1:61
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       46C05F5C4F5D8EC8CA502A80ED5508B1966FB0F4
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 18 Aug 2025 20:05:47 +0000
ROA not before:           Mon 18 Aug 2025 20:00:47 +0000
ROA not after:            Mon 17 Aug 2026 20:05:47 +0000
asID:                     53218
IP address blocks:        168.181.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c0:5f:5c:4f:5d:8e:c8:ca:50:2a:80:ed:55:08:b1:96:6f:b0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Aug 18 20:00:47 2025 GMT
            Not After : Aug 17 20:05:47 2026 GMT
        Subject: CN=66BFD902C3D1F7CF791EA7D06338A1DFDF20D161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:cf:a2:2f:80:a9:db:35:9b:d3:15:24:a3:
                    6a:dd:d8:77:b6:a9:f0:c6:90:67:37:d9:99:bd:75:
                    40:ee:62:1a:ba:43:51:0d:60:c1:f5:0f:6e:93:77:
                    33:bb:56:b1:b2:c4:77:66:cf:60:dc:25:b5:52:c0:
                    4a:05:d7:23:f6:45:95:7b:69:bb:97:5f:e9:d9:62:
                    77:db:89:1a:a2:85:90:54:9d:04:df:9b:1c:5d:f3:
                    b8:45:64:38:be:e8:d3:de:41:82:33:e9:6b:ea:45:
                    e9:4e:83:b4:7b:84:28:39:94:6c:eb:0d:0c:25:b0:
                    03:1a:ce:21:60:7d:9b:37:ea:98:27:f7:b7:1c:b4:
                    e0:85:6f:60:4c:2e:cf:35:75:7a:25:e9:3c:fd:18:
                    3b:ee:47:14:31:6a:6e:60:23:26:07:c1:22:ad:a2:
                    06:3b:da:75:53:06:68:a4:77:69:13:3b:3b:50:1c:
                    58:3b:05:75:3e:8f:dc:d6:46:56:ce:5a:52:09:1f:
                    2c:3f:f2:22:72:7e:2c:82:d4:f9:60:11:43:8b:1f:
                    08:10:7f:7f:be:61:9b:9c:07:eb:37:25:47:fb:0b:
                    fb:95:2c:ca:f2:c3:71:30:f6:14:eb:d6:4c:83:8e:
                    0b:22:25:dd:06:96:47:09:b7:db:31:cc:59:64:69:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BF:D9:02:C3:D1:F7:CF:79:1E:A7:D0:63:38:A1:DF:DF:20:D1:61
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:f1:48:6d:4c:d3:a1:c6:d5:12:cb:e9:cf:4c:b5:8c:78:
         5e:00:ec:71:b3:a3:8b:98:53:9f:76:fd:f1:fc:b8:fb:be:ad:
         6b:59:f3:48:a4:9e:e5:2e:3e:60:e8:cb:84:ac:39:a8:04:de:
         18:7b:7e:7c:f0:43:ab:6d:fc:2c:6b:eb:5b:2f:a8:8a:f8:d3:
         23:26:91:d8:30:f0:85:c3:d5:43:5d:7b:a6:05:d4:7a:ac:b0:
         c7:5b:ac:9a:cc:f5:4b:e5:fb:57:de:81:68:bc:db:ce:58:49:
         53:e8:af:6d:5c:a2:e8:f7:11:14:71:32:9c:2e:31:b2:61:f7:
         3c:15:07:89:20:d8:ff:6d:fa:d3:8b:de:d2:fd:57:12:92:0b:
         01:96:9d:32:31:61:0c:71:e4:cb:7e:00:b5:a8:4f:10:71:e7:
         84:8c:4f:3e:09:e1:a2:b3:4f:2e:6d:29:79:df:de:1e:60:6f:
         8f:6b:67:f9:4f:67:de:81:c8:ba:15:68:7d:e3:e8:1e:41:77:
         c1:ef:f1:00:d5:56:45:61:16:83:ac:81:ed:d7:83:7c:7d:b9:
         9c:73:bf:ba:e2:76:a3:75:0d:00:73:36:64:5d:af:6d:71:97:
         eb:78:0a:c2:7a:27:4d:ed:47:53:70:c6:13:f0:bd:8e:2e:ed:
         59:de:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:53:14 2025 by rpki-client