Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135362e302f32322d3332203d3e20323635323536.roa
File:                     3136382e302e3135362e302f32322d3332203d3e20323635323536.roa (raw, json)
Hash identifier:          phedYgkv7e1Pg5LvI15i3pszhqZjLS3umdAbN5+wnsI=
Subject key identifier:   67:56:34:61:A5:5D:FC:C3:BD:02:01:AB:0A:31:1B:51:D4:51:CA:FB
Certificate issuer:       /CN=1D98467C905A92172F884A0A1419F30237985451
Certificate serial:       3DBFB1022E23A2063B0298384243CEF5E420AEFC
Authority key identifier: 1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135362e302f32322d3332203d3e20323635323536.roa
Signing time:             Wed 13 Aug 2025 10:06:03 +0000
ROA not before:           Wed 13 Aug 2025 10:01:03 +0000
ROA not after:            Wed 12 Aug 2026 10:06:03 +0000
asID:                     265256
IP address blocks:        168.0.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl
                          rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bf:b1:02:2e:23:a2:06:3b:02:98:38:42:43:ce:f5:e4:20:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D98467C905A92172F884A0A1419F30237985451
        Validity
            Not Before: Aug 13 10:01:03 2025 GMT
            Not After : Aug 12 10:06:03 2026 GMT
        Subject: CN=67563461A55DFCC3BD0201AB0A311B51D451CAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:03:5e:f7:41:0d:01:18:f4:3d:8c:1c:57:
                    e6:a9:c7:4e:5c:99:24:dc:1e:63:06:dd:24:4d:93:
                    f6:aa:45:d1:3c:65:d0:e0:96:f7:92:a0:c1:81:5b:
                    c9:d8:e1:64:68:40:3c:5d:2e:4b:36:0e:50:98:c0:
                    fc:86:76:fe:15:e3:08:25:72:7a:03:d3:29:87:1b:
                    7c:33:2c:4d:81:f3:b4:01:c4:73:d2:2b:49:a0:fb:
                    0e:87:48:bf:39:6b:23:88:ef:5d:15:15:22:3f:63:
                    b6:9e:4d:b8:e6:11:6f:12:4a:66:27:a8:33:52:91:
                    75:1e:40:c6:c9:29:76:75:75:f4:52:ac:78:6a:90:
                    99:95:c5:91:fa:c5:18:5b:83:44:a1:6b:06:fb:51:
                    57:c2:94:94:27:1b:89:bf:e9:77:7b:16:c4:bb:a6:
                    d9:f3:06:ec:2c:b2:cf:8a:ef:e4:3b:0d:02:a7:c0:
                    ce:92:99:0f:21:fa:c0:9c:19:2a:88:85:6e:74:46:
                    07:96:65:a3:fc:38:d0:ff:ec:0a:66:38:17:88:67:
                    6b:af:b8:ea:7c:71:03:35:b5:24:d4:be:df:30:c2:
                    38:e7:f4:f4:38:5b:f4:63:7e:70:9b:23:7c:d6:dc:
                    69:4c:06:c0:2b:23:f3:c0:4f:ff:39:02:3c:fd:19:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:34:61:A5:5D:FC:C3:BD:02:01:AB:0A:31:1B:51:D4:51:CA:FB
            X509v3 Authority Key Identifier:
                keyid:1D:98:46:7C:90:5A:92:17:2F:88:4A:0A:14:19:F3:02:37:98:54:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/1D98467C905A92172F884A0A1419F30237985451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D98467C905A92172F884A0A1419F30237985451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/1/3136382e302e3135362e302f32322d3332203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:da:6c:05:bd:bd:35:0b:a1:d1:c7:f4:15:c7:43:8b:b0:f2:
         54:d9:3c:68:1c:a1:c1:44:6f:cc:56:21:c2:39:d2:5a:1e:31:
         aa:6d:a7:e9:b5:13:dd:54:99:72:3d:be:76:93:d6:4e:5f:22:
         2c:04:b1:b3:bd:60:53:32:17:ae:18:1b:c1:1c:dd:d1:f8:7d:
         68:50:80:cd:86:bc:6b:90:6e:59:38:87:e9:2f:ba:0c:86:b2:
         e4:63:29:fa:94:38:16:57:e4:0a:5b:f6:95:8d:b5:ba:3b:08:
         7e:ec:7b:6a:53:4e:73:93:d2:1a:35:c9:92:30:a8:72:85:f2:
         24:05:26:8d:e8:2e:7f:10:5a:a8:d3:43:eb:75:7e:9e:dd:b9:
         fb:c0:a1:96:16:dd:b6:4a:ff:f5:35:a0:fa:1e:c6:7e:b3:ca:
         63:60:15:0c:2c:a8:57:95:02:a7:b4:04:bf:7f:2b:d2:df:38:
         20:7a:aa:ba:4b:51:62:c6:d8:3b:3c:9b:e6:6b:5c:8b:24:96:
         f0:59:6b:66:12:35:24:dd:41:90:23:72:b2:65:e4:6f:f7:75:
         ac:63:3c:b1:e1:e9:cc:97:2c:8a:21:09:73:48:ea:3d:9e:b0:
         a5:d5:fd:f4:3c:68:7b:60:2a:ba:91:e5:e2:e9:6b:e3:af:5d:
         4c:2b:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:27:05 2025 by rpki-client