Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa
File:                     3136382e3139362e382e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          V9iU0IGgSrgs5zXf2CyRI1MVJTBDc7PcXwvFbVV6GnI=
Subject key identifier:   E2:49:89:4A:5A:52:6C:75:A0:66:AD:EF:90:02:EF:82:AD:56:5F:73
Certificate issuer:       /CN=163A822EB1F1299E4F1A306D50A95304A748A422
Certificate serial:       4022398BF2E0C52319A3B3ADAFB0CBFE6B01AD42
Authority key identifier: 16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa
Signing time:             Mon 06 Oct 2025 19:13:23 +0000
ROA not before:           Mon 06 Oct 2025 19:08:23 +0000
ROA not after:            Mon 05 Oct 2026 19:13:23 +0000
asID:                     264241
IP address blocks:        168.196.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.crl
                          rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:39:8b:f2:e0:c5:23:19:a3:b3:ad:af:b0:cb:fe:6b:01:ad:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163A822EB1F1299E4F1A306D50A95304A748A422
        Validity
            Not Before: Oct  6 19:08:23 2025 GMT
            Not After : Oct  5 19:13:23 2026 GMT
        Subject: CN=E249894A5A526C75A066ADEF9002EF82AD565F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:b3:c5:be:03:45:79:cf:f2:36:38:49:7d:
                    49:39:6a:d1:67:6a:04:a6:6a:f9:fc:7c:0c:96:d4:
                    19:59:1a:ee:78:28:cb:a3:4e:9a:b7:d2:c1:ae:b9:
                    eb:1b:e4:e8:2b:40:bf:5e:37:af:98:bb:47:50:9f:
                    62:2a:1b:fe:ce:20:14:46:8d:5a:b3:1a:32:0a:e1:
                    47:fa:9c:74:6d:58:d0:ef:3d:bc:23:21:71:cb:da:
                    b0:75:88:84:60:14:39:49:66:ae:96:9e:26:a7:24:
                    11:f9:52:65:d3:42:69:94:99:51:da:28:27:10:ea:
                    5b:5e:e5:6d:25:d0:c3:71:51:b4:62:1e:65:ec:a2:
                    b6:bd:9a:4d:22:05:d0:38:ed:7f:89:e1:cb:31:db:
                    cc:f5:16:da:e6:3d:ac:e7:11:9b:79:53:dd:8d:71:
                    ad:b9:67:f5:94:9c:e0:dd:a0:65:d2:72:87:85:c9:
                    9e:5e:e0:52:80:d2:e2:b8:c5:f7:a1:62:79:87:22:
                    de:35:ae:03:68:38:68:42:5c:30:79:4f:8c:93:d6:
                    b9:cb:3c:51:88:1f:06:d3:5e:ba:55:14:a8:8a:09:
                    b5:ac:be:4e:31:b0:9b:37:1e:ad:05:ad:f9:3f:a8:
                    79:bd:91:46:f8:93:06:0b:e3:3a:41:c8:d7:3e:0b:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:49:89:4A:5A:52:6C:75:A0:66:AD:EF:90:02:EF:82:AD:56:5F:73
            X509v3 Authority Key Identifier:
                keyid:16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:46:25:88:d0:9b:8f:dc:59:7c:f2:5b:9b:4c:45:1a:66:c7:
         6c:97:23:d2:83:41:b1:32:7a:41:00:13:a5:dd:b4:dd:21:66:
         ee:e3:2f:a9:43:66:68:49:48:1b:7f:24:99:7e:76:4b:01:b5:
         35:6c:3b:3a:b4:cd:4b:a0:85:3f:b7:c6:b1:94:d5:62:c6:22:
         3b:41:6e:a6:44:dd:aa:ce:4e:20:e5:18:ff:ed:5c:85:df:9d:
         f6:89:dc:8d:13:60:27:0a:1e:f7:a3:16:87:a7:eb:96:77:91:
         a7:f9:7c:be:ea:c8:3f:a6:5b:65:8b:34:94:af:32:3b:0c:ab:
         23:0c:2f:8e:e8:ad:03:0b:93:af:ab:c9:3a:e9:fb:5c:0f:ca:
         0d:fb:7f:bb:ab:bd:92:d9:1a:78:18:3a:f4:ac:08:45:66:c3:
         bb:f1:fa:04:8f:b9:d1:6e:02:8f:8a:57:32:29:c5:aa:61:33:
         19:3f:c5:46:8b:2b:7f:d6:87:55:24:b1:d2:b2:e6:ba:60:5c:
         9a:0b:ae:f3:0b:47:3f:98:75:86:cd:e0:7d:a8:d9:20:15:ca:
         aa:01:bd:1e:70:ac:ed:15:43:54:c0:f2:95:37:9b:75:29:3a:
         4f:4d:4d:0f:85:93:56:d1:fd:67:c9:47:de:f5:8c:de:c3:b7:
         1b:ad:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:41 2025 by rpki-client