Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          hs/C+tX4Qh82tijo8ow3bSKxgjSLhPqSHBj02wOI4sk=
Subject key identifier:   25:7A:DA:59:47:D4:6D:B4:F1:76:E7:68:F2:2A:81:11:14:EB:8D:5C
Certificate issuer:       /CN=16171D3350AE619647CF6C101AB78E2709DD330E
Certificate serial:       1CD6E331B4CE3423E21357DFDBFD659859A2F318
Authority key identifier: 16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa
Signing time:             Tue 12 Aug 2025 15:29:40 +0000
ROA not before:           Tue 12 Aug 2025 15:24:40 +0000
ROA not after:            Tue 11 Aug 2026 15:29:40 +0000
asID:                     265287
IP address blocks:        168.90.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d6:e3:31:b4:ce:34:23:e2:13:57:df:db:fd:65:98:59:a2:f3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16171D3350AE619647CF6C101AB78E2709DD330E
        Validity
            Not Before: Aug 12 15:24:40 2025 GMT
            Not After : Aug 11 15:29:40 2026 GMT
        Subject: CN=257ADA5947D46DB4F176E768F22A811114EB8D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:3a:d9:94:cc:d3:5b:28:7c:c2:fb:10:9b:
                    8c:02:8e:e8:e3:56:f0:96:bb:b0:c5:27:a9:3e:e1:
                    91:37:fa:2b:d9:03:fa:c2:b7:52:25:10:39:80:4d:
                    fa:2e:6b:f2:b3:de:88:05:df:cb:41:10:b7:df:fb:
                    f1:7e:20:71:e0:4a:b2:9f:52:26:b7:36:8d:a1:f9:
                    39:bc:4e:52:8c:8f:7b:22:7c:1c:f6:c0:06:5c:40:
                    3f:d4:e3:5f:5f:ee:5b:50:98:8c:d9:6d:63:20:b8:
                    e5:b1:ec:59:66:d8:b7:f9:5f:fc:8d:3b:b7:6b:25:
                    0b:cc:6e:7a:15:04:ac:30:d7:bc:c7:3b:3d:4f:f2:
                    44:74:36:fb:f9:7a:52:70:24:bd:c9:f9:11:b6:d7:
                    1f:37:22:63:e7:60:83:f0:d8:14:61:60:d2:53:c1:
                    21:5d:e4:4e:db:17:c9:72:42:0b:db:65:37:c2:bf:
                    08:37:ef:0f:58:0d:e1:28:97:d5:a3:d5:c0:50:a0:
                    2f:62:4e:03:08:55:15:29:98:98:7f:f2:42:f1:d9:
                    e3:91:d9:cc:ac:9e:55:4b:fb:d9:3e:cc:41:63:ce:
                    5d:1e:14:8b:45:71:81:b6:1a:06:c8:09:59:ed:ed:
                    ff:17:25:d1:92:ce:6e:dc:a0:14:49:5b:8b:12:31:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:DA:59:47:D4:6D:B4:F1:76:E7:68:F2:2A:81:11:14:EB:8D:5C
            X509v3 Authority Key Identifier:
                keyid:16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:c4:0d:25:80:18:d1:76:8d:87:1e:3a:33:c0:79:fd:b1:
         95:00:77:fc:c4:75:9e:58:0a:88:1a:a7:67:67:f7:d5:f5:54:
         ca:3a:86:c4:b4:03:94:20:9b:b0:39:a7:c9:6a:5b:bc:97:36:
         80:58:fe:01:19:94:13:ff:34:a9:aa:17:3a:de:6e:17:cb:29:
         1b:30:11:df:53:89:1e:48:8b:f4:99:24:e4:a0:24:9c:4e:bb:
         67:da:99:8c:38:42:01:e7:fb:a6:60:11:9d:47:05:44:16:d9:
         d4:d0:33:ff:99:db:48:2e:dc:b6:7c:11:ff:38:52:7b:9e:39:
         04:4d:59:be:7f:6e:b0:3d:e1:a3:a3:a1:17:2c:80:3d:9b:b9:
         df:1a:ed:26:98:27:52:57:46:72:52:ce:dd:12:7b:a3:b6:a3:
         9d:e3:09:76:91:7d:cb:f1:07:fd:6d:b5:2b:49:9b:fc:00:65:
         4e:c3:5c:17:ad:e6:7e:dd:10:a1:a4:57:61:9e:2c:d3:7e:7d:
         21:33:88:d9:96:59:9b:0f:6b:e3:f2:c9:7d:69:2f:49:bb:88:
         ea:4d:18:bb:0a:8c:00:7e:ba:79:46:1a:98:37:a4:e7:cb:ab:
         e0:b8:bd:59:1a:e2:fa:38:2a:9d:89:13:23:6a:57:60:c9:d7:
         71:8b:38:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHNbjMbTONCPiE1ff2/1lmFmi8xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNzFEMzM1MEFFNjE5NjQ3Q0Y2QzEwMUFCNzhFMjcw
OUREMzMwRTAeFw0yNTA4MTIxNTI0NDBaFw0yNjA4MTExNTI5NDBaMDMxMTAvBgNV
BAMTKDI1N0FEQTU5NDdENDZEQjRGMTc2RTc2OEYyMkE4MTExMTRFQjhENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUhjrZlMzTWyh8wvsQm4wCjujj
VvCWu7DFJ6k+4ZE3+ivZA/rCt1IlEDmATfoua/Kz3ogF38tBELff+/F+IHHgSrKf
Uia3No2h+Tm8TlKMj3sifBz2wAZcQD/U419f7ltQmIzZbWMguOWx7Flm2Lf5X/yN
O7drJQvMbnoVBKww17zHOz1P8kR0Nvv5elJwJL3J+RG21x83ImPnYIPw2BRhYNJT
wSFd5E7bF8lyQgvbZTfCvwg37w9YDeEol9Wj1cBQoC9iTgMIVRUpmJh/8kLx2eOR
2cysnlVL+9k+zEFjzl0eFItFcYG2GgbICVnt7f8XJdGSzm7coBRJW4sSMVpRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJXraWUfUbbTxdudo8iqBERTrjVwwHwYDVR0j
BBgwFoAUFhcdM1CuYZZHz2wQGreOJwndMw4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FiRkFMQm01RFk1anhYSmNKa3FYNVdYR0dqeEdkYkJSbW9UQ2hOU2s0
Z3QvMC8xNjE3MUQzMzUwQUU2MTk2NDdDRjZDMTAxQUI3OEUyNzA5REQzMzBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTcxRDMzNTBBRTYxOTY0
N0NGNkMxMDFBQjc4RTI3MDlERDMzMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRYkZBTEJtNURZNWp4WEpjSmtxWDVXWEdHanhHZGJCUm1vVENoTlNrNGd0LzAv
MzEzNjM4MmUzOTMwMmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWoYwDQYJKoZIhvcNAQELBQADggEBAEwqxA0l
gBjRdo2HHjozwHn9sZUAd/zEdZ5YCogap2dn99X1VMo6hsS0A5Qgm7A5p8lqW7yX
NoBY/gEZlBP/NKmqFzrebhfLKRswEd9TiR5Ii/SZJOSgJJxOu2famYw4QgHn+6Zg
EZ1HBUQW2dTQM/+Z20gu3LZ8Ef84UnueOQRNWb5/brA94aOjoRcsgD2bud8a7SaY
J1JXRnJSzt0Se6O2o53jCXaRfcvxB/1ttStJm/wAZU7DXBet5n7dEKGkV2GeLNN+
fSEziNmWWZsPa+PyyX1pL0m7iOpNGLsKjAB+unlGGpg3pOfLq+C4vVka4vo4Kp2J
EyNqV2DJ13GLOCU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:42:21 2025 by rpki-client