Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
File:                     3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa (raw, json)
Hash identifier:          YsQSCxzmi4OlAhKKUGG33BIGcIyog9PJ+x0sXyqbpC8=
Subject key identifier:   FF:55:E2:F5:D3:31:BE:DC:39:57:7A:35:83:0E:59:E4:C6:88:18:52
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       30D52DF98D6C18A6444C8D5C0ED8CEE212085CCF
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
Signing time:             Tue 22 Jul 2025 15:09:03 +0000
ROA not before:           Tue 22 Jul 2025 15:04:03 +0000
ROA not after:            Tue 21 Jul 2026 15:09:03 +0000
asID:                     19200
IP address blocks:        168.232.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d5:2d:f9:8d:6c:18:a6:44:4c:8d:5c:0e:d8:ce:e2:12:08:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:03 2025 GMT
            Not After : Jul 21 15:09:03 2026 GMT
        Subject: CN=FF55E2F5D331BEDC39577A35830E59E4C6881852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:65:d5:ed:e1:69:07:48:d0:15:bd:8d:e2:
                    b1:b5:62:78:6b:0f:80:52:ba:6f:7d:58:b9:55:3b:
                    b3:5a:e1:ec:d8:bc:fa:b1:76:c5:ce:bd:3a:49:b1:
                    e1:db:f3:c2:39:bb:9f:89:89:1b:26:d5:60:94:2a:
                    42:41:0a:4e:0f:b3:17:c0:f0:ea:bf:1a:d3:66:a3:
                    39:53:99:f2:85:ad:49:5c:23:07:c4:14:6f:05:67:
                    e5:43:67:c9:cb:8c:bc:cc:35:e9:2e:2b:38:00:aa:
                    1a:4c:03:da:be:c2:e1:dd:bc:5b:1e:36:82:08:ae:
                    f3:33:98:52:d9:76:24:51:ca:28:90:01:0b:3b:5a:
                    6e:fe:70:ba:cf:d1:8f:2f:d7:27:9a:61:01:44:43:
                    72:fd:54:1e:3f:2b:b6:34:85:58:0f:9f:77:86:14:
                    76:b0:f0:b5:0c:33:36:61:09:6c:46:3d:ab:b5:f5:
                    2f:87:e9:7a:33:c9:59:02:4a:15:a4:61:f6:e1:96:
                    59:69:22:95:e2:7a:22:44:7a:5d:06:6e:e2:b8:1d:
                    23:7a:78:ba:b8:73:8e:84:b0:52:7f:44:70:9c:ec:
                    df:16:4e:96:86:e8:ce:a8:ca:af:a1:62:51:82:d2:
                    a9:93:e9:70:4e:d3:32:18:a6:96:b8:6c:af:70:f4:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:E2:F5:D3:31:BE:DC:39:57:7A:35:83:0E:59:E4:C6:88:18:52
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:53:ee:85:0d:36:92:24:d8:7d:a2:f4:c3:54:bb:41:a8:f4:
         67:1b:f4:10:ab:c2:15:54:8b:84:ff:fa:0f:79:0f:f7:65:ff:
         ac:f9:1e:09:22:3d:d4:f3:4d:d2:68:f6:6e:34:4a:2b:c9:14:
         52:ad:6f:c2:b1:08:d3:8e:02:ee:25:06:13:b5:9e:89:9b:6b:
         17:9b:96:25:ae:2d:1d:e1:12:9a:0b:40:f3:af:69:bb:f5:b4:
         bc:41:0b:2b:2d:18:b7:ec:d7:41:1e:70:df:fe:b0:4c:0d:d6:
         32:89:99:a3:8e:69:5f:99:bc:e5:0e:8d:69:60:7e:b4:64:84:
         1d:40:f4:2e:8f:ad:09:9f:b0:e3:f9:c1:b5:fd:4d:28:cd:6c:
         b9:51:05:24:ab:9d:af:b0:95:da:e6:83:3a:aa:38:29:03:42:
         bc:a6:a1:48:fa:f6:d6:90:90:75:07:61:65:7f:3b:94:45:b4:
         c3:61:8a:fd:a9:66:03:fc:92:c5:2f:59:2d:4c:8d:e1:a1:a2:
         da:05:f9:2d:2d:04:db:4d:ab:87:d6:e2:96:07:c9:15:1b:57:
         2a:c9:0c:dc:46:13:95:f9:3e:35:4b:82:52:91:1e:4c:06:e5:
         b8:d1:c7:e3:88:64:7f:8c:2e:67:12:2e:32:ab:f1:a8:2f:58:
         7c:4b:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:38:11 2025 by rpki-client