Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa
File:                     3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa (raw, json)
Hash identifier:          ADJucliqDQiVAKZL/vYy+7C9HNIkmCCcHwFzhIThCAs=
Subject key identifier:   DE:2F:BC:E6:90:E2:F6:FD:15:25:BF:CB:52:79:98:47:A0:9C:1A:36
Certificate issuer:       /CN=6FE1C5004979F36BE83216E3184358E60F1A8E28
Certificate serial:       6680D7F2E2D8F138F3BD85B360A3C5B003CD6828
Authority key identifier: 6F:E1:C5:00:49:79:F3:6B:E8:32:16:E3:18:43:58:E6:0F:1A:8E:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE1C5004979F36BE83216E3184358E60F1A8E28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa
Signing time:             Mon 22 Sep 2025 21:22:34 +0000
ROA not before:           Mon 22 Sep 2025 21:17:34 +0000
ROA not after:            Mon 21 Sep 2026 21:22:34 +0000
asID:                     264887
IP address blocks:        168.227.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/6FE1C5004979F36BE83216E3184358E60F1A8E28.crl
                          rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/6FE1C5004979F36BE83216E3184358E60F1A8E28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE1C5004979F36BE83216E3184358E60F1A8E28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:80:d7:f2:e2:d8:f1:38:f3:bd:85:b3:60:a3:c5:b0:03:cd:68:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FE1C5004979F36BE83216E3184358E60F1A8E28
        Validity
            Not Before: Sep 22 21:17:34 2025 GMT
            Not After : Sep 21 21:22:34 2026 GMT
        Subject: CN=DE2FBCE690E2F6FD1525BFCB52799847A09C1A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:70:74:97:4d:d5:a2:a1:ff:89:5c:78:6d:
                    46:10:64:df:22:d4:f5:41:e8:25:81:4f:c6:1b:ca:
                    44:30:c9:45:e8:da:bd:e8:02:66:d7:89:5e:be:cd:
                    c5:b1:86:7c:4f:7a:e8:08:5d:9d:2e:71:a6:0d:8a:
                    ec:aa:c4:c1:b3:71:21:17:7c:88:d5:68:60:f5:bd:
                    60:89:f2:0b:9c:ea:6a:41:40:56:44:22:4d:22:da:
                    5b:44:bc:67:44:5f:1a:76:ff:d2:df:98:a0:ea:78:
                    21:6c:4a:07:e9:66:97:51:00:d4:68:8c:cb:80:a7:
                    55:2b:f3:fc:57:f8:9a:bf:ce:0b:a3:d3:e8:e9:b2:
                    4f:94:83:64:7a:3b:11:44:cc:b7:5e:e2:60:53:ad:
                    ec:48:78:84:20:a8:6a:6a:43:48:ae:cd:f6:53:11:
                    23:82:b0:fb:db:25:07:eb:fb:b3:bc:15:2c:ba:26:
                    36:01:53:59:82:97:f6:b6:5c:46:d9:6b:98:fe:6f:
                    d2:c8:fa:59:33:05:5f:ff:95:5f:0b:86:66:3c:2a:
                    8d:79:75:5e:b7:37:0c:0a:a5:7d:5a:05:e2:81:b2:
                    23:1d:c6:9a:10:38:19:26:f5:6a:31:ad:a5:ac:fc:
                    09:c8:62:43:66:53:e6:45:a2:e4:a7:55:39:ae:ce:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:BC:E6:90:E2:F6:FD:15:25:BF:CB:52:79:98:47:A0:9C:1A:36
            X509v3 Authority Key Identifier:
                keyid:6F:E1:C5:00:49:79:F3:6B:E8:32:16:E3:18:43:58:E6:0F:1A:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/6FE1C5004979F36BE83216E3184358E60F1A8E28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE1C5004979F36BE83216E3184358E60F1A8E28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:83:d0:bf:d6:ff:0e:2e:a6:31:ea:de:db:07:f0:cc:74:03:
         5e:4a:30:6f:49:5b:e6:87:c2:be:3d:8c:5c:19:ad:cd:09:1f:
         37:a6:11:b6:87:c7:53:f6:4f:ad:4f:6c:68:a8:70:b4:aa:87:
         ed:ed:41:28:3a:37:a8:06:c7:6c:5e:8f:68:69:7b:b9:fb:5a:
         72:cc:aa:dc:54:ac:53:34:f3:52:58:23:1b:ff:1b:6d:a7:fd:
         d7:55:a5:fb:1a:17:1d:95:d7:2f:9d:ec:9e:7d:fd:6c:13:ed:
         a4:34:22:51:fe:92:4b:7d:d4:f2:2b:e2:f9:9c:29:fe:4f:38:
         c7:77:0b:fe:6c:24:bd:0f:63:a3:39:c9:95:11:88:5a:9f:3e:
         95:69:be:89:b4:41:da:bd:43:5e:1e:ca:7f:1e:36:f0:da:da:
         c4:d5:40:42:29:a5:78:26:55:3d:d4:b0:9b:37:bf:7f:a2:db:
         6f:4e:74:65:c0:e1:df:a8:64:ba:8f:63:8b:ae:43:b2:ee:1c:
         de:30:04:2e:1f:02:c8:90:75:5e:8a:33:93:26:24:cc:d5:b4:
         ac:86:36:8b:ea:b7:f7:9b:99:a8:9f:7e:5c:7f:c2:ba:f4:8e:
         12:7a:01:90:41:ba:dc:4a:09:b5:d7:b9:2b:d7:2a:43:26:f1:
         75:62:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:24:31 2025 by rpki-client