Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa (raw, json)
Hash identifier:          NqW7OSRXLsEuSCbXapM7ZGjHPsQ9cMAywILCw+lD/9U=
Subject key identifier:   FB:89:1B:70:72:AE:E5:3D:2F:78:8D:18:D0:B4:43:BA:CA:F5:62:23
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       2A938ED2AC0DC214E334FD5636E2C29AE1B7CE40
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa
Signing time:             Thu 18 Sep 2025 12:24:00 +0000
ROA not before:           Thu 18 Sep 2025 12:19:00 +0000
ROA not after:            Thu 17 Sep 2026 12:24:00 +0000
asID:                     265158
IP address blocks:        167.249.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:93:8e:d2:ac:0d:c2:14:e3:34:fd:56:36:e2:c2:9a:e1:b7:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Sep 18 12:19:00 2025 GMT
            Not After : Sep 17 12:24:00 2026 GMT
        Subject: CN=FB891B7072AEE53D2F788D18D0B443BACAF56223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:cd:f8:69:bd:83:eb:33:dc:53:9d:49:6e:
                    0b:47:88:d9:5f:42:d8:ec:05:d3:16:eb:91:27:45:
                    dd:df:51:91:9a:79:ac:ea:78:3b:f1:6a:7b:7b:0f:
                    0a:7a:af:42:c2:86:dc:42:15:7e:2a:cf:f5:28:49:
                    9e:46:b8:e9:d6:0f:59:f7:7f:d9:fe:1e:18:62:03:
                    09:c6:ba:04:1d:20:f0:0f:40:02:af:54:ef:53:b0:
                    c4:37:ae:dc:60:3b:0a:a4:e3:66:ec:29:67:78:fb:
                    af:83:a0:b7:7e:7f:f8:3f:45:14:7f:e2:ae:28:51:
                    9d:9d:fb:fa:b3:0a:ec:90:59:75:1d:48:40:4b:39:
                    17:28:dd:90:b2:ec:05:10:5f:9c:40:0d:f2:de:48:
                    15:cc:20:14:bc:84:c1:6a:7a:b8:9a:06:33:90:0b:
                    b2:19:95:6e:2b:2c:8a:4c:1a:5d:43:da:37:97:c9:
                    a1:7a:9c:e7:39:d0:35:e8:02:de:26:ec:fe:8f:07:
                    be:4c:98:46:11:ee:d1:95:85:b5:ea:10:97:24:79:
                    ae:72:63:1f:15:29:2f:b3:a5:fc:54:fd:06:2f:79:
                    e7:af:a9:bf:f4:92:b9:e9:8d:ab:e6:39:65:b3:aa:
                    54:81:34:f4:d2:34:9b:ae:2e:fd:9a:a5:78:a3:f5:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:1B:70:72:AE:E5:3D:2F:78:8D:18:D0:B4:43:BA:CA:F5:62:23
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3232203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:36:01:d3:b3:26:52:16:bd:e1:e9:7e:9b:28:35:0e:a0:eb:
         1e:b1:ad:10:4c:45:a3:37:4a:e4:4f:36:6a:84:89:18:b1:3b:
         9d:7f:67:f6:ff:82:d5:96:dd:92:72:4d:4e:06:b9:be:89:31:
         32:2a:36:bf:ac:4e:49:7f:11:7b:f4:90:70:e4:22:4f:2b:ed:
         e2:89:fe:7e:37:d6:f0:d2:0b:71:d9:5e:bd:4a:83:d7:a5:5b:
         1c:b8:54:14:78:93:ea:ac:0b:60:c6:36:4f:d1:69:74:d6:3b:
         a0:5c:e1:d5:cb:95:74:02:23:4a:76:e8:30:19:43:07:cd:67:
         ae:0f:0f:11:86:c5:d6:7a:72:e4:e5:39:3e:b7:7a:34:da:e9:
         b2:63:1a:ff:6d:57:fd:dd:9b:f1:1f:05:23:16:4a:7a:4e:73:
         8c:cb:8d:2b:31:1a:b9:27:16:9d:ce:f3:ce:6d:2d:13:0c:33:
         72:d3:bc:51:5e:c2:5f:46:62:a7:c8:6a:02:bd:be:ee:8e:ab:
         96:66:30:2c:97:5e:0f:97:d0:7a:0a:9c:1a:ac:ac:3c:a7:07:
         d2:ce:cc:1a:32:b8:fc:67:ac:03:70:1c:12:7a:94:68:ef:8d:
         28:69:83:3f:8c:97:6e:02:d2:3a:41:e3:dd:af:d7:72:e7:8f:
         82:aa:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:24 2025 by rpki-client