Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          vfrWJduAqerJz25oD1UBGwwrcqDLfvcGwFZ/D/a9tYU=
Subject key identifier:   97:9E:38:88:7F:FC:F6:CF:44:13:EF:0A:37:EA:EE:1F:30:DE:7C:2B
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       1B8463686A3C2074519ACE6FF7CBEEDD6E69B1B6
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa
Signing time:             Thu 18 Sep 2025 12:24:01 +0000
ROA not before:           Thu 18 Sep 2025 12:19:01 +0000
ROA not after:            Thu 17 Sep 2026 12:24:01 +0000
asID:                     265158
IP address blocks:        167.249.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:84:63:68:6a:3c:20:74:51:9a:ce:6f:f7:cb:ee:dd:6e:69:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Sep 18 12:19:01 2025 GMT
            Not After : Sep 17 12:24:01 2026 GMT
        Subject: CN=979E38887FFCF6CF4413EF0A37EAEE1F30DE7C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:60:3c:7f:57:14:b3:6a:6b:11:f6:5e:78:
                    56:04:57:d7:6e:22:36:ce:65:89:48:db:a7:cb:6a:
                    a7:76:28:e0:8e:e1:52:93:eb:64:bb:c2:f6:f3:86:
                    aa:00:d9:6b:d8:18:e0:a3:f9:ee:d7:bd:cc:3e:84:
                    68:a5:61:38:94:82:1d:a8:20:e9:1f:b7:07:e5:49:
                    ec:de:74:c5:f2:a7:b2:74:6b:9c:4b:8b:c7:95:7e:
                    b6:51:19:6e:f0:51:d9:74:f5:28:d3:ab:c4:9f:c1:
                    fe:20:2b:af:ef:7a:72:be:2d:5f:4a:71:92:92:ff:
                    19:b9:12:71:fb:b0:ea:50:c2:64:23:ce:08:fc:54:
                    df:ee:d7:61:3f:ed:17:f2:cb:81:15:c0:cc:c7:0a:
                    f9:75:96:7d:d5:72:2c:70:45:22:6b:4d:57:3f:36:
                    b8:5e:2a:1c:46:e1:e9:01:53:e9:9c:99:76:78:1c:
                    92:9b:2c:b6:92:8e:3c:c1:5f:b5:54:b6:0e:86:08:
                    53:21:d5:ae:78:d8:d7:e7:c7:27:a9:a1:af:80:1e:
                    7b:16:ca:25:41:72:a2:b7:14:d2:fc:d1:c1:b5:f5:
                    83:e8:3e:a1:64:b4:07:36:f5:db:80:b0:85:2a:03:
                    54:32:1b:a6:54:e5:9b:42:4f:a8:62:85:02:66:7e:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9E:38:88:7F:FC:F6:CF:44:13:EF:0A:37:EA:EE:1F:30:DE:7C:2B
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:aa:2a:27:f5:03:25:16:c7:5c:65:7b:b4:de:43:ba:d6:
         ac:5d:8b:15:68:59:4e:55:71:42:b6:fb:ca:d3:83:52:be:69:
         f6:74:7e:44:68:7f:41:cc:90:6b:41:cf:2b:33:0a:f9:0d:2d:
         df:31:2f:5b:39:ef:ab:54:57:39:fb:ee:e1:3a:15:64:2f:f6:
         5a:e1:65:fa:14:d6:2a:37:e9:7e:81:98:c3:34:02:a0:70:a1:
         85:a8:d7:78:fd:ea:20:04:1f:49:1e:0d:8b:e6:d6:c6:ee:57:
         60:71:a5:46:b8:21:97:f8:95:af:0e:61:cd:87:fa:a1:5a:d0:
         8e:c2:a8:0c:22:01:d4:ec:76:27:e6:b9:a1:de:12:66:eb:67:
         35:4e:73:ee:7b:3a:76:c0:3b:40:51:be:fd:a9:9e:5c:f5:2e:
         31:60:5e:7b:76:55:be:d8:fd:6e:cb:2f:0c:e0:2a:22:62:98:
         33:dc:b9:89:4c:3f:3c:9a:ae:ed:6f:e4:23:c8:53:8b:aa:a9:
         ca:e8:78:06:23:48:1b:42:c2:62:70:06:8b:6f:c8:61:12:6d:
         b4:11:bc:9d:53:7d:87:08:aa:00:05:92:57:da:a6:85:86:ec:
         3c:3f:bc:0f:b0:1e:c3:32:62:82:c5:f1:b1:41:90:d3:93:7f:
         0f:21:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:22 2025 by rpki-client