Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa
File:                     3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          YCbMSDPRS6ewTLeYnUBJvXcpj7sZdqoxTTT+kV/Ahfk=
Subject key identifier:   6A:5E:01:05:36:C4:64:05:C9:CD:3D:2E:32:66:BF:FF:B2:D6:EC:D5
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       6ED4FD6D60059044B46A4DF2E4A0F32E056F825A
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa
Signing time:             Thu 18 Sep 2025 12:24:01 +0000
ROA not before:           Thu 18 Sep 2025 12:19:01 +0000
ROA not after:            Thu 17 Sep 2026 12:24:01 +0000
asID:                     265158
IP address blocks:        167.249.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d4:fd:6d:60:05:90:44:b4:6a:4d:f2:e4:a0:f3:2e:05:6f:82:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Sep 18 12:19:01 2025 GMT
            Not After : Sep 17 12:24:01 2026 GMT
        Subject: CN=6A5E010536C46405C9CD3D2E3266BFFFB2D6ECD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:34:86:97:0d:a2:48:fc:74:63:eb:65:79:
                    80:71:f7:5c:38:b0:3a:eb:8b:a1:37:d0:8b:79:ce:
                    58:f7:3c:52:24:07:7f:1a:8a:21:5b:41:26:cc:92:
                    cd:57:db:58:ff:c2:82:21:57:43:8f:89:3b:87:a0:
                    56:ba:26:34:d8:87:4d:67:ac:c7:62:85:d2:d8:29:
                    71:8b:a8:8a:61:27:07:b8:4b:60:5c:24:56:b4:a7:
                    6e:b3:4d:ed:f5:d3:d5:9f:af:f9:00:ad:59:e8:5f:
                    e1:0f:92:0c:ee:63:e7:af:66:16:a8:fe:f9:70:8a:
                    43:35:ff:f7:42:c3:da:41:c8:e9:2e:27:f1:ab:11:
                    c4:a9:62:97:8c:e6:4e:f4:4c:d8:08:d8:94:fa:db:
                    3c:eb:f3:f6:3b:26:42:4e:cd:6f:ed:0f:ff:f5:14:
                    19:4f:b8:d9:73:35:ab:7f:88:ca:ee:f3:25:06:9f:
                    43:b1:e9:f4:db:80:c9:fc:e6:7d:5a:1f:d0:89:0e:
                    cc:e6:e5:82:69:f2:dc:5f:09:cd:f4:99:95:58:81:
                    05:28:31:15:57:be:cb:a7:7e:a5:ba:f9:32:eb:5c:
                    e1:23:b2:ee:19:49:66:69:90:a6:69:6a:24:cc:07:
                    c6:3a:a8:7b:5c:65:33:56:ab:23:c6:ef:d3:9d:98:
                    2b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5E:01:05:36:C4:64:05:C9:CD:3D:2E:32:66:BF:FF:B2:D6:EC:D5
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32332d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:99:ee:24:e4:7a:15:00:2d:bc:62:26:78:82:be:36:38:d5:
         60:c0:4f:f7:b5:86:11:b2:e6:5a:d6:b6:68:09:6c:b4:28:9b:
         e6:4d:a8:dc:a8:dd:43:2f:be:9d:e5:44:49:5f:19:3b:c4:8d:
         cb:cd:88:b3:59:cf:10:b0:df:89:79:59:13:d1:da:b1:1b:c6:
         7d:62:3a:72:d7:c0:45:87:5d:bd:2e:24:1c:29:cb:95:2e:be:
         b9:ab:51:69:cc:2d:98:22:c8:22:7e:ef:48:4f:4e:58:11:89:
         40:76:6b:3e:ea:8a:f9:57:56:0d:4a:73:69:71:76:da:f3:b6:
         e9:69:8d:db:c1:ac:88:f2:28:7d:29:bd:10:38:77:87:32:68:
         a9:69:9c:63:71:1b:ca:ae:c0:79:d6:a5:04:8f:6c:94:b1:5c:
         0e:bc:5e:72:c3:34:4f:f3:d7:32:b3:1b:25:a8:b8:ab:87:74:
         09:7c:ff:c9:2f:a9:a0:7e:cb:cb:eb:71:a0:7e:8c:dc:a2:f8:
         64:0a:f8:a2:94:e3:8f:81:c3:08:36:20:7b:8c:67:f2:1a:96:
         ad:d8:ad:43:23:c2:bc:b0:37:0c:0b:e0:fb:1c:2a:81:e5:bc:
         8e:42:7c:67:77:88:c1:41:46:94:c5:31:a7:7c:29:b5:66:a4:
         e9:65:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:21 2025 by rpki-client