Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136342e302f32322d3234203d3e20323731333233.roa
File:                     3136342e3136332e3136342e302f32322d3234203d3e20323731333233.roa (raw, json)
Hash identifier:          5DBvIadnXxW1rxq7g838/f2At6GZyj/zTnKLPSFQHmE=
Subject key identifier:   BC:33:FE:D0:92:28:36:73:72:09:1B:2C:90:71:34:36:6E:92:75:EF
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       5240066BCDD73157BA5F2D49C928077D39014CB4
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136342e302f32322d3234203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:00:45 +0000
ROA not before:           Sat 09 Aug 2025 12:55:45 +0000
ROA not after:            Sat 08 Aug 2026 13:00:45 +0000
asID:                     271323
IP address blocks:        164.163.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:40:06:6b:cd:d7:31:57:ba:5f:2d:49:c9:28:07:7d:39:01:4c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 12:55:45 2025 GMT
            Not After : Aug  8 13:00:45 2026 GMT
        Subject: CN=BC33FED09228367372091B2C907134366E9275EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:54:ee:0c:bb:79:b2:eb:32:3b:be:72:1a:
                    ef:c6:c9:1f:22:ea:5d:2e:a9:f0:55:de:1d:77:0d:
                    31:30:10:e5:be:88:2d:af:ca:fd:43:2d:ff:3f:b3:
                    ef:f7:b0:48:91:61:db:a4:c9:1e:db:b6:f8:fe:e7:
                    73:f9:77:c9:71:96:3d:30:1d:68:1e:db:f7:86:82:
                    21:c7:f1:bd:7a:37:98:2a:4f:35:fc:ad:25:77:a9:
                    51:3e:78:38:e0:64:ed:a5:88:c7:10:3f:f9:7f:14:
                    53:cc:63:fc:97:32:7b:5f:08:a1:a7:29:a4:ec:ea:
                    51:d2:d3:2b:0e:54:43:4c:60:dc:c0:9d:77:e9:ad:
                    94:44:80:8d:a5:a9:27:a3:a5:4f:6d:84:5a:97:cf:
                    52:71:2d:9b:38:08:67:41:55:21:40:05:f7:40:e6:
                    85:ff:62:8d:f6:0b:72:5a:2c:9a:50:10:68:6e:a3:
                    af:a2:0e:46:78:b3:4c:a5:3f:04:a4:42:66:dc:40:
                    3b:93:46:16:80:4c:a7:e4:3d:d0:a1:ad:88:a0:97:
                    74:53:d6:95:3d:f8:00:df:fa:70:10:af:43:2d:32:
                    b1:aa:90:46:f3:91:ea:6f:eb:21:07:46:7a:f6:af:
                    00:d7:09:23:7e:56:64:b4:9b:73:ce:10:ff:fa:c9:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:FE:D0:92:28:36:73:72:09:1B:2C:90:71:34:36:6E:92:75:EF
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136342e302f32322d3234203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:06:d8:a4:d8:80:25:6e:72:b9:f3:92:24:8a:3f:b5:46:
         23:be:07:3a:a5:b0:65:96:96:d9:2c:61:b3:f0:c6:db:a3:5e:
         34:c3:ec:6c:53:aa:a6:0c:ce:84:e6:ae:32:4c:94:86:fb:e9:
         43:d6:35:a5:60:00:75:31:66:fd:59:53:59:48:33:9e:be:7e:
         0a:96:ea:40:d6:a9:96:e7:d7:fb:04:81:cc:9b:45:bc:37:eb:
         ad:8b:6c:3a:3b:92:b3:30:13:fc:07:28:64:c3:0d:e3:8b:59:
         42:97:ec:97:98:27:ff:4a:e0:4e:39:0a:fa:ea:58:65:9d:bf:
         23:8a:c3:34:3a:8a:4b:9c:44:03:29:d1:fd:3e:92:2c:2e:94:
         bf:32:f8:51:bf:fe:bb:fe:d3:6d:51:26:a0:7b:e8:f7:47:e0:
         6e:1c:d8:55:7f:45:b8:85:ef:34:4c:d4:85:b5:ff:c6:57:5e:
         2f:72:5a:28:11:29:c6:6c:65:05:e3:9e:c8:fa:d8:14:5c:04:
         30:8d:e0:00:46:6d:9e:a8:d8:f8:ed:ca:cf:a2:7e:b0:28:6b:
         14:e2:20:66:f7:cb:4e:7e:cd:3c:ca:37:fa:fe:b0:56:bb:75:
         60:6b:bf:b1:ac:8c:05:69:55:f7:15:fc:da:db:d2:53:5f:52:
         b9:2f:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:35 2025 by rpki-client