Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135342e302f32332d3233203d3e20323635343631.roa
File:                     3136382e3139362e3135342e302f32332d3233203d3e20323635343631.roa (raw, json)
Hash identifier:          7t5WCqa0Kf8lj3p3b6b4lWEkTR0A1OMl9B6M6EEZBGY=
Subject key identifier:   E4:35:A9:CB:DA:10:C2:CE:90:AC:32:FB:4F:CD:DC:32:B0:97:3C:42
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       43B24D3A25C4491FF0FFA0B45A127931442E73FA
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135342e302f32332d3233203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:24 +0000
ROA not before:           Fri 12 Sep 2025 15:31:24 +0000
ROA not after:            Fri 11 Sep 2026 15:36:24 +0000
asID:                     265461
IP address blocks:        168.196.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b2:4d:3a:25:c4:49:1f:f0:ff:a0:b4:5a:12:79:31:44:2e:73:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:24 2025 GMT
            Not After : Sep 11 15:36:24 2026 GMT
        Subject: CN=E435A9CBDA10C2CE90AC32FB4FCDDC32B0973C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:23:3f:2d:51:ff:ef:4f:15:f5:91:22:29:
                    c8:a7:74:f7:b0:45:a9:7a:ac:de:12:ba:5e:b5:e5:
                    1e:d8:49:4f:56:bd:e2:fd:d5:f6:af:9b:a6:8c:18:
                    2e:f5:2b:48:b7:e8:15:07:7e:3d:ba:45:e8:66:55:
                    e6:5a:b6:d0:bd:e5:ff:bb:27:57:db:6c:7b:7b:7b:
                    f2:e0:40:35:d8:e0:3c:86:d5:69:f0:b5:31:c0:95:
                    04:49:93:85:5a:9f:70:29:85:c0:b9:58:51:51:38:
                    5d:9a:1c:eb:b8:04:ab:46:1d:9d:27:bf:da:03:56:
                    1f:99:a0:29:ad:bd:1d:85:3a:fb:8d:e2:e3:aa:fb:
                    59:a7:56:bf:ca:bf:eb:32:d3:85:28:06:c3:44:ba:
                    69:d6:e7:d1:99:91:18:f4:a0:98:b2:9a:95:7f:6a:
                    4c:96:17:c4:a5:e2:6b:4f:43:26:7c:e8:24:66:1d:
                    84:d9:0d:7e:eb:a5:be:f3:81:d4:dc:d0:84:f8:e1:
                    64:ee:79:ca:8b:57:ca:cd:66:55:3d:8e:2f:ce:dd:
                    53:9e:c3:2d:24:ef:fb:59:82:4e:f5:e5:22:b3:6c:
                    a6:58:a0:aa:74:b0:49:8b:3d:5c:22:94:f1:d8:87:
                    1d:f3:ea:2e:28:45:d1:23:33:1e:01:5a:b6:c1:60:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:35:A9:CB:DA:10:C2:CE:90:AC:32:FB:4F:CD:DC:32:B0:97:3C:42
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135342e302f32332d3233203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:73:1e:01:c2:55:09:f7:c8:98:d4:c3:66:a4:d0:d2:a4:87:
         7b:82:01:ac:05:fd:48:8b:84:59:2c:7f:00:d1:2a:6c:e6:0f:
         98:fb:6b:f4:3f:47:d5:d0:dd:ec:63:b5:2f:3c:a0:89:0f:2f:
         27:d7:f0:0a:e7:74:01:1e:05:e9:f0:91:e3:54:d2:1a:7d:7f:
         89:03:3c:b1:3c:ef:af:10:ba:cd:e9:90:1c:a0:68:b3:16:38:
         9d:04:27:6a:3e:e1:14:a0:66:47:50:fb:d3:b5:ac:04:ba:43:
         c7:ef:80:57:31:b3:db:89:b8:cd:c1:0b:f7:e7:ab:27:b8:10:
         78:f0:b1:79:5a:e0:5b:b7:fa:86:40:63:6e:20:7d:39:65:1a:
         3c:eb:0c:12:d5:a4:99:41:30:5f:08:39:91:f5:63:f7:0e:6b:
         d2:d8:0e:8d:89:16:70:b2:4c:9b:cc:81:23:63:50:94:0c:19:
         99:03:1f:00:bf:9e:56:98:08:13:21:40:92:52:46:06:56:64:
         3f:82:bf:a0:4d:a7:d0:f1:f0:44:d9:99:3f:61:93:9b:40:3a:
         3b:b6:7b:e5:fc:8e:3e:bf:8a:2c:f5:05:3d:9c:47:b6:3a:6b:
         ac:d5:c1:a2:42:80:24:f8:66:4d:3b:27:20:85:ac:fd:c0:48:
         a7:a7:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:17:19 2025 by rpki-client