Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
File:                     3136382e3139352e36342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          OWK1buyCVK8hJ3ViSsc8kUAlHhfTeX+ibRqG5O5hCVs=
Subject key identifier:   99:F1:48:02:64:BD:3A:26:8D:AC:14:01:A7:6D:04:E6:12:86:02:FB
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       4E9E45948A4D62B9EC65714646061850D1300F4E
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:10 +0000
ROA not before:           Sat 02 Aug 2025 12:53:10 +0000
ROA not after:            Sat 01 Aug 2026 12:58:10 +0000
asID:                     28201
IP address blocks:        168.195.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9e:45:94:8a:4d:62:b9:ec:65:71:46:46:06:18:50:d1:30:0f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:10 2025 GMT
            Not After : Aug  1 12:58:10 2026 GMT
        Subject: CN=99F1480264BD3A268DAC1401A76D04E6128602FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:1e:fb:7c:cc:a3:10:0b:ca:f1:cd:6e:dd:
                    1c:30:c8:ba:95:19:d9:bf:df:37:99:d2:21:f4:9f:
                    2b:19:91:8c:02:5f:bc:86:d4:51:ee:55:a7:80:c0:
                    83:1e:60:d6:fc:b8:8e:d6:75:d9:de:4a:ba:23:b7:
                    24:e2:9b:1b:97:7c:f9:98:c3:87:92:e1:26:d6:18:
                    f2:d5:a9:99:59:8c:c3:50:f7:f8:7f:29:b3:68:bd:
                    18:ad:35:24:27:dc:9b:ae:90:b5:a6:3e:76:0e:eb:
                    55:88:88:4d:36:29:f3:3e:17:02:15:fc:cf:ef:cf:
                    6f:82:ee:a9:26:b4:7a:42:49:65:d0:61:bf:bc:e6:
                    90:42:04:c6:74:d4:1f:de:9c:68:65:63:85:0a:38:
                    26:37:5b:0e:be:b8:ba:72:a2:2c:27:6f:fc:85:c6:
                    a9:c5:9f:5c:5e:49:26:3f:9a:ad:06:4a:12:4c:73:
                    53:01:e9:2c:d2:94:bb:37:03:de:e2:c7:42:c7:06:
                    fd:64:e7:f8:e6:a1:18:06:00:2b:f0:3b:b4:f2:3a:
                    f1:46:da:ab:d6:66:2a:3c:dc:46:a4:99:2f:81:bb:
                    13:20:bf:f3:90:4a:93:a3:46:20:a6:27:43:db:07:
                    3e:52:2d:9b:7d:7a:90:65:34:64:54:9a:b3:a1:91:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:48:02:64:BD:3A:26:8D:AC:14:01:A7:6D:04:E6:12:86:02:FB
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:47:d9:67:3f:13:7c:89:1a:5b:31:34:60:e3:43:1a:2c:79:
         0b:96:a2:7c:0e:39:36:be:66:24:1d:71:b3:c7:4c:a0:a1:06:
         9a:fd:9b:69:91:15:49:60:dd:b7:7e:45:5e:e2:5a:d7:5f:17:
         db:d4:ed:ca:a8:13:b3:e7:cd:b3:3e:d4:5b:5f:e7:ab:cf:c8:
         6d:c7:32:63:85:96:87:44:b8:22:a9:9d:74:e7:1e:9d:df:5c:
         da:b1:0e:74:69:d2:af:eb:ef:d0:06:55:92:99:44:9e:9f:95:
         b5:eb:0d:a7:eb:96:7b:3f:a7:ab:68:3f:73:38:ce:90:ba:71:
         09:ca:81:53:b1:f4:bf:a4:a3:83:47:4b:8c:52:de:d8:4a:92:
         80:9d:5b:d7:f3:26:3f:96:e8:87:f8:f7:8e:22:61:e5:4c:27:
         a5:40:1c:ae:e1:d3:33:79:e8:c8:7d:0f:d3:7c:8d:d7:8a:ee:
         ea:7a:70:26:53:97:84:f6:0e:62:9e:b2:23:57:cf:5b:3a:0d:
         b5:0e:5f:d1:56:c0:6f:4c:0c:c9:ba:b2:88:70:e6:9c:c2:14:
         d7:0a:29:50:1e:27:d1:8f:25:ea:67:ac:8f:d6:11:68:5d:0e:
         72:f5:67:fa:1f:a1:f8:6c:36:65:58:3e:f6:68:d2:29:24:2c:
         ec:fb:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:59:30 2025 by rpki-client