Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
File:                     3136382e3132312e36342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          FAnpJoJ0mMRCXXQRw9drT4aDC9XkLsb1wHTjVUcLbuI=
Subject key identifier:   79:72:90:CC:E7:81:C7:75:DE:20:DE:0A:79:7A:5B:42:A8:C6:91:15
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       4B6AC243CF59F113BFF3DBADF695175E5A63D65C
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        168.121.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:c2:43:cf:59:f1:13:bf:f3:db:ad:f6:95:17:5e:5a:63:d6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=797290CCE781C775DE20DE0A797A5B42A8C69115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:10:28:9f:d0:16:e5:95:b1:d6:11:b7:34:
                    13:f4:16:1d:91:09:dd:91:1a:f4:4d:82:c4:0b:1c:
                    4c:1a:84:5b:3c:48:3e:98:d2:a8:5c:f2:fb:65:b2:
                    a6:cf:e6:25:f2:8f:b9:19:39:2d:4d:61:ed:4c:ee:
                    93:99:9f:0f:9c:72:46:48:85:e9:43:b5:c1:de:2c:
                    a2:a7:99:e5:0c:a4:b9:11:49:56:1e:14:14:8f:ac:
                    cf:3e:9f:38:ba:a9:ad:3a:f9:fb:74:31:98:19:0a:
                    29:2c:a5:7b:61:ca:3a:82:f4:19:a9:e9:31:31:84:
                    c8:48:64:3d:2d:ad:d5:f5:9c:6c:8e:3d:9e:07:c9:
                    12:8d:4a:4d:2c:cd:7e:7d:e2:be:dc:5f:23:71:71:
                    5e:1f:52:d7:3f:0a:8e:12:43:1b:13:47:87:69:b1:
                    78:22:e6:62:bf:6e:21:de:3f:3a:d6:7d:02:3c:9f:
                    c6:0b:b8:52:03:80:9b:6f:80:4d:73:b8:80:48:73:
                    3c:50:83:4a:36:6e:8b:aa:01:5d:19:ad:a1:44:f7:
                    23:9b:37:f9:1e:8c:ac:22:4c:96:6b:5c:23:7a:2a:
                    3d:03:16:53:60:c4:7f:d3:56:2b:ed:73:cf:e7:fe:
                    07:e6:fa:5f:cc:85:6a:cf:ac:7c:bb:2b:c8:5c:ca:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:90:CC:E7:81:C7:75:DE:20:DE:0A:79:7A:5B:42:A8:C6:91:15
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:5b:05:40:e3:b2:80:c7:a8:2c:b8:f6:9a:37:66:01:5d:
         59:af:b5:c6:4e:ae:77:7a:11:5c:78:b8:a9:c9:ab:bb:3b:fe:
         0c:c2:c9:be:79:40:0c:74:c1:98:0b:cb:2d:9d:95:1f:73:3d:
         47:e5:2d:fe:9c:6b:fb:4c:04:e1:bd:82:bd:51:a5:0a:77:53:
         37:46:2a:1e:5c:a6:70:b5:4a:97:45:d8:c7:68:81:d3:ea:4a:
         f8:c7:16:81:8f:27:95:d6:2f:b8:04:85:13:6b:0e:09:22:82:
         b5:de:7c:7f:7b:c8:52:98:c5:e9:3e:57:a1:8b:9a:ea:89:b6:
         70:d0:29:32:16:fa:1a:22:81:0a:1a:ba:d7:99:c8:6c:b6:1a:
         69:a5:e5:6e:a1:02:29:93:5e:b5:0a:71:3b:b9:24:ca:8f:bf:
         da:15:90:76:97:7b:22:68:1e:fa:2e:18:e7:0b:96:30:53:be:
         d1:2e:11:12:9e:95:8b:dd:c3:19:e7:af:57:e5:7c:e1:8a:53:
         77:cf:75:5e:e1:3f:30:30:da:0f:cb:b7:ac:cc:fb:cd:4f:db:
         2f:5d:69:c3:64:2c:f0:7f:38:13:ca:9e:1f:45:fd:34:2b:55:
         5f:f8:b7:0e:18:4f:22:e4:a0:e2:02:69:d7:e9:ef:cb:c9:f8:
         75:f2:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:44 2025 by rpki-client