Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3136382e3232372e38302e302f32322d3234203d3e203631363938.roa
File:                     3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (raw, json)
Hash identifier:          S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=
Subject key identifier:   D7:E0:7F:75:D2:F7:5E:96:95:D1:7E:74:6C:65:27:DF:EB:FA:90:05
Certificate issuer:       /CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Certificate serial:       415DFBBFEB904DDA7D5AEFEA1C93EA789C7EAE89
Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3136382e3232372e38302e302f32322d3234203d3e203631363938.roa
Signing time:             Tue 19 Aug 2025 18:53:01 +0000
ROA not before:           Tue 19 Aug 2025 18:48:01 +0000
ROA not after:            Tue 18 Aug 2026 18:53:01 +0000
asID:                     61698
IP address blocks:        168.227.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl
                          rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5d:fb:bf:eb:90:4d:da:7d:5a:ef:ea:1c:93:ea:78:9c:7e:ae:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
        Validity
            Not Before: Aug 19 18:48:01 2025 GMT
            Not After : Aug 18 18:53:01 2026 GMT
        Subject: CN=D7E07F75D2F75E9695D17E746C6527DFEBFA9005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:20:9c:93:d9:19:3d:62:dc:ca:b2:8e:39:
                    8b:f6:a3:ec:74:d0:cd:df:c9:bd:ef:70:94:29:05:
                    fe:45:c1:15:b7:32:b0:70:a6:1e:32:b1:11:dc:73:
                    e1:49:ed:1e:a1:f2:62:0c:4f:67:4e:8f:cc:bd:f3:
                    c8:4b:b7:98:6a:e7:88:a1:15:a4:98:c4:d8:bb:84:
                    2d:51:01:bf:cf:d7:98:ac:3a:e8:fb:ba:b4:20:ff:
                    25:72:e0:7a:38:63:9c:ed:f3:2a:6e:76:e0:e9:ea:
                    45:bc:b9:46:c2:72:3d:9c:fb:ac:06:00:b1:36:a6:
                    c3:b5:73:b1:19:5a:c9:0f:27:1f:d4:29:68:47:3f:
                    5f:32:21:72:30:6c:f4:78:46:65:2f:37:9d:42:0d:
                    d0:b3:72:f5:94:df:d3:8a:5f:cf:d7:1a:79:b5:ac:
                    8a:2d:21:ec:92:44:69:9f:92:95:47:7e:c4:a9:82:
                    d7:ce:c5:e6:22:0c:92:26:21:53:62:81:af:a0:c8:
                    65:fa:a9:5a:81:a6:97:69:25:e6:88:19:dd:3a:0a:
                    70:74:c5:5e:87:8e:98:32:de:63:8e:41:df:97:98:
                    80:c4:ce:f3:39:62:91:10:b7:b1:b8:04:9a:51:ac:
                    3a:ae:56:28:da:07:23:18:66:3c:9a:ff:fd:38:f6:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:7F:75:D2:F7:5E:96:95:D1:7E:74:6C:65:27:DF:EB:FA:90:05
            X509v3 Authority Key Identifier:
                keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3136382e3232372e38302e302f32322d3234203d3e203631363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:41:92:4b:08:9e:42:b6:7b:46:b7:9e:b1:5b:1e:83:4b:
         4c:f4:cd:48:1e:c4:b6:16:a3:42:34:94:8d:70:ee:68:a3:2a:
         80:40:1f:09:a2:78:60:d2:24:92:00:89:b8:80:98:5f:63:c6:
         9c:7a:6f:3d:58:9d:09:1d:a8:ff:4b:60:2f:e7:62:14:82:89:
         2a:3f:7a:28:97:84:4d:c1:d8:b0:06:24:ef:56:a5:d5:e9:ed:
         f9:c6:90:95:d4:1b:5f:4f:cf:6d:25:37:14:bb:45:aa:1b:d4:
         82:6e:a9:84:15:2f:a3:ea:20:0a:be:78:9d:7a:13:bf:ae:56:
         fa:7c:5f:93:85:17:24:3b:36:cc:19:b9:4b:3d:1c:fd:79:67:
         86:d6:81:4c:7b:2f:d2:60:80:0f:26:3d:4c:11:fd:b3:97:b2:
         2e:83:1c:d3:29:1f:43:3e:fc:c9:28:27:50:fb:dc:74:e2:1c:
         e5:95:80:66:ec:96:9a:bf:3e:0a:cd:5b:bc:c7:b7:a3:5f:ff:
         b8:90:58:00:6f:14:25:33:62:24:d0:12:9e:df:ce:09:c7:51:
         03:df:57:b4:cd:a8:bd:f7:8a:40:22:bf:c6:db:4f:f9:09:77:
         8c:ba:99:bb:64:3a:3a:ec:6f:1e:93:ad:d1:7b:7b:0a:c3:d8:
         1c:e6:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:34:10 2025 by rpki-client