Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3234203d3e20323633343231.roa
File:                     3136382e3132312e3135362e302f32322d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          OVFtoEQZ10WQA1+C78fzIEIrybflJJalvuMtg2wuevc=
Subject key identifier:   A2:B6:3A:51:9F:1C:B1:34:DC:C2:53:12:C1:A0:C3:32:A2:E4:A3:42
Certificate issuer:       /CN=6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9
Certificate serial:       708958FE615DC01F83EDB2F1645E8B6FE91B5C97
Authority key identifier: 6C:DA:1E:DF:DE:47:10:5B:DF:F6:61:EE:6D:2E:89:A6:1B:39:1E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3234203d3e20323633343231.roa
Signing time:             Fri 17 Oct 2025 14:33:40 +0000
ROA not before:           Fri 17 Oct 2025 14:28:40 +0000
ROA not after:            Fri 16 Oct 2026 14:33:40 +0000
asID:                     263421
IP address blocks:        168.121.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:89:58:fe:61:5d:c0:1f:83:ed:b2:f1:64:5e:8b:6f:e9:1b:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9
        Validity
            Not Before: Oct 17 14:28:40 2025 GMT
            Not After : Oct 16 14:33:40 2026 GMT
        Subject: CN=A2B63A519F1CB134DCC25312C1A0C332A2E4A342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:5a:83:3d:23:c7:dc:2c:e0:da:84:38:25:
                    c4:e9:28:87:b8:0b:7c:c5:01:44:7e:38:01:04:51:
                    1a:a0:a1:21:ec:40:54:70:4c:79:08:68:a5:2a:96:
                    f0:08:ea:8f:4d:77:e3:ff:c9:e3:d5:e2:8d:6f:c5:
                    19:5d:c8:43:f8:d6:8a:4b:c0:64:72:ee:3a:69:5b:
                    5b:5f:dd:87:c8:85:c5:26:00:40:1a:5b:d0:9d:84:
                    12:ec:c8:21:d7:ae:47:bd:01:82:da:7a:3a:d8:38:
                    fa:bd:3b:e0:ac:bc:97:8c:a7:b8:ba:15:ee:57:f0:
                    8c:24:d9:4c:8f:81:af:ea:c5:2c:37:f3:48:46:31:
                    71:16:01:26:79:36:5a:14:5d:07:ba:f1:01:9b:dc:
                    89:9d:fd:86:cf:e1:15:82:c4:68:bd:a9:be:02:a9:
                    0f:ec:d7:9a:e4:ac:af:26:94:11:4e:49:61:45:69:
                    19:0e:76:c5:cd:d3:a9:83:b1:38:dc:ef:d6:ab:c4:
                    31:ee:0c:9a:8a:e2:3b:14:96:e3:b0:2d:14:4d:97:
                    89:f3:25:d4:9a:80:b6:c4:84:d2:19:86:39:e8:7e:
                    cc:08:f1:a9:d6:44:9b:b1:ad:6f:94:f8:50:03:a2:
                    23:1c:cd:a7:01:f0:3d:80:42:2f:f8:12:5a:e6:e1:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B6:3A:51:9F:1C:B1:34:DC:C2:53:12:C1:A0:C3:32:A2:E4:A3:42
            X509v3 Authority Key Identifier:
                keyid:6C:DA:1E:DF:DE:47:10:5B:DF:F6:61:EE:6D:2E:89:A6:1B:39:1E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32322d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:1b:6d:c3:a6:2f:76:1a:aa:02:8b:8b:bf:f0:8d:78:89:
         f5:b2:19:d7:38:9e:0d:3b:43:db:8e:c3:64:08:42:88:07:46:
         3b:3e:c0:74:62:7d:a8:6a:53:c2:e0:ff:57:62:49:98:3d:67:
         e7:95:b6:93:eb:e9:e8:54:30:42:c1:ad:80:86:75:41:dd:a8:
         ac:8f:11:7a:52:49:45:f2:e0:b5:52:87:b6:03:55:3b:b3:f4:
         4e:fd:73:aa:31:8f:10:de:46:74:ce:88:95:94:21:74:ce:51:
         65:ba:e9:a6:4f:21:b1:78:39:f1:83:f5:3f:6c:8d:29:92:ec:
         e6:f2:b0:6a:05:f0:74:86:c9:fe:7f:c0:3c:bc:58:b7:83:0c:
         33:2b:b2:d7:43:d0:e8:6e:3b:2f:4c:cf:eb:78:7e:cc:5a:92:
         51:eb:1b:5b:56:1a:b6:c0:f9:f9:b2:98:04:a4:19:db:7d:6d:
         7c:9c:e3:9f:ba:fd:63:e0:3c:de:db:71:55:43:f5:3f:ae:e3:
         6e:11:ad:f0:ec:2b:41:e5:d0:01:a8:f9:b5:1a:04:6e:d6:ce:
         25:15:c0:68:ec:3e:92:25:1f:96:47:c1:7b:ab:40:99:bf:82:
         74:5c:45:7e:c4:f0:7c:f7:fa:a1:28:ba:ad:00:ee:f2:92:12:
         45:ec:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:42 2025 by rpki-client