Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          jTdSGVCHSuxexkkGn9M6Xx04z4qOS9B+lIkce2GuSIY=
Subject key identifier:   87:81:44:B2:6E:81:1E:1F:93:83:4E:37:5D:2C:02:19:FB:B2:17:33
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       22637280FA907FCF7E399D73BC1517C36A5891AB
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
Signing time:             Wed 06 Aug 2025 12:41:27 +0000
ROA not before:           Wed 06 Aug 2025 12:36:27 +0000
ROA not after:            Wed 05 Aug 2026 12:41:27 +0000
asID:                     264891
IP address blocks:        168.227.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 21:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:63:72:80:fa:90:7f:cf:7e:39:9d:73:bc:15:17:c3:6a:58:91:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Aug  6 12:36:27 2025 GMT
            Not After : Aug  5 12:41:27 2026 GMT
        Subject: CN=878144B26E811E1F93834E375D2C0219FBB21733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:c9:ba:d3:0c:3c:e9:e4:24:93:b4:ba:1a:
                    58:12:3c:cd:91:58:6e:0b:a4:0a:7e:a6:e7:87:30:
                    c3:b8:d8:71:c7:58:f8:23:90:0b:82:3e:da:ff:cc:
                    e7:eb:aa:f2:ca:16:7a:26:31:8d:12:d3:3e:ac:91:
                    3d:00:75:fd:f3:cf:9d:0a:a2:7f:06:11:a3:c8:16:
                    5d:89:a3:0b:07:62:33:47:ca:8b:11:74:72:fd:07:
                    0f:d6:aa:ae:39:bb:9b:60:32:8d:96:12:87:fb:7f:
                    92:f1:01:c2:ae:cb:58:30:5f:ad:33:47:54:51:64:
                    59:c5:82:1d:a1:40:20:69:b2:5c:94:62:e0:3d:4e:
                    e8:dd:37:08:6a:a4:15:b5:23:8b:d9:c7:5a:82:f9:
                    d1:b7:b1:8e:4e:80:18:6d:89:42:ba:f8:59:12:77:
                    95:6a:e0:c2:0a:3e:2c:43:51:3f:e3:ad:1e:45:33:
                    13:35:dc:aa:63:16:78:53:ef:9f:04:ef:b8:61:3c:
                    2e:91:7a:86:2c:b2:c2:ca:6a:16:de:66:88:25:26:
                    de:a4:15:2e:d9:12:a3:0e:0c:88:06:c3:7c:d7:b7:
                    bf:9b:99:ff:73:d0:60:69:09:df:35:49:50:53:c0:
                    10:7a:e3:f8:b6:13:95:ab:69:de:cc:d0:0e:56:cc:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:44:B2:6E:81:1E:1F:93:83:4E:37:5D:2C:02:19:FB:B2:17:33
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:f7:d5:39:a3:67:c7:44:bb:88:8c:cc:70:58:ac:61:96:
         71:48:c1:03:e6:f3:5f:06:d1:0c:b0:f3:2e:f0:22:30:e5:1e:
         4e:29:e2:21:38:60:cb:72:b6:d9:93:e8:75:fb:f0:27:95:e5:
         ab:e4:74:ff:3e:52:be:b9:e1:0d:cd:22:79:31:41:61:56:28:
         56:9f:b2:9f:84:1a:37:e1:f3:8e:09:84:1c:44:85:26:39:11:
         69:53:2c:f5:32:cf:95:46:57:be:5c:3f:83:e3:cf:1d:af:e4:
         52:31:43:ef:53:a4:69:0b:3f:7d:2b:c4:a5:d9:f7:8e:fa:3f:
         e6:1f:2b:f4:34:d6:f6:2e:29:73:31:d0:ec:04:88:1f:48:d3:
         e8:44:9f:98:17:db:21:94:de:16:ea:ed:f1:05:48:d5:8d:8b:
         87:22:66:6a:22:df:7d:d2:c5:f9:ca:5d:d7:89:56:7f:73:7b:
         e7:c3:c6:7d:f2:65:fd:d4:bf:fe:36:04:00:13:f0:79:79:16:
         8f:8d:09:44:a8:07:ba:67:cf:15:f8:bd:de:f2:46:30:1f:98:
         9a:24:53:70:3c:f1:ea:77:dd:e1:1b:37:3c:b9:82:b2:7e:ba:
         2e:7f:ef:fe:41:f8:22:9d:c4:61:1b:cc:0e:67:d7:8b:55:ff:
         fa:86:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:53:51 2025 by rpki-client