Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/3136342e3136332e3130332e302f32342d3234203d3e20323635393939.roa
File:                     3136342e3136332e3130332e302f32342d3234203d3e20323635393939.roa (raw, json)
Hash identifier:          c35msJ1hsUEIEbfw6bZMpHR88yDk9mxbHwbqSz0c408=
Subject key identifier:   32:8A:0D:41:23:98:2F:85:07:7A:1D:DE:11:55:2B:2D:4A:9E:AD:AE
Certificate issuer:       /CN=BC6C90EBDF84BDF1B922734D538A7EB0E413413E
Certificate serial:       41AC57509D1FD3737397B5C30A6E76E833539C91
Authority key identifier: BC:6C:90:EB:DF:84:BD:F1:B9:22:73:4D:53:8A:7E:B0:E4:13:41:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6C90EBDF84BDF1B922734D538A7EB0E413413E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/3136342e3136332e3130332e302f32342d3234203d3e20323635393939.roa
Signing time:             Fri 08 Aug 2025 11:32:47 +0000
ROA not before:           Fri 08 Aug 2025 11:27:47 +0000
ROA not after:            Fri 07 Aug 2026 11:32:47 +0000
asID:                     265999
IP address blocks:        164.163.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/BC6C90EBDF84BDF1B922734D538A7EB0E413413E.crl
                          rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/BC6C90EBDF84BDF1B922734D538A7EB0E413413E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6C90EBDF84BDF1B922734D538A7EB0E413413E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ac:57:50:9d:1f:d3:73:73:97:b5:c3:0a:6e:76:e8:33:53:9c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6C90EBDF84BDF1B922734D538A7EB0E413413E
        Validity
            Not Before: Aug  8 11:27:47 2025 GMT
            Not After : Aug  7 11:32:47 2026 GMT
        Subject: CN=328A0D4123982F85077A1DDE11552B2D4A9EADAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:1a:d2:c8:2f:0d:99:eb:8c:c3:73:46:e6:
                    29:d7:45:11:ef:85:5a:72:26:0e:c2:4d:bf:be:4c:
                    a2:a5:1b:c7:8f:9e:59:78:39:e4:34:fe:7f:de:4d:
                    9d:41:09:29:5a:ea:4a:b1:c9:69:0f:5d:bf:cf:fa:
                    94:db:e0:29:e8:c3:fe:34:d6:c1:1c:e0:80:d2:fa:
                    8a:f4:fe:ca:73:44:0b:f0:c2:38:90:fd:a0:3d:85:
                    ef:9e:dc:b4:bc:12:3a:4e:b8:65:bd:ef:05:02:e6:
                    74:87:9d:b4:81:91:dd:54:0d:dc:f8:1e:ff:e7:5d:
                    2d:8e:c4:c7:fe:28:a5:a0:da:18:26:94:d8:9c:c2:
                    21:5f:7a:63:f2:2d:bb:43:11:00:ff:2a:78:34:38:
                    4e:60:a2:68:51:e5:01:b3:83:41:87:55:5c:5a:ba:
                    43:bd:29:36:9f:57:56:82:be:0e:6c:80:46:11:f1:
                    08:1a:fb:d7:dd:e8:e8:cf:da:9a:8b:ba:3c:7b:64:
                    01:3b:3a:0f:b8:da:df:84:08:30:32:4e:1b:8c:1e:
                    4f:9f:ea:34:0c:e6:f8:57:ee:23:f6:e5:cb:0e:b6:
                    f1:ba:fb:8b:87:13:4c:8f:8d:63:e8:61:3a:b7:b7:
                    ad:78:8a:bf:d0:18:e9:65:f1:f5:7b:5b:a4:e2:e9:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8A:0D:41:23:98:2F:85:07:7A:1D:DE:11:55:2B:2D:4A:9E:AD:AE
            X509v3 Authority Key Identifier:
                keyid:BC:6C:90:EB:DF:84:BD:F1:B9:22:73:4D:53:8A:7E:B0:E4:13:41:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/BC6C90EBDF84BDF1B922734D538A7EB0E413413E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6C90EBDF84BDF1B922734D538A7EB0E413413E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGi9xdqMEmEHV8cQZTgENEGxzbWUuVDsPTaxweoJavS5/0/3136342e3136332e3130332e302f32342d3234203d3e20323635393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:8b:7a:7a:e9:a5:28:36:ff:26:df:da:8b:fe:86:1b:77:
         ec:25:61:77:93:0b:64:ba:2f:46:80:5b:9e:a4:16:22:f6:0e:
         19:d5:a2:0c:3c:1a:3d:5a:31:a2:3d:9a:0a:d7:72:9d:4b:d2:
         31:c1:1a:3e:af:bc:94:d0:e7:d8:b2:a7:0b:c2:11:1b:f2:a2:
         74:e9:69:25:69:09:1d:be:be:4f:b0:f2:15:af:c3:e8:e6:b0:
         e7:39:35:ed:8f:ae:0c:b5:4d:48:2c:5c:c3:03:a5:97:d4:ec:
         87:35:a7:4b:64:54:15:17:8e:20:c0:08:63:38:9d:81:10:42:
         5a:a6:39:92:e8:37:05:aa:af:24:90:54:39:48:55:df:a6:02:
         e3:47:69:e0:fc:2a:b3:e4:75:27:05:4c:22:f0:54:63:84:66:
         60:69:2b:37:91:c0:1a:d0:fc:6a:1b:9d:76:1b:67:4f:10:1d:
         74:3a:0f:22:00:e0:7f:9a:80:e4:02:b1:0a:c4:10:3c:b8:ca:
         5a:15:4c:79:81:82:80:ea:49:9c:51:1f:e3:88:ce:15:21:90:
         fd:11:e7:e7:af:f8:16:23:09:8e:a0:27:83:29:65:54:ba:60:
         66:41:e7:fc:bc:8d:34:3a:d8:3c:96:55:aa:86:1a:7b:0a:97:
         fd:4e:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:48 2025 by rpki-client