Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3136382e3139372e33322e302f32322d3232203d3e203532353939.roa
File:                     3136382e3139372e33322e302f32322d3232203d3e203532353939.roa (raw, json)
Hash identifier:          2JrdTfEDSko49hIsFEbvFxlUdhkOslULtg7BP0eKIiU=
Subject key identifier:   43:48:00:70:62:A0:F6:EF:2F:B8:CD:55:B2:DB:89:07:BC:AB:C1:67
Certificate issuer:       /CN=6D102169D5ABEC492A8941C49951FD8013B1EBED
Certificate serial:       5955255780F917BD7FBAE459BF8226E4F27AA9F8
Authority key identifier: 6D:10:21:69:D5:AB:EC:49:2A:89:41:C4:99:51:FD:80:13:B1:EB:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D102169D5ABEC492A8941C49951FD8013B1EBED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3136382e3139372e33322e302f32322d3232203d3e203532353939.roa
Signing time:             Fri 10 Oct 2025 21:37:02 +0000
ROA not before:           Fri 10 Oct 2025 21:32:02 +0000
ROA not after:            Fri 09 Oct 2026 21:37:02 +0000
asID:                     52599
IP address blocks:        168.197.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/6D102169D5ABEC492A8941C49951FD8013B1EBED.crl
                          rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/6D102169D5ABEC492A8941C49951FD8013B1EBED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D102169D5ABEC492A8941C49951FD8013B1EBED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:25:57:80:f9:17:bd:7f:ba:e4:59:bf:82:26:e4:f2:7a:a9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D102169D5ABEC492A8941C49951FD8013B1EBED
        Validity
            Not Before: Oct 10 21:32:02 2025 GMT
            Not After : Oct  9 21:37:02 2026 GMT
        Subject: CN=4348007062A0F6EF2FB8CD55B2DB8907BCABC167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:a2:f9:6a:bd:ed:e6:55:c9:33:55:25:2f:
                    7e:92:15:2e:7d:65:60:46:3b:67:bd:87:85:27:58:
                    7b:7c:be:81:aa:df:c6:97:99:74:a6:b6:10:cf:85:
                    bc:9d:70:c4:a4:e9:3a:94:d8:6e:b1:2f:93:36:0f:
                    3f:8f:e4:54:8a:54:9c:b6:ef:d6:c3:41:92:fb:f0:
                    20:0d:7d:f8:8f:d4:29:88:c6:c8:69:27:6d:05:b0:
                    df:3d:8c:56:30:1e:3c:cf:54:80:00:38:a4:23:1e:
                    82:db:f1:25:86:d9:80:f6:22:6a:e0:c1:83:c4:7c:
                    da:52:a2:b4:a3:d5:61:d6:0f:a2:89:67:73:a5:c9:
                    4a:e3:a5:2c:4a:d5:f9:f1:42:da:b2:f4:31:4d:3d:
                    57:de:cc:37:01:89:bc:59:ba:f6:d1:bf:a4:1a:43:
                    65:ad:38:2a:7f:2a:b6:89:2f:c7:42:2b:af:2c:82:
                    74:82:95:65:bb:67:a5:9f:e6:b7:a8:7a:57:09:58:
                    73:be:be:5c:71:17:45:26:b8:c7:c1:21:f3:8d:37:
                    40:9d:09:89:2f:8a:39:e4:da:4a:73:df:89:1f:f2:
                    04:1a:d3:6d:75:23:49:6c:bc:fc:49:88:87:f4:94:
                    58:cf:a6:b9:28:19:70:3c:0d:5f:f7:06:bf:d3:3b:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:48:00:70:62:A0:F6:EF:2F:B8:CD:55:B2:DB:89:07:BC:AB:C1:67
            X509v3 Authority Key Identifier:
                keyid:6D:10:21:69:D5:AB:EC:49:2A:89:41:C4:99:51:FD:80:13:B1:EB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/6D102169D5ABEC492A8941C49951FD8013B1EBED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D102169D5ABEC492A8941C49951FD8013B1EBED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3136382e3139372e33322e302f32322d3232203d3e203532353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:80:e0:e9:36:af:1f:f1:f9:f8:11:af:17:64:2c:d6:c6:
         34:ae:d9:e1:2a:6e:b4:f8:c3:21:87:c6:28:32:77:10:d8:54:
         08:3e:68:d7:3c:86:d9:a7:19:13:b1:d7:d6:68:79:26:3a:1b:
         b8:d7:8d:85:e8:02:df:49:cd:aa:d4:66:c2:a4:ca:70:00:3a:
         c5:a1:b0:91:9a:f0:ea:e8:01:92:af:c5:60:10:d0:20:11:12:
         3c:0f:4e:53:1a:e1:31:6b:95:76:bc:be:54:6d:b2:bf:91:1e:
         de:bf:d8:ea:f3:8f:65:9c:80:93:b2:b9:50:9b:75:a8:aa:e7:
         91:81:1e:d2:f3:27:24:21:91:2d:4b:75:dd:c2:4b:de:38:8e:
         bd:92:d2:a2:90:16:4c:b8:16:51:e1:0b:0c:ea:56:d3:3d:ff:
         0c:98:44:a9:f0:e8:99:a9:1b:84:b9:11:55:20:3e:ef:fe:52:
         40:54:97:99:41:85:c6:53:4f:a7:18:9d:30:74:f6:25:fc:c2:
         b2:02:f9:f4:e5:f2:9a:9f:8e:ed:54:de:7a:1d:19:61:c6:33:
         87:13:84:91:e7:c8:c8:95:6c:cc:cf:08:1c:93:a2:9e:fd:a6:
         57:1e:1a:d0:a8:45:4c:ea:02:0c:60:b7:58:91:49:dc:a0:08:
         d3:19:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:09 2025 by rpki-client