Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa
File:                     3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          O6QiY+i7+vHzk8Eb3hPlT1fCPzDFAkjx3poajvR0FVU=
Subject key identifier:   3A:5C:E9:E3:5C:BF:FD:6B:96:98:0A:43:AF:48:04:A5:0C:E9:8D:72
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       026576E6EE907C743EEB54AABA1E429E69752CB1
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa
Signing time:             Tue 12 Aug 2025 12:40:17 +0000
ROA not before:           Tue 12 Aug 2025 12:35:17 +0000
ROA not after:            Tue 11 Aug 2026 12:40:17 +0000
asID:                     262952
IP address blocks:        201.148.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:65:76:e6:ee:90:7c:74:3e:eb:54:aa:ba:1e:42:9e:69:75:2c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Aug 12 12:35:17 2025 GMT
            Not After : Aug 11 12:40:17 2026 GMT
        Subject: CN=3A5CE9E35CBFFD6B96980A43AF4804A50CE98D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:ff:ea:13:19:54:a7:c7:9e:bf:89:34:b5:
                    f5:a0:fc:c5:5d:d2:4d:40:53:e8:28:e8:0e:eb:74:
                    47:2a:56:e4:5d:9d:10:97:08:d3:3d:cc:21:a1:0e:
                    92:e9:e5:21:a7:a3:c2:7c:3a:41:1b:a3:02:cc:8e:
                    fa:9e:b2:93:24:fc:1f:94:c2:1b:26:ec:95:37:84:
                    f6:15:26:51:26:0e:e3:04:61:a4:34:2f:92:f4:88:
                    1d:08:b6:37:45:4c:54:85:cd:cb:75:c6:c6:9e:67:
                    32:1e:0d:50:0c:a8:1d:bf:9b:7c:56:b4:3d:ea:44:
                    ac:66:43:41:cf:b9:cd:53:6b:8e:19:01:18:72:7e:
                    b4:a3:e1:42:d9:83:c4:fc:ba:71:90:1c:d4:4f:c2:
                    f6:16:cb:cf:84:9b:1f:41:40:74:12:b2:91:67:f0:
                    99:bc:f8:00:b6:13:21:5a:ad:9e:b2:41:12:c6:34:
                    46:58:c1:2b:a7:4c:83:d6:12:79:a5:75:55:51:5b:
                    1a:47:69:0e:b8:80:3c:d7:ff:f9:5c:b7:b7:d9:62:
                    d6:90:5e:92:38:e7:d0:dd:2d:e3:62:72:ee:ef:84:
                    3d:35:5d:7a:15:eb:45:cc:5a:fa:50:15:20:70:0b:
                    b7:15:d1:b1:0d:32:46:9f:ac:83:fd:87:0c:00:2c:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:E9:E3:5C:BF:FD:6B:96:98:0A:43:AF:48:04:A5:0C:E9:8D:72
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:56:78:ba:66:d7:8f:bf:19:73:88:b6:de:e0:48:94:c7:6d:
         31:59:3e:e2:6f:c3:20:e0:c1:ef:8d:bb:68:8e:3a:22:f1:e4:
         a6:e1:7a:33:29:3f:8e:a2:e5:ae:09:c5:68:cd:34:e0:81:1f:
         6a:c9:17:0d:16:6a:0a:c8:ee:45:6c:6e:1d:cd:37:a8:b8:06:
         fe:d4:82:57:b4:60:f5:9c:b6:6c:1c:cc:11:a1:ee:91:0e:2f:
         05:71:18:a3:c1:8e:bb:3a:38:fa:db:a4:dc:49:a4:ae:cb:92:
         6f:c0:f8:eb:a1:8c:60:fd:c9:77:23:cd:88:62:84:97:3f:4b:
         37:ec:fb:bd:63:b6:74:3e:36:b5:f9:2e:b6:1b:94:92:f9:01:
         25:2d:91:90:3f:e7:ac:2b:b6:0a:fc:35:c7:dd:4d:ab:61:b9:
         e1:a5:d0:b4:40:30:f4:a9:cf:e9:92:7e:40:78:55:6a:57:a2:
         23:78:5c:2e:54:ec:57:7d:1a:58:a9:c4:fd:ce:01:83:0a:79:
         a1:03:99:f4:15:72:07:04:4b:28:48:9a:70:bb:0b:88:ce:de:
         9f:2c:d5:bd:dd:1b:a2:36:13:c4:20:1d:19:31:20:26:21:33:
         c8:8b:ff:05:a2:98:a9:6a:9e:52:0b:df:ee:d6:61:3b:65:a1:
         69:90:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:43 2025 by rpki-client