Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa
File:                     3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa (raw, json)
Hash identifier:          FUoq2n/mBev4phyoIe2pgeCqfx+E9t5sUt36pm+DabY=
Subject key identifier:   3F:FD:DE:AC:D3:13:89:30:A0:AF:6D:13:95:DE:5B:63:78:01:08:0A
Certificate issuer:       /CN=0999EEBD16ACF640EA6ECD54D32D89799668A6E2
Certificate serial:       6A2E35D9257E311DC2F94D5F58D14D1BEE79CFE8
Authority key identifier: 09:99:EE:BD:16:AC:F6:40:EA:6E:CD:54:D3:2D:89:79:96:68:A6:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa
Signing time:             Mon 29 Sep 2025 12:55:19 +0000
ROA not before:           Mon 29 Sep 2025 12:50:19 +0000
ROA not after:            Mon 28 Sep 2026 12:55:19 +0000
asID:                     270980
IP address blocks:        168.196.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2e:35:d9:25:7e:31:1d:c2:f9:4d:5f:58:d1:4d:1b:ee:79:cf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0999EEBD16ACF640EA6ECD54D32D89799668A6E2
        Validity
            Not Before: Sep 29 12:50:19 2025 GMT
            Not After : Sep 28 12:55:19 2026 GMT
        Subject: CN=3FFDDEACD3138930A0AF6D1395DE5B637801080A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:34:43:13:b0:33:61:f5:e6:9e:3e:a4:04:
                    09:c2:46:8a:ec:e8:a6:ef:71:f1:32:9a:4f:f6:3b:
                    48:98:36:62:ef:e8:79:1d:25:04:e7:dc:77:9f:70:
                    87:55:7b:84:0c:4f:7c:b3:e9:0a:14:5a:09:bc:f9:
                    ca:2e:94:2f:01:89:07:24:45:4a:07:17:4c:dc:89:
                    43:01:4a:83:fa:53:6e:d0:b8:53:60:a1:65:b6:7b:
                    9d:7d:51:1c:0b:d5:a0:4e:94:84:e1:e5:a5:93:53:
                    4b:76:79:7a:a0:18:d9:8d:ce:f7:20:00:2a:f1:b4:
                    b0:aa:19:41:6b:eb:32:98:20:59:b4:6a:4a:08:a5:
                    55:d5:0d:e2:bf:71:f2:42:52:fa:35:f0:3d:a6:e7:
                    94:f0:66:76:a4:67:57:05:96:84:e2:c0:4c:77:d1:
                    c4:fa:63:34:bb:f4:9c:4c:6d:9c:7e:fd:0a:27:d5:
                    9a:06:37:53:b6:2f:cc:71:38:76:28:d3:84:61:fe:
                    87:24:b6:05:f8:6b:25:79:00:2e:64:03:f2:7a:d9:
                    9d:d6:e4:de:23:0b:f7:76:ab:9a:22:21:72:5d:71:
                    6e:49:a5:6d:a5:bf:3e:bb:35:ee:14:96:e4:fc:38:
                    9a:a4:1a:20:e2:2d:79:31:27:de:72:1d:6c:a9:cb:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FD:DE:AC:D3:13:89:30:A0:AF:6D:13:95:DE:5B:63:78:01:08:0A
            X509v3 Authority Key Identifier:
                keyid:09:99:EE:BD:16:AC:F6:40:EA:6E:CD:54:D3:2D:89:79:96:68:A6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:14:31:31:60:b7:f9:22:ce:df:57:69:42:d5:6a:a7:12:01:
         96:67:97:09:ba:0a:5d:a5:0d:14:af:41:0f:b6:1a:2e:d1:4a:
         bf:be:67:e7:21:b0:88:09:cb:d9:6e:db:c3:e9:01:3a:78:2f:
         6c:68:e2:a9:db:0e:3e:9b:34:9c:4c:88:4a:bd:f6:5a:e0:93:
         f7:81:78:bb:82:a0:ce:cd:14:d5:5c:4d:f6:66:91:5c:b1:74:
         17:aa:40:1e:03:b6:a8:ff:ad:2f:6a:37:ff:ac:4d:52:a6:b2:
         0f:ea:ac:5c:8f:4b:ae:26:a7:aa:b4:55:c6:56:db:7b:35:86:
         16:68:8f:00:04:27:ba:d3:5b:24:63:dd:80:4e:57:39:81:1f:
         c1:e3:49:3f:f4:1c:ce:eb:04:c5:31:78:42:85:91:39:18:d5:
         a1:7d:ef:e1:5c:5e:81:fe:9f:a5:48:c9:e0:30:aa:e8:aa:6e:
         c1:9b:7a:42:71:f5:a1:18:8d:95:4e:82:38:d6:c9:39:fd:06:
         a8:39:81:ac:7c:44:95:31:2a:a1:36:e8:e2:e9:3c:4c:8f:21:
         c5:c4:76:63:16:89:e5:c3:1a:7f:11:54:e5:6f:60:89:da:20:
         b5:c1:f0:11:1a:34:1d:68:b5:c0:95:c6:bd:99:40:4d:f0:26:
         70:9c:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:07:07 2025 by rpki-client