Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa
File:                     3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa (raw, json)
Hash identifier:          TVzmqKnWWvHYKCWjjedRZsa480nszs00KNjw/sTXWEE=
Subject key identifier:   29:96:91:BC:9F:92:AF:DE:10:47:E4:66:18:4B:9F:5B:CD:DB:C2:C6
Certificate issuer:       /CN=C977770848F9819D0F9036920A47A3511F957396
Certificate serial:       61EE853FDB9C7C5CA2F5B2D10D17092C9F7B57C1
Authority key identifier: C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa
Signing time:             Mon 06 Oct 2025 17:13:05 +0000
ROA not before:           Mon 06 Oct 2025 17:08:05 +0000
ROA not after:            Mon 05 Oct 2026 17:13:05 +0000
asID:                     265409
IP address blocks:        168.194.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.crl
                          rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ee:85:3f:db:9c:7c:5c:a2:f5:b2:d1:0d:17:09:2c:9f:7b:57:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C977770848F9819D0F9036920A47A3511F957396
        Validity
            Not Before: Oct  6 17:08:05 2025 GMT
            Not After : Oct  5 17:13:05 2026 GMT
        Subject: CN=299691BC9F92AFDE1047E466184B9F5BCDDBC2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:a3:65:71:83:3c:79:90:1a:7c:81:8f:fe:
                    f0:1d:38:d1:19:d7:e0:0e:c4:e0:1a:11:ec:75:23:
                    70:b2:4d:d9:70:7c:e0:4d:b8:a5:89:4b:2a:2a:55:
                    7a:66:15:fb:6e:03:96:c6:70:0b:ba:f1:d8:12:06:
                    f6:25:27:3d:30:cf:53:90:f4:06:69:94:39:06:ef:
                    7c:14:00:73:0f:84:ce:a1:7e:54:b3:d1:19:df:39:
                    de:5f:ec:69:bd:a6:17:36:be:2d:63:a4:92:f1:0f:
                    14:59:14:ce:0c:6e:19:58:64:bf:3b:c4:d6:56:25:
                    03:17:19:cf:d1:fa:6c:66:c9:14:7a:9b:f8:32:38:
                    e6:39:40:37:13:f0:e6:6f:38:70:d7:06:80:1c:25:
                    40:70:f7:06:ec:68:63:e8:8b:2f:4e:4c:4f:9e:33:
                    99:12:ed:be:19:83:5f:e7:74:1c:a8:0a:46:a8:8f:
                    95:be:94:48:cf:d1:b3:0d:85:0f:8d:38:d2:43:74:
                    f2:dc:84:07:ea:7f:be:2f:c7:be:da:65:38:5e:cc:
                    15:f2:b6:d0:f4:b7:8e:f3:3a:aa:d6:70:a7:5c:32:
                    32:f3:e2:f5:33:fc:e5:a0:2d:78:f0:6a:93:db:f4:
                    9b:39:b8:f1:72:04:a0:7a:38:ec:31:a7:29:1c:f6:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:96:91:BC:9F:92:AF:DE:10:47:E4:66:18:4B:9F:5B:CD:DB:C2:C6
            X509v3 Authority Key Identifier:
                keyid:C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:e2:b1:5b:8f:65:04:a3:94:01:f2:96:67:43:fa:e0:c3:
         49:a3:96:45:fd:cf:55:0c:36:00:05:6a:b1:c8:a7:23:57:aa:
         3b:c9:75:77:32:16:f5:78:fe:29:36:b5:24:61:78:b7:87:de:
         cd:be:ba:6d:21:34:b2:98:d3:2d:59:39:70:fa:66:d8:6b:d3:
         d4:d0:54:7b:5e:25:1c:ec:8a:f5:f6:fa:e0:51:23:b6:9e:90:
         c0:04:68:6c:3f:01:46:a1:78:75:a2:17:ae:65:5e:f9:70:ea:
         03:cd:89:a4:fb:ec:f0:27:c0:cc:24:3c:86:42:73:3f:74:e0:
         0f:51:36:d9:c0:5f:4b:b5:85:02:7f:9f:39:00:c0:8c:c6:2c:
         6e:51:84:73:b9:00:f7:e7:9d:aa:13:80:1e:7f:99:75:e9:13:
         59:ab:5a:1c:31:c4:cc:41:65:62:cb:5f:c8:71:db:7b:5b:47:
         9f:00:2c:c3:69:e4:67:fb:0f:6e:94:67:70:a6:43:e4:8d:ba:
         5a:98:c3:cb:ea:66:46:75:cc:d0:03:8c:92:bb:09:e6:f6:fc:
         9a:3b:6a:32:49:1f:9c:9c:7f:06:62:ac:89:7f:79:b7:e8:71:
         4c:2c:02:67:88:37:dd:b2:3f:df:f2:b9:40:35:f6:cb:e9:ec:
         91:61:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:29:40 2025 by rpki-client