Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa
File:                     3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa (raw, json)
Hash identifier:          x9aOdfFvH3VEu4sk7sDZlptBHbKpqSCl0IgxVOsEsl8=
Subject key identifier:   C0:DD:7B:36:F1:FC:31:13:35:71:83:56:37:C3:03:54:15:32:C3:53
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       571BC05BA1F9C2D729653AFB491ABFABC5FD69E7
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa
Signing time:             Sat 21 Jun 2025 11:48:47 +0000
ROA not before:           Sat 21 Jun 2025 11:43:47 +0000
ROA not after:            Sat 20 Jun 2026 11:48:47 +0000
asID:                     265484
IP address blocks:        168.197.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 15:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1b:c0:5b:a1:f9:c2:d7:29:65:3a:fb:49:1a:bf:ab:c5:fd:69:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Jun 21 11:43:47 2025 GMT
            Not After : Jun 20 11:48:47 2026 GMT
        Subject: CN=C0DD7B36F1FC31133571835637C303541532C353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:2b:2d:81:84:18:b1:06:bb:f6:f5:d9:dd:
                    69:3f:53:16:fa:5c:06:59:cf:12:47:9b:89:61:3a:
                    46:24:61:57:a1:4a:75:fe:29:01:53:26:8c:34:69:
                    1e:26:93:0f:d8:44:a5:b5:eb:63:d6:6b:f4:8c:fa:
                    ed:03:67:60:01:3d:94:62:e5:c9:24:f0:1c:ab:62:
                    54:ac:ba:0a:d2:52:57:a0:bc:3b:eb:1c:b3:9b:49:
                    28:cd:5c:13:59:ad:a3:36:a2:e8:6d:a4:8e:60:a7:
                    08:49:ce:41:af:7e:4b:3b:71:a6:af:8d:44:da:2c:
                    f4:6d:a4:73:b9:e9:0c:4c:57:4c:2f:82:d3:16:fc:
                    ad:24:a6:97:a0:0b:bc:f6:da:7e:66:ca:72:2e:af:
                    0c:05:a6:f9:c9:37:90:69:55:12:fc:da:24:f8:35:
                    5a:0a:03:c4:fb:0d:a2:d1:21:80:38:8d:bf:3d:ea:
                    7c:40:e9:be:ee:c7:8e:19:17:50:2b:5b:0c:80:2d:
                    7f:e0:ce:4a:81:4c:a7:87:95:22:78:7b:cd:c1:98:
                    5d:b7:8c:4b:7e:1e:ba:39:81:1f:ff:36:70:c6:0b:
                    89:2a:a6:1a:13:55:4a:69:c0:8f:f6:ed:c0:63:45:
                    1b:68:06:70:b8:64:dd:e0:9d:84:06:6f:30:0d:70:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DD:7B:36:F1:FC:31:13:35:71:83:56:37:C3:03:54:15:32:C3:53
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:22:97:ff:54:e1:e7:15:c7:d5:c1:5b:d9:b5:b2:81:1a:ea:
         c6:87:08:8c:a5:89:88:f8:dd:50:9a:a5:ba:ed:ec:58:eb:3a:
         b8:6a:e3:8f:f0:68:94:a1:1d:01:ba:41:1e:cd:34:f7:78:e8:
         95:70:a9:ac:b2:a8:bb:88:d5:ed:7d:fe:b3:28:40:90:31:6e:
         fd:3f:57:89:5e:d9:8a:d8:97:87:43:89:94:89:93:13:28:56:
         49:90:fb:62:a9:3b:b9:85:7b:85:ea:b1:32:2c:4a:4c:02:cd:
         2e:09:b6:18:05:19:f1:54:e9:fe:6f:97:34:d2:7d:43:85:0b:
         56:26:d5:8b:c6:9e:9a:24:a0:4b:e1:7c:38:90:9c:3f:cc:b1:
         31:db:cb:5c:bd:22:95:c8:d0:79:eb:b0:fa:bf:6b:d3:d7:a4:
         de:cf:ba:2c:49:74:c7:5b:a1:c0:ae:e8:af:e0:24:92:b1:57:
         ae:6e:00:7a:b9:92:ee:be:fb:5f:06:ba:c8:cb:a7:22:10:b1:
         1a:06:db:45:21:9b:5d:7c:57:5b:d1:36:c8:b5:a5:3f:a0:fa:
         d9:68:8d:6a:f6:46:7c:05:75:37:75:bb:36:10:bc:d2:a2:ae:
         ca:64:23:05:3a:17:3d:df:65:03:c6:d4:7c:fb:57:a4:ff:0e:
         c1:52:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:52:46 2025 by rpki-client