Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32332d3233203d3e20323634383939.roa
File:                     3136382e3232382e362e302f32332d3233203d3e20323634383939.roa (raw, json)
Hash identifier:          7OQjmmQzsveaBgIguRiJaDFiPWevd18QvzX81NjX9Cw=
Subject key identifier:   53:3D:46:9B:F5:DF:A0:D0:D2:00:D5:BE:84:AA:04:1A:A0:DB:E1:9E
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       53A6AE51A9F0DB2A1CAC295CD4F3FFFAEB1A9BCD
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32332d3233203d3e20323634383939.roa
Signing time:             Thu 16 Oct 2025 18:30:59 +0000
ROA not before:           Thu 16 Oct 2025 18:25:59 +0000
ROA not after:            Thu 15 Oct 2026 18:30:59 +0000
asID:                     264899
IP address blocks:        168.228.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:ae:51:a9:f0:db:2a:1c:ac:29:5c:d4:f3:ff:fa:eb:1a:9b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Oct 16 18:25:59 2025 GMT
            Not After : Oct 15 18:30:59 2026 GMT
        Subject: CN=533D469BF5DFA0D0D200D5BE84AA041AA0DBE19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:57:38:3d:02:25:76:ea:43:c9:05:91:88:
                    d6:d3:13:06:9e:2e:d9:f7:4b:ef:08:cd:f0:58:8a:
                    ad:44:98:61:c9:a8:69:8c:3a:fc:a8:59:68:7f:87:
                    4f:b5:e6:cb:10:23:19:b8:a7:21:a9:82:b7:53:d5:
                    9b:1b:e5:2a:7e:81:01:63:79:87:54:8e:b4:d9:84:
                    84:8a:32:7f:d1:0f:00:11:2b:3c:6f:d8:8c:33:4a:
                    fe:c0:75:05:45:df:5a:9d:a4:ea:34:d3:68:15:7f:
                    de:06:b3:24:82:ab:15:69:5c:f5:ed:b7:92:93:a7:
                    76:da:d2:85:af:96:af:89:2c:8e:30:83:ca:55:56:
                    9b:0b:b6:69:82:f1:ed:d5:8e:6d:8b:18:9e:fc:51:
                    8a:28:1a:2f:49:33:0c:ed:26:1e:7f:17:fb:c7:19:
                    a5:94:7d:23:7e:f4:43:a0:c5:a7:cd:2f:8a:29:76:
                    82:83:50:d9:e4:56:34:33:f7:d5:83:5a:16:8c:21:
                    82:bf:98:b1:c5:71:72:35:a5:b0:10:2c:60:82:ea:
                    cc:49:23:54:25:77:68:77:cc:c0:33:7f:4c:aa:77:
                    58:4b:2d:61:f7:7b:b2:62:6e:42:61:cd:f5:a9:e5:
                    ce:f3:bc:ce:b2:7e:e4:74:cf:34:8c:24:2a:a6:c5:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:46:9B:F5:DF:A0:D0:D2:00:D5:BE:84:AA:04:1A:A0:DB:E1:9E
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32332d3233203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:12:5a:45:17:4b:14:cb:0f:0c:1e:97:26:89:7a:e8:85:f2:
         e5:18:d9:79:64:c0:42:92:f4:4d:ea:67:f7:69:8f:a1:21:47:
         2e:8e:e4:41:71:b7:a6:cb:7f:22:da:89:18:3a:64:16:25:0a:
         07:38:08:8a:9b:86:a5:64:af:e6:cb:e2:76:13:8a:b6:27:3e:
         e9:0c:12:2e:dc:7b:7a:00:b2:a4:d0:27:7a:34:ab:a5:60:7a:
         cd:e3:ee:03:ce:b1:c1:d2:3d:47:37:f4:f3:81:29:12:3f:9b:
         8d:1f:55:2a:96:af:d4:a8:52:b7:1f:48:79:fd:b6:be:53:5c:
         c0:77:77:0c:49:fd:fc:10:65:5b:a3:7c:78:1d:24:32:1e:87:
         1c:2f:55:26:17:d4:7c:c3:08:bc:04:6e:37:4f:95:a9:58:a7:
         09:e2:5b:10:8e:2f:3f:05:2b:93:ee:a0:07:13:41:af:52:6d:
         a2:22:16:24:1f:24:1c:8c:54:a4:81:a3:15:fd:14:f5:9e:44:
         da:a5:47:06:2f:ba:7b:f9:d0:8a:37:17:c1:53:80:85:d0:46:
         a6:7e:0a:54:12:c5:ba:17:68:34:27:cb:a2:8e:0e:f9:26:ca:
         a6:c6:ce:d3:3d:0e:3d:b0:8f:f7:6c:ca:a4:ee:fe:c2:53:18:
         b9:f1:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:28 2025 by rpki-client