Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3332203d3e203631383035.roa
File:                     3133312e3136312e3135362e302f32322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          w3VwJhYvfnUiyO/LcEYCKf+bD+MOs2qLL6CH8S9yoLA=
Subject key identifier:   C6:68:D7:78:91:D7:6C:91:60:FE:90:32:48:CA:07:45:53:D1:F5:DE
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       4848AC48486FECA94636C58DF25959785516A087
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3332203d3e203631383035.roa
Signing time:             Thu 09 Oct 2025 12:35:17 +0000
ROA not before:           Thu 09 Oct 2025 12:30:17 +0000
ROA not after:            Thu 08 Oct 2026 12:35:17 +0000
asID:                     61805
IP address blocks:        131.161.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:48:ac:48:48:6f:ec:a9:46:36:c5:8d:f2:59:59:78:55:16:a0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Oct  9 12:30:17 2025 GMT
            Not After : Oct  8 12:35:17 2026 GMT
        Subject: CN=C668D77891D76C9160FE903248CA074553D1F5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:eb:e8:e3:b6:87:1d:c4:80:55:94:3b:b5:
                    f1:db:f3:bb:e4:50:84:fb:fe:9b:3c:86:b8:94:3c:
                    a9:c2:58:b4:d9:a7:e8:7d:6c:97:c1:f0:33:f5:c6:
                    a3:8d:12:c8:77:2a:c0:5a:0a:1b:70:a2:f5:c8:6f:
                    3e:38:19:a4:d3:6a:3f:a1:86:8a:80:e2:27:ad:4b:
                    2c:e5:2f:0b:9a:55:d6:08:88:1c:4d:d5:e3:a0:86:
                    a6:9e:97:ee:bd:7e:3c:3d:f5:60:aa:b6:f5:cc:2e:
                    ef:2a:e3:be:e3:df:91:af:ab:22:20:f4:b5:6c:57:
                    4b:d7:90:69:60:5c:a0:b8:cb:96:0f:0c:ff:f3:03:
                    f6:eb:cf:0e:ef:e1:55:35:ef:69:7d:cd:2b:b7:10:
                    5c:5e:29:62:18:06:e0:82:6e:72:d7:2e:8c:d9:e4:
                    fb:b6:78:d1:b4:2f:a6:1b:f0:d1:77:d7:e0:1b:c8:
                    5f:4d:aa:3e:e3:02:e3:d3:cf:9c:71:c4:81:9d:4c:
                    77:9f:8a:25:0a:e8:7b:aa:40:ae:43:b2:fb:ca:d4:
                    21:1b:12:a1:88:9c:e9:9e:cf:d3:d0:aa:9e:39:51:
                    4a:3b:c6:d4:50:bb:ee:b4:e5:16:55:9f:5b:5d:cf:
                    ec:85:7a:24:87:a2:67:fe:42:0b:c4:29:c0:af:21:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:68:D7:78:91:D7:6C:91:60:FE:90:32:48:CA:07:45:53:D1:F5:DE
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:58:35:62:ab:cd:08:1a:e2:ea:f9:95:76:1e:50:cf:f3:b7:
         c5:55:2a:1e:50:a8:11:45:a6:5c:0d:04:e4:f3:3a:6a:6a:8b:
         de:a4:8b:4c:41:e9:c8:9a:35:17:7b:6e:fc:18:ae:83:0d:46:
         51:a6:cf:0e:af:d0:7a:cc:4c:e3:b2:c4:1e:7d:3d:80:3a:9e:
         a7:d4:ac:2a:a4:62:1d:e8:f8:1a:59:c1:a0:ee:46:ee:f6:d5:
         59:2f:c0:6f:75:4a:f3:f3:8f:2f:78:4f:39:89:ee:aa:eb:5b:
         c3:2e:e9:ac:19:59:52:bc:2a:27:44:b4:53:9a:e4:51:c8:28:
         70:5d:66:d2:7e:6e:af:61:ed:75:88:82:9d:e8:c8:a0:a7:79:
         a8:0d:59:d2:1d:c7:88:17:55:a8:10:2c:ca:62:17:b8:98:e7:
         87:8d:b8:9d:a6:84:cd:84:2e:c8:1f:a1:63:0b:71:58:59:c8:
         ad:e1:a2:ff:50:2d:cd:af:c5:11:04:1d:30:00:c3:31:0f:65:
         cd:cd:1e:29:11:0d:4c:84:35:5d:e1:5f:a6:7c:12:f4:b0:cb:
         3c:0b:5e:c2:05:8d:09:04:55:bd:97:a4:5e:1a:a6:4f:2d:f2:
         29:21:4d:44:5a:1f:16:db:44:1e:dd:19:8a:0c:11:fd:70:28:
         18:74:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:30 2025 by rpki-client