Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
File:                     3136382e39302e38382e302f32322d3332203d3e20323635323639.roa (raw, json)
Hash identifier:          M6YpRZ51VGf557dAZjAo51wqMFNuwXKFL7csKiBm4Vo=
Subject key identifier:   E0:DA:42:0E:50:7C:F2:C3:37:B2:F6:7D:4D:8F:E4:B3:AC:64:B0:6A
Certificate issuer:       /CN=7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB
Certificate serial:       75F4668FDED043B4D9AAB59A049600A75D024895
Authority key identifier: 7C:1F:13:98:3D:26:E3:30:6E:70:B8:6E:2D:4E:52:9B:DB:D4:BC:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
Signing time:             Thu 10 Jul 2025 16:12:27 +0000
ROA not before:           Thu 10 Jul 2025 16:07:27 +0000
ROA not after:            Thu 09 Jul 2026 16:12:27 +0000
asID:                     265269
IP address blocks:        168.90.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB.crl
                          rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 18:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:66:8f:de:d0:43:b4:d9:aa:b5:9a:04:96:00:a7:5d:02:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB
        Validity
            Not Before: Jul 10 16:07:27 2025 GMT
            Not After : Jul  9 16:12:27 2026 GMT
        Subject: CN=E0DA420E507CF2C337B2F67D4D8FE4B3AC64B06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:52:dd:bf:1e:42:94:b6:04:ee:7d:14:ca:
                    09:03:cb:dc:6b:08:48:4d:92:22:df:e5:65:29:66:
                    c6:f6:8c:fb:81:3c:0c:da:7a:a6:4d:bd:89:7e:44:
                    4a:bd:42:f2:f1:63:c2:21:17:74:a8:4a:0a:49:25:
                    29:2f:bd:78:2c:83:de:83:bf:a6:bf:00:8d:89:17:
                    67:6a:63:da:85:f1:84:2f:85:8e:78:f7:a8:bc:ec:
                    b2:05:4b:ee:90:7d:bb:73:87:72:a5:cf:53:05:6f:
                    1a:68:0f:a8:c6:ed:93:72:c5:37:32:72:f8:4b:3d:
                    b2:76:a9:8e:ec:a3:e5:04:5b:b8:74:27:b9:3f:68:
                    6c:48:29:37:24:2e:03:02:f3:0d:2a:9f:23:a9:71:
                    bb:02:94:e1:0f:f4:e4:ef:24:b5:77:b9:15:3e:89:
                    4f:86:c6:e7:b3:b9:ec:48:30:4b:11:4b:c3:92:3f:
                    0e:57:c1:d2:7d:e3:bf:e4:78:f0:f0:e6:41:c8:2d:
                    f2:2e:08:b2:a2:6c:c5:6b:c2:c8:b4:84:ca:b2:f3:
                    9b:40:db:68:12:ed:57:7b:99:78:dc:fa:e5:d8:94:
                    60:1c:04:9b:c4:60:b6:73:3a:5b:34:36:fd:be:e3:
                    35:67:86:42:06:8b:ed:2c:7f:c0:20:97:ba:0e:a9:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DA:42:0E:50:7C:F2:C3:37:B2:F6:7D:4D:8F:E4:B3:AC:64:B0:6A
            X509v3 Authority Key Identifier:
                keyid:7C:1F:13:98:3D:26:E3:30:6E:70:B8:6E:2D:4E:52:9B:DB:D4:BC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C1F13983D26E3306E70B86E2D4E529BDBD4BCDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:8e:09:c3:85:71:df:13:01:15:a0:b2:01:d8:e5:25:da:
         19:7a:9c:0e:0e:f6:5b:44:2a:c5:7f:f6:b1:8c:e0:98:e1:69:
         ff:1c:c5:bc:fd:71:e1:c6:ad:7e:54:8c:13:1a:1c:99:ab:73:
         95:89:da:57:69:24:c3:da:6f:f0:58:42:84:e9:0c:22:61:51:
         95:ec:1f:14:b3:e9:65:ce:a0:8c:d4:9c:f7:2f:86:37:e7:9e:
         a4:44:9a:34:59:6e:23:46:3e:03:eb:88:09:26:e1:3f:c0:f7:
         65:35:24:2b:a4:b8:2e:d4:f0:44:17:94:74:19:f6:d5:09:df:
         99:37:d0:2a:df:ff:be:c2:9c:e7:de:55:aa:d3:b0:1e:a4:b8:
         b6:69:c5:e7:fb:5f:f8:8c:eb:78:94:63:e7:a0:21:4a:13:29:
         fe:70:54:d9:44:e0:fc:78:1f:df:75:13:8f:13:7a:da:9d:ba:
         4c:9e:a1:a5:89:75:e8:f9:1b:28:11:7c:5c:ef:67:02:6c:e2:
         d5:e2:de:39:69:d2:96:1f:62:24:18:56:c4:86:b7:2b:cf:4e:
         b7:db:74:f4:4a:c9:e2:dd:41:cd:07:13:77:77:67:85:44:4b:
         c0:05:fe:dc:46:11:41:7d:6d:f7:57:bc:91:b1:35:39:6e:68:
         88:20:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 22:46:34 2025 by rpki-client