Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232302e302f32332d3233203d3e20323634383636.roa
File:                     3136382e3230352e3232302e302f32332d3233203d3e20323634383636.roa (raw, json)
Hash identifier:          ofnDwrzo8ZSYmeRBIikvt9lBtWCcpl1mbhLZN8/7CAA=
Subject key identifier:   F1:54:61:15:4B:4B:D4:45:EC:DB:EA:F2:8E:0C:77:F1:2B:51:F9:FF
Certificate issuer:       /CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
Certificate serial:       64A7846FF1F74140E4117B6DB043336FF17EAE67
Authority key identifier: F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232302e302f32332d3233203d3e20323634383636.roa
Signing time:             Fri 12 Sep 2025 18:39:53 +0000
ROA not before:           Fri 12 Sep 2025 18:34:53 +0000
ROA not after:            Fri 11 Sep 2026 18:39:53 +0000
asID:                     264866
IP address blocks:        168.205.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl
                          rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a7:84:6f:f1:f7:41:40:e4:11:7b:6d:b0:43:33:6f:f1:7e:ae:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
        Validity
            Not Before: Sep 12 18:34:53 2025 GMT
            Not After : Sep 11 18:39:53 2026 GMT
        Subject: CN=F15461154B4BD445ECDBEAF28E0C77F12B51F9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:b8:dc:ba:d2:f5:1c:8e:73:55:d0:3f:ed:
                    ee:96:b6:7b:af:cd:60:d8:2a:b1:8c:4d:bd:b0:43:
                    33:3d:10:17:16:13:5c:29:e6:52:65:aa:72:f0:b7:
                    0d:f8:81:60:ca:59:84:58:72:97:e8:a9:d3:f5:78:
                    53:60:b3:bd:6e:bd:47:d0:50:ba:c4:0e:4d:7a:1f:
                    bc:15:9d:a8:d7:88:bb:59:c7:63:ae:0e:d8:34:9e:
                    77:42:ef:e7:9a:3b:71:7b:15:90:53:cd:e9:95:56:
                    4c:a9:0e:93:bb:d8:87:cd:5d:9a:32:7d:bc:f3:90:
                    d2:39:87:07:bd:fe:65:c9:74:d7:59:8b:60:8a:b7:
                    31:66:31:5f:a1:11:8d:cd:5d:a7:6b:cd:ee:e0:0e:
                    8c:5a:5c:14:52:33:aa:e9:a4:df:73:a1:32:15:66:
                    a5:c3:c3:42:d6:ea:96:99:e0:c4:5f:99:d7:21:6c:
                    94:4b:99:1a:1a:8f:6b:2c:97:29:b3:23:01:4f:04:
                    74:4b:a7:3a:c4:74:46:81:33:d1:9b:58:f0:ee:d8:
                    1f:7a:1c:88:0a:ef:ee:46:40:3c:0d:e9:7a:1d:ca:
                    ab:ef:e9:c0:bc:5d:f4:25:7a:41:9c:e3:95:1d:51:
                    4c:98:86:55:c0:a7:ac:0c:01:59:c3:85:ff:b5:fe:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:61:15:4B:4B:D4:45:EC:DB:EA:F2:8E:0C:77:F1:2B:51:F9:FF
            X509v3 Authority Key Identifier:
                keyid:F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232302e302f32332d3233203d3e20323634383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:86:a3:02:33:b2:84:12:20:93:c9:03:6b:7e:42:3c:74:9b:
         e5:18:7a:cb:d6:ed:8f:21:d5:13:62:3d:e2:49:84:75:91:eb:
         9f:e4:25:b5:d2:12:86:10:0f:b6:77:a4:42:a8:23:07:bf:7e:
         0a:20:25:ee:a9:b3:cd:7a:5e:13:bd:80:00:d5:af:3a:62:a5:
         58:34:66:e8:4b:2b:ae:c2:f1:50:65:d0:4d:ad:6f:2d:09:50:
         b5:61:55:f7:7e:61:e5:b7:e2:33:7f:11:ac:42:da:ff:ab:f9:
         79:b6:e5:2b:e4:4d:05:76:86:d9:4d:79:bd:ba:85:5f:b6:f2:
         eb:ff:f3:52:67:aa:f7:cc:df:ba:24:81:c0:6a:fd:8e:74:b2:
         4b:7d:75:e4:76:44:09:ce:24:aa:95:65:89:54:2c:a7:b7:2d:
         90:97:80:03:1a:90:2d:28:10:cb:08:11:28:c9:b3:2d:2b:a1:
         a3:af:75:4b:94:fe:db:b9:3c:c6:4c:26:82:7b:ef:cf:8e:a2:
         df:04:f7:2b:e1:9b:fd:98:dd:cf:e7:76:1a:94:5d:4e:ed:82:
         37:51:dd:d3:9a:40:7c:4d:73:dc:d1:76:00:51:be:cc:e8:10:
         4f:0a:d4:74:07:48:ed:91:ba:2c:35:c7:6a:48:77:c2:4e:de:
         b1:27:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:37:27 2025 by rpki-client