Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232322e302f32332d3233203d3e20323634383636.roa
File:                     3136382e3230352e3232322e302f32332d3233203d3e20323634383636.roa (raw, json)
Hash identifier:          XnPMxaoi1UtK10INjT3DsXBxCrZkr6pOO22aAkMYvLE=
Subject key identifier:   F1:80:D0:60:75:A9:30:BE:35:9C:42:A9:0A:9B:6A:CA:34:8F:6E:BA
Certificate issuer:       /CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
Certificate serial:       0F01C50C4BCB34274E326DB0DD2DDAC445C1929F
Authority key identifier: F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232322e302f32332d3233203d3e20323634383636.roa
Signing time:             Fri 12 Sep 2025 18:39:54 +0000
ROA not before:           Fri 12 Sep 2025 18:34:54 +0000
ROA not after:            Fri 11 Sep 2026 18:39:54 +0000
asID:                     264866
IP address blocks:        168.205.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl
                          rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:c5:0c:4b:cb:34:27:4e:32:6d:b0:dd:2d:da:c4:45:c1:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
        Validity
            Not Before: Sep 12 18:34:54 2025 GMT
            Not After : Sep 11 18:39:54 2026 GMT
        Subject: CN=F180D06075A930BE359C42A90A9B6ACA348F6EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:71:64:63:f2:4c:fc:a6:0f:4c:c1:87:f2:
                    9c:58:66:62:c5:6d:60:65:06:c4:04:83:a2:76:73:
                    50:c5:87:1a:ed:61:c7:37:53:c7:e7:19:84:82:77:
                    a7:f9:53:32:b0:45:14:24:72:04:3b:20:67:37:24:
                    bb:6d:18:7b:eb:11:23:00:8d:ad:fd:ff:68:d1:02:
                    8c:f1:ec:48:cc:f4:17:9a:22:e6:a2:ac:5e:51:d4:
                    a7:56:cc:52:95:1c:e3:3a:e8:56:b4:40:38:6e:dc:
                    c6:a4:8b:12:ca:5b:b2:7b:92:b8:cc:e9:65:ff:ac:
                    5f:88:e3:00:fe:05:d7:89:e9:52:ec:5e:29:be:d9:
                    03:17:54:34:4c:b0:14:81:c4:f8:40:3a:3f:f0:fd:
                    97:ba:8d:01:cf:62:ba:9c:1f:97:5d:3a:66:99:6c:
                    5a:80:04:6d:c3:19:b7:6e:eb:bd:98:3a:dd:45:2b:
                    b6:70:50:cf:86:7e:00:f2:89:19:fe:1d:ac:a6:65:
                    af:d7:7a:d5:0f:b6:a6:06:ac:5c:cd:ba:ce:f6:e8:
                    39:c7:24:cc:51:14:0a:11:34:84:4c:67:80:cb:1d:
                    26:68:5e:fe:99:03:16:00:23:88:1b:84:c6:f8:fe:
                    1f:a3:ea:60:35:f8:e7:57:da:3c:c4:b8:b8:2e:38:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:80:D0:60:75:A9:30:BE:35:9C:42:A9:0A:9B:6A:CA:34:8F:6E:BA
            X509v3 Authority Key Identifier:
                keyid:F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232322e302f32332d3233203d3e20323634383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:ee:31:87:1e:35:6f:1a:54:48:34:56:86:d5:25:20:e6:
         2d:b8:4d:68:76:04:1a:65:8d:0f:d3:2a:72:8c:54:e1:7a:41:
         7b:cb:bc:9c:8b:24:8b:85:6d:3e:db:4e:ad:ba:d4:45:69:a0:
         d1:87:68:92:e5:9c:3a:49:37:d2:92:3c:c1:07:87:b1:9e:44:
         50:cc:e2:0f:1e:c7:5c:f0:6c:c6:ac:bd:17:98:55:ef:c8:e7:
         d2:4e:2a:ee:77:bd:89:c0:d8:5f:b5:ad:d3:d1:fd:56:53:2d:
         d9:63:df:d2:45:25:3e:7c:69:23:35:03:df:56:a3:b6:92:01:
         7d:ac:e3:aa:63:29:a1:eb:6e:7f:e3:2f:43:90:6e:35:ea:d1:
         78:39:a0:3e:82:73:47:79:82:af:2f:8d:fe:ee:63:ce:0c:3c:
         7d:4f:c4:12:4d:c2:c7:72:68:44:1b:22:d9:d5:72:39:8c:29:
         32:a2:d6:de:6a:98:06:a5:86:9f:84:a4:14:7d:0c:ba:ff:82:
         f8:49:63:16:15:87:0d:c5:89:e5:de:a4:0d:06:cf:e9:30:97:
         9f:ea:2f:fc:d6:f8:f0:30:42:cc:e7:c8:cd:8f:e5:9c:0f:5d:
         a7:2d:46:26:42:42:00:f0:de:71:29:4f:62:45:ca:95:66:c6:
         82:09:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:15 2025 by rpki-client