Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232332e302f32342d3234203d3e20323634383636.roa
File:                     3136382e3230352e3232332e302f32342d3234203d3e20323634383636.roa (raw, json)
Hash identifier:          1mhBJJc0uhdDa7+nFbkFArX70HZ5AyQnPUgaQKc06sA=
Subject key identifier:   5A:BF:F4:39:56:F2:B0:16:06:45:85:C3:BF:60:22:08:F1:75:E0:43
Certificate issuer:       /CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
Certificate serial:       2163BE7C0B011CE588A461DCD33483C0862522A7
Authority key identifier: F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232332e302f32342d3234203d3e20323634383636.roa
Signing time:             Fri 12 Sep 2025 18:39:54 +0000
ROA not before:           Fri 12 Sep 2025 18:34:54 +0000
ROA not after:            Fri 11 Sep 2026 18:39:54 +0000
asID:                     264866
IP address blocks:        168.205.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl
                          rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:63:be:7c:0b:01:1c:e5:88:a4:61:dc:d3:34:83:c0:86:25:22:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
        Validity
            Not Before: Sep 12 18:34:54 2025 GMT
            Not After : Sep 11 18:39:54 2026 GMT
        Subject: CN=5ABFF43956F2B016064585C3BF602208F175E043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:d2:bb:b1:ef:d4:28:17:40:d0:88:3d:96:
                    70:01:17:a5:cd:04:b2:12:4f:14:87:30:2b:fc:e6:
                    0f:30:83:dd:b5:d0:b7:cb:11:09:9b:0a:7d:78:f9:
                    68:9c:a9:00:a0:b0:78:32:be:ca:4e:48:8f:3b:66:
                    81:ec:55:a4:d9:21:9e:8c:f6:a0:4c:28:43:0b:96:
                    26:6d:55:55:60:4e:1a:0f:78:ba:d4:4d:2f:c7:24:
                    13:47:a6:39:29:d7:4d:34:07:a5:2c:58:0d:0b:eb:
                    22:d5:e3:16:1f:61:97:d9:e2:08:f9:9a:21:46:9c:
                    92:25:64:de:98:c4:86:c9:c6:4d:c7:05:91:9d:86:
                    1d:94:0b:b5:8a:5a:ca:39:b2:61:d0:35:4a:71:20:
                    2f:3b:46:59:a3:b4:6c:d1:fa:2c:c6:83:97:a0:3b:
                    03:2c:e2:88:52:0f:a2:91:88:69:a0:46:ee:c6:87:
                    67:b7:d7:cc:2b:cb:81:fc:06:a0:f6:f9:87:99:4f:
                    fd:92:28:82:26:49:23:e4:c0:da:24:dd:51:e5:71:
                    77:25:a9:14:1e:e4:c9:6b:35:c9:1d:fa:2b:bd:91:
                    0b:35:00:c1:dc:38:94:5a:8b:42:af:56:e3:2e:c7:
                    b7:74:c5:a4:42:dc:10:3c:c7:0b:3b:75:7c:e7:e3:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BF:F4:39:56:F2:B0:16:06:45:85:C3:BF:60:22:08:F1:75:E0:43
            X509v3 Authority Key Identifier:
                keyid:F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/3136382e3230352e3232332e302f32342d3234203d3e20323634383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:f2:7e:08:2b:b6:c0:e1:12:e4:e7:72:a3:28:25:39:21:
         d1:ba:20:75:a1:11:62:92:8e:87:3b:fe:0e:43:9a:e2:f5:17:
         62:55:29:cf:04:cf:f3:42:4d:22:b2:d5:3f:66:29:7c:42:01:
         59:9a:14:be:3d:8a:11:a2:ac:5d:cc:97:9d:8c:c2:a7:f7:e6:
         e0:a7:8b:00:24:5b:d2:39:23:5c:6b:f3:fb:6f:45:d4:f0:7b:
         f1:d6:49:99:e2:ce:49:35:06:5f:75:c6:af:2d:8b:95:a2:4f:
         ba:67:50:5a:0b:07:ae:d7:e1:d9:b7:83:c7:f9:3a:6e:b2:15:
         71:26:5c:8c:2e:71:d4:b2:9f:05:13:fa:a6:9f:b9:02:b6:ce:
         37:2e:52:7b:f0:59:b2:0d:dd:bd:a1:74:89:ca:5a:f5:30:57:
         67:da:d3:10:ad:9b:cd:c7:a9:fc:9c:b1:72:30:a6:bb:62:ca:
         f9:3b:c4:82:61:4c:ca:84:86:fa:73:d5:c6:b8:ac:a9:a6:08:
         20:1c:ef:39:40:1e:11:d5:e6:09:8b:d9:b0:a3:8f:f5:36:d9:
         5b:ac:a9:a2:fc:0c:a5:cb:c7:40:1e:7c:7a:e3:8e:45:d4:c4:
         4d:bc:d4:51:d8:15:3e:28:b5:44:78:f4:d6:11:32:4a:cd:3a:
         02:cf:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:04 2025 by rpki-client