Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32332d3234203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32332d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          6ckCPa2dlKKdsBhZSS321FBipViWsRSsq8r3gklI62Q=
Subject key identifier:   DB:E9:A4:17:8E:D3:99:F2:52:14:5D:9F:66:1E:A1:F8:7A:9F:BB:CF
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       0288F3BD28DAEB44D6B3579C1080A2690EB3A4
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32332d3234203d3e20323635333737.roa
Signing time:             Thu 03 Jul 2025 19:44:22 +0000
ROA not before:           Thu 03 Jul 2025 19:39:22 +0000
ROA not after:            Thu 02 Jul 2026 19:44:22 +0000
asID:                     265377
IP address blocks:        168.194.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 22:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:88:f3:bd:28:da:eb:44:d6:b3:57:9c:10:80:a2:69:0e:b3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Jul  3 19:39:22 2025 GMT
            Not After : Jul  2 19:44:22 2026 GMT
        Subject: CN=DBE9A4178ED399F252145D9F661EA1F87A9FBBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:83:df:47:45:51:ba:99:7b:f9:5c:58:83:
                    5e:dd:61:e4:f4:7d:83:e8:95:c6:55:87:b1:0f:6e:
                    59:32:1d:08:3d:3f:b9:bd:c5:e7:5e:89:66:e4:ec:
                    1c:db:32:cf:05:43:08:bd:b5:84:d2:e9:2d:a5:34:
                    2f:2a:5c:ba:d3:01:74:09:a4:c2:99:02:25:7b:77:
                    e4:5a:53:b4:e1:98:04:f3:ec:b7:8d:ef:51:f3:7c:
                    05:43:47:ae:b8:1d:05:f9:31:92:58:ba:25:00:c4:
                    14:ad:a1:21:2a:e9:f0:68:ef:e0:02:0e:d6:23:01:
                    dd:b8:e9:d1:d2:6b:fd:75:a0:bf:80:f3:90:56:04:
                    72:a5:53:92:56:43:c6:c4:31:3e:7c:b4:a6:17:96:
                    6a:9b:ee:0f:4c:42:ea:f8:1c:0d:6d:dd:d6:3f:3f:
                    ed:13:e1:5f:7a:31:c0:48:c9:71:82:6a:7e:46:9a:
                    97:3d:3f:89:29:53:22:27:d8:53:f0:b5:09:0d:89:
                    ee:16:50:1b:f5:d8:5d:e9:b4:bc:e2:ca:a2:67:2f:
                    0a:3c:13:7e:89:de:d1:7b:26:41:85:8b:16:5e:f0:
                    81:21:90:6e:e4:69:3f:06:0f:37:0d:4f:fd:48:05:
                    42:62:ba:5a:4b:92:6e:db:f1:00:61:b2:fb:f3:16:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:A4:17:8E:D3:99:F2:52:14:5D:9F:66:1E:A1:F8:7A:9F:BB:CF
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32332d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:64:37:bb:57:80:3d:bb:27:1b:57:7f:02:50:c0:b6:6f:c3:
         82:fe:67:3d:2d:69:29:00:f1:62:03:6d:ec:a8:77:3d:bb:1c:
         2c:6a:36:b7:43:da:43:a6:84:59:0e:f5:7a:68:77:85:e0:7e:
         48:57:77:e5:81:73:13:de:bf:2c:7d:f6:1e:76:f5:53:74:c6:
         71:53:52:5b:b9:d7:1b:14:91:ab:b1:4f:db:22:bd:80:e3:64:
         6c:af:2c:03:a5:fa:98:df:69:7b:46:f1:e1:7c:ee:03:05:4a:
         ef:b8:06:3d:5b:e3:1a:84:49:1d:2d:ee:3a:36:4a:78:74:7e:
         51:cd:4c:8e:c1:4d:79:d5:d2:fc:94:96:e1:11:11:35:3c:8d:
         12:7a:32:11:83:a1:86:6c:2a:da:57:81:5f:3a:be:22:ba:b1:
         78:bc:0e:01:b9:1b:4e:97:93:5c:35:d7:79:ec:20:52:6e:dd:
         41:c0:6d:2e:90:4c:64:7e:4d:e0:0d:e2:a9:86:62:e5:df:9c:
         ac:b9:09:69:66:36:28:ea:11:74:01:9a:c4:6c:60:7b:4c:2c:
         c4:df:c7:f4:64:d0:6f:3f:cb:eb:e6:d3:84:b4:39:34:f1:05:
         59:b7:72:22:c0:7a:f5:05:86:73:c5:ac:3d:8f:94:cb:49:91:
         5d:7e:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:34:50 2025 by rpki-client