Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa
File:                     3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier:          0YO+Nfc+JCWBd1buq5os5LEfVDvUdt25ffG049LDcRE=
Subject key identifier:   DA:25:0F:FD:29:A3:9D:80:46:6F:10:ED:AB:BA:62:A5:48:E5:46:F8
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       6BBEAE54BD86143589A7886613478F1F7670A859
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:42:12 +0000
ROA not before:           Thu 21 Aug 2025 17:37:12 +0000
ROA not after:            Thu 20 Aug 2026 17:42:12 +0000
asID:                     265419
IP address blocks:        168.195.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:be:ae:54:bd:86:14:35:89:a7:88:66:13:47:8f:1f:76:70:a8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:37:12 2025 GMT
            Not After : Aug 20 17:42:12 2026 GMT
        Subject: CN=DA250FFD29A39D80466F10EDABBA62A548E546F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:31:04:07:84:a7:5b:45:0a:d2:6e:cc:9e:
                    5f:4c:05:6d:80:f1:e9:09:0e:fe:e8:9b:10:dc:8b:
                    eb:99:d4:4a:3c:e7:2e:fc:b1:c7:70:38:0b:09:e7:
                    66:bf:19:bf:c3:14:8f:19:15:6a:e8:68:45:b8:f7:
                    ba:cb:d8:4f:ae:6c:3f:b3:79:1b:f8:2a:01:f8:02:
                    5b:74:78:a1:a9:82:11:ef:c5:b6:3e:0e:69:ef:52:
                    40:f0:31:de:63:66:4c:4b:04:ba:19:fc:2d:cd:6b:
                    1c:c9:d1:12:28:45:b6:1e:f2:ec:29:2c:72:47:45:
                    68:87:85:f1:3e:51:9d:f7:de:01:61:2f:e7:9c:ea:
                    29:34:d1:bc:50:19:0e:0b:cd:92:d9:96:d5:87:8d:
                    6e:28:09:e6:a5:eb:9d:81:f6:06:37:a8:1a:8e:0c:
                    0c:f9:84:7a:8c:10:d9:74:76:9c:eb:3d:a6:46:24:
                    96:bb:31:c6:c0:c7:b9:1c:ab:13:89:ff:73:ca:2d:
                    fc:bd:df:57:3c:1a:8f:87:1f:44:cd:39:1e:99:7c:
                    70:aa:db:de:10:48:35:23:64:3d:02:be:90:2d:6d:
                    15:8d:51:a3:fd:fe:e4:e9:09:38:10:4c:ad:da:39:
                    bc:0b:35:e2:d3:71:10:f7:e3:59:e2:dc:ab:65:a2:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:25:0F:FD:29:A3:9D:80:46:6F:10:ED:AB:BA:62:A5:48:E5:46:F8
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:6a:b2:cd:b0:3d:f9:f4:de:3c:68:54:0a:7c:48:bb:12:
         e8:62:0d:a4:48:a0:03:3f:0d:8d:5f:d3:92:1d:99:3c:7c:83:
         68:fb:2f:40:05:08:9e:01:9b:be:2f:52:77:3c:e2:b9:ec:aa:
         7d:b8:c7:35:6e:8b:6e:07:37:27:ad:87:16:26:ba:50:a7:7f:
         c6:29:46:b5:9b:31:ee:6c:1b:bd:73:9a:4a:d6:e5:a3:ff:47:
         40:72:ea:49:97:45:4b:49:f7:32:e7:8c:56:16:73:69:06:16:
         0c:21:18:13:c1:0a:73:eb:eb:fd:b9:ba:de:41:7e:58:c3:7a:
         a6:dd:6f:f1:c6:b8:af:c9:12:f3:f1:8a:cc:e6:ab:6c:08:bd:
         45:57:75:86:c5:94:ab:06:6f:4b:54:2b:da:6b:02:ed:d4:a8:
         8d:0a:79:2d:6b:84:8f:ad:d1:a1:1b:c1:23:cd:51:2b:92:df:
         ae:11:77:12:0e:61:63:45:e2:6b:0b:c2:ff:d1:0c:b4:6d:e5:
         33:da:2c:9f:e9:80:f8:d8:f3:93:75:3a:f3:ce:ea:52:35:98:
         8e:1e:bb:0e:3a:66:9f:bb:6a:22:9e:53:10:20:1c:ab:45:46:
         f0:01:a7:cf:c0:67:b8:de:9e:39:26:6d:0c:07:e8:62:bd:58:
         35:e1:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:16 2025 by rpki-client