Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
File:                     3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier:          8LKBorU7/Hd9UInslFAV9Ax60Nqwx1ONgcGQ7Hmm1qg=
Subject key identifier:   E1:47:89:2B:6D:FD:57:52:55:12:3B:3F:B7:16:DD:17:7D:94:EE:14
Certificate issuer:       /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial:       44949A44688141B11E65FA3C3681977CD9B2E5BF
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
Signing time:             Tue 01 Jul 2025 12:14:02 +0000
ROA not before:           Tue 01 Jul 2025 12:09:02 +0000
ROA not after:            Tue 30 Jun 2026 12:14:02 +0000
asID:                     265419
IP address blocks:        168.195.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:9a:44:68:81:41:b1:1e:65:fa:3c:36:81:97:7c:d9:b2:e5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
        Validity
            Not Before: Jul  1 12:09:02 2025 GMT
            Not After : Jun 30 12:14:02 2026 GMT
        Subject: CN=E147892B6DFD575255123B3FB716DD177D94EE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:3a:8d:05:0c:1f:b3:b0:4d:8e:73:66:04:
                    23:23:b3:e6:34:79:c0:2a:22:94:ae:72:7b:19:67:
                    02:a2:e4:a6:55:58:1e:b4:61:92:4f:b0:5d:d7:b1:
                    37:3c:39:45:f9:bd:69:43:e4:61:87:31:ff:ab:2f:
                    28:37:bc:df:9e:87:40:5a:da:ea:b7:4d:3a:d3:29:
                    6d:af:16:d6:ea:03:9f:a0:ab:3c:3f:87:7c:87:80:
                    f5:e7:70:ff:b3:02:bc:a0:52:e1:67:ad:e7:67:0a:
                    42:46:37:9b:60:00:23:1a:95:fd:8a:87:ee:e8:ce:
                    4a:4e:30:73:9d:1e:df:98:d1:c8:b5:c6:57:31:83:
                    9e:10:f5:5c:66:d7:ef:f5:62:9a:fc:76:69:67:ec:
                    6c:8c:9c:5c:a5:80:50:39:25:bd:55:75:46:b6:2b:
                    fc:d5:03:eb:b8:f7:74:34:c5:a1:f1:e2:50:fc:dc:
                    95:ec:4d:75:1c:9a:eb:01:5d:bc:43:54:82:55:cd:
                    7e:db:e2:70:dc:82:75:60:03:e4:18:c5:18:6d:41:
                    0f:dc:97:0e:eb:ad:9b:0c:a7:b1:99:1a:54:23:5b:
                    ca:b9:0d:4e:87:84:c5:24:5b:0f:16:4b:32:f8:a7:
                    88:df:f4:69:39:ac:39:ec:92:74:fc:b4:6b:2c:59:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:47:89:2B:6D:FD:57:52:55:12:3B:3F:B7:16:DD:17:7D:94:EE:14
            X509v3 Authority Key Identifier:
                keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b1:cd:f5:33:92:d4:ff:13:51:d6:ff:ad:6c:04:b9:76:f9:
         4a:dd:d3:52:c6:84:f3:dd:fb:32:50:12:35:59:d6:1a:3a:44:
         fd:c2:be:e4:18:c9:fe:1f:46:17:28:04:e5:fa:f5:ec:38:86:
         86:15:e8:ac:e8:79:3d:b5:e9:ba:69:f8:95:ea:75:bb:7c:37:
         a0:e5:4c:43:c8:43:6b:d0:4b:48:f8:80:65:84:64:c2:a3:82:
         27:fe:53:c2:d4:7f:14:8c:8a:f5:a4:5d:2b:3b:7e:35:af:1a:
         c5:d1:f7:a9:cd:32:3b:96:f4:06:0a:6b:56:70:a4:e9:ea:43:
         f2:d2:a1:2e:15:7a:75:30:47:31:5d:dd:14:6b:8d:7a:25:9a:
         b6:c8:32:47:1a:40:de:6e:da:e7:45:40:47:78:a1:9f:22:28:
         89:a2:cf:1a:21:7a:e7:79:0f:34:89:9b:77:cb:f6:62:4e:c1:
         0f:30:e9:e3:9f:92:3b:7d:ee:11:36:e4:9a:3f:41:bb:d3:ac:
         a8:0f:a3:55:96:ae:5a:79:ea:91:60:70:2a:de:ff:3a:20:ce:
         95:d5:ca:19:73:56:3b:9b:f8:ad:10:20:8b:a2:81:82:2a:a5:
         67:1a:6f:46:04:9b:fc:c7:8f:a7:bc:9c:b4:81:ef:2d:0e:eb:
         09:15:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:53:27 2025 by rpki-client