Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
File:                     3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier:          WTsDqVaAS+YPzJlShjzkCBau2cfAazyBMWpjBXdvWb8=
Subject key identifier:   C6:28:73:1F:98:98:1E:DB:3D:E6:9F:1D:64:8F:E4:E2:B3:BE:49:4A
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       3012C07EECCF8969C8AAE5BCF70C1A7AE3EC196B
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:42:23 +0000
ROA not before:           Thu 21 Aug 2025 17:37:23 +0000
ROA not after:            Thu 20 Aug 2026 17:42:23 +0000
asID:                     265419
IP address blocks:        168.195.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:c0:7e:ec:cf:89:69:c8:aa:e5:bc:f7:0c:1a:7a:e3:ec:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:37:23 2025 GMT
            Not After : Aug 20 17:42:23 2026 GMT
        Subject: CN=C628731F98981EDB3DE69F1D648FE4E2B3BE494A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:22:10:57:92:94:38:8c:a0:1b:95:ed:f8:
                    c6:54:c4:eb:fa:7d:45:ca:75:3b:77:7a:c9:8f:67:
                    d3:bb:01:72:ff:9b:d2:ce:0c:fc:d5:44:62:ed:cc:
                    0c:7a:67:bb:c6:6d:83:7a:19:ce:b8:76:a4:5d:e9:
                    07:49:9a:29:d4:80:2a:22:11:66:9c:e4:cb:1d:90:
                    5d:c1:d9:f4:40:44:3f:e7:a4:f5:7d:60:b8:31:17:
                    45:18:99:09:98:a7:11:4b:c8:be:c9:cb:25:0b:00:
                    76:46:90:4e:80:6c:56:10:7f:7f:41:28:2e:03:63:
                    83:aa:cc:4a:e7:7d:df:d4:eb:82:6e:9f:88:58:4c:
                    07:68:fe:22:bc:4f:4d:c3:ef:4e:d2:f5:72:53:0f:
                    9c:9c:29:d2:2b:59:f3:9b:6c:a1:c3:b0:d0:44:ed:
                    c0:8e:86:5c:a7:63:c7:f6:76:00:6e:b2:9e:95:f9:
                    5a:b1:3e:b6:59:ee:6e:cc:3f:6c:2e:ec:c9:e4:59:
                    a9:8d:46:2c:46:69:55:f4:fa:84:28:b3:63:f6:39:
                    50:a8:4a:d5:67:9b:65:64:c3:eb:b3:52:31:4f:5a:
                    0b:d3:ae:ae:25:9c:a6:26:09:39:40:71:08:60:d3:
                    6e:af:c3:16:7f:24:6d:7a:98:70:61:76:50:cb:bb:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:73:1F:98:98:1E:DB:3D:E6:9F:1D:64:8F:E4:E2:B3:BE:49:4A
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:cb:6e:4b:f5:b1:55:e8:ea:32:8b:b4:b5:35:03:17:5c:
         2d:b3:98:ff:a6:40:da:c5:08:7d:15:9c:87:78:53:22:35:ae:
         84:be:93:e9:e3:93:8f:03:d7:02:63:04:79:7d:7b:77:0d:fb:
         0c:15:57:c3:9d:a7:3a:9f:88:c5:23:3e:7b:7e:c0:f9:d4:bc:
         21:5e:f4:b7:02:2f:53:44:65:f7:67:56:9f:74:ba:28:09:8d:
         10:23:c5:97:ed:b5:05:4e:95:dc:86:94:e8:aa:c8:83:70:7a:
         05:d3:1c:e0:69:3a:cd:73:82:b3:4d:e5:48:9d:41:ad:52:57:
         6e:21:4a:07:76:89:79:ef:41:87:49:dd:5d:87:36:10:51:78:
         bf:27:16:bc:2d:fe:89:f3:d5:bb:08:c0:65:55:59:3c:bc:f0:
         18:93:66:06:db:b2:ff:e7:1c:9c:36:d2:fb:e8:dd:24:fd:0c:
         c9:c7:ef:69:df:28:2a:96:79:c4:c8:73:84:b8:38:32:ec:c6:
         1f:23:01:98:c5:22:b2:06:8b:a4:32:b8:b4:f7:a6:63:60:73:
         aa:2f:c3:e9:5f:2c:2f:b1:41:85:b0:7c:10:ac:c5:ad:ec:61:
         cf:78:37:78:8a:44:47:69:01:ad:58:ce:7a:2b:2c:8b:a7:20:
         2d:8b:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:16 2025 by rpki-client