Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa
File:                     3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier:          ltOVmVbHjL9WftOVp1t/6m9X0DXQPKDnsnE7/UeIWY0=
Subject key identifier:   0C:C8:9B:33:83:D4:E5:2F:6E:9E:00:1E:A9:6C:31:BE:A2:54:4E:BF
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       21C69F3179B0EF65035297107506DC02B27C8774
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:42:34 +0000
ROA not before:           Thu 21 Aug 2025 17:37:34 +0000
ROA not after:            Thu 20 Aug 2026 17:42:34 +0000
asID:                     265419
IP address blocks:        168.195.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c6:9f:31:79:b0:ef:65:03:52:97:10:75:06:dc:02:b2:7c:87:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:37:34 2025 GMT
            Not After : Aug 20 17:42:34 2026 GMT
        Subject: CN=0CC89B3383D4E52F6E9E001EA96C31BEA2544EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:1f:19:a4:b0:4e:45:f1:1d:76:0b:dc:f5:
                    9a:14:4b:d4:99:64:05:1f:67:4f:76:08:20:76:bc:
                    e6:66:78:fd:14:4b:b7:36:09:ba:86:a7:48:6e:56:
                    dc:01:eb:cf:41:5f:39:c7:39:9f:64:ab:e2:52:f6:
                    6d:7f:6b:a9:1d:94:3e:36:f8:91:e2:2f:3a:59:48:
                    06:ba:3a:1b:6e:cc:07:0d:81:7b:40:d6:fb:3b:20:
                    9f:f1:a1:9e:26:53:c4:a3:28:5e:73:ca:67:73:30:
                    a0:33:d5:9b:b7:01:8b:6b:57:55:6a:6d:6a:96:3d:
                    de:76:f9:62:5d:05:84:cd:a9:cf:21:71:0c:a0:06:
                    4f:d6:2f:70:30:32:d1:41:f4:3e:cf:dc:e2:01:95:
                    b5:ea:16:a2:02:0b:63:43:c2:32:9e:2d:80:b7:5a:
                    f3:23:5f:d0:3d:3d:21:4b:11:24:f3:90:ba:19:9e:
                    9c:7a:e0:0e:ca:7c:54:a0:b8:9b:ca:e8:19:68:99:
                    9b:de:ef:13:42:35:af:6e:0d:8a:02:7f:36:f3:6f:
                    6c:8b:f3:ca:86:56:1f:f1:3c:5b:df:1e:b1:9c:e0:
                    d3:0f:da:03:43:54:da:32:94:cd:8b:c9:50:6e:4e:
                    c9:f6:53:fd:54:10:18:b0:0d:48:1b:2f:65:46:af:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C8:9B:33:83:D4:E5:2F:6E:9E:00:1E:A9:6C:31:BE:A2:54:4E:BF
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:a0:a5:8a:2d:67:ad:70:c1:82:b9:d3:07:69:bb:2a:82:
         b6:02:3e:08:2c:91:c7:92:7c:68:60:3b:24:64:2f:2e:be:b8:
         8d:c1:2a:b1:86:a5:11:01:c1:29:ab:c9:a2:06:ec:b5:55:16:
         e8:f0:ee:e9:41:ad:df:89:9f:82:47:78:76:30:b2:c8:6c:29:
         b8:e2:85:43:f5:42:c0:71:10:f0:f2:82:66:5f:f1:56:25:47:
         75:ae:89:78:99:84:a8:4b:f7:9b:ee:07:ae:27:24:d4:dd:a0:
         07:24:49:b8:d0:9a:20:d4:89:02:d7:61:5b:7c:f0:f1:e3:0c:
         f0:74:e5:93:cf:0b:26:7a:c4:8b:40:74:40:f8:6f:3e:37:3c:
         de:ff:c3:74:98:7c:61:e9:64:67:fd:f1:53:36:fb:d9:7f:01:
         72:23:45:c1:99:dc:b6:6c:b7:95:c5:42:f2:db:f6:40:f5:a6:
         c8:e6:03:a9:80:4e:f3:c7:10:eb:d8:0d:ef:ac:7c:e4:5d:b0:
         9e:62:d0:29:27:cb:08:2f:17:d5:5a:08:c2:4a:df:5b:82:80:
         1e:c9:da:6b:28:7b:79:d1:f5:4c:86:d8:75:55:e6:f5:d0:97:
         a6:87:be:a3:15:8f:cf:57:bb:47:b0:f2:90:82:a4:ca:b9:b5:
         29:ef:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:27 2025 by rpki-client