Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
File:                     3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (raw, json)
Hash identifier:          nDza4jqziVmKHzwQVPEwkj3cfLuvclXjEookf3Nu5wA=
Subject key identifier:   71:33:A3:F1:57:24:B2:82:32:01:D4:50:0B:6D:AE:2C:54:77:61:7D
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       404C51E3A2A436478548C8A4660AC7BE87B7B4EF
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
Signing time:             Mon 15 Sep 2025 14:00:01 +0000
ROA not before:           Mon 15 Sep 2025 13:55:01 +0000
ROA not after:            Mon 14 Sep 2026 14:00:01 +0000
asID:                     265282
IP address blocks:        168.90.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:51:e3:a2:a4:36:47:85:48:c8:a4:66:0a:c7:be:87:b7:b4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Sep 15 13:55:01 2025 GMT
            Not After : Sep 14 14:00:01 2026 GMT
        Subject: CN=7133A3F15724B2823201D4500B6DAE2C5477617D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:13:81:7e:b2:23:f5:76:e6:ca:ce:fc:bc:
                    d6:eb:8c:90:be:51:78:de:ed:05:51:9c:93:ab:f5:
                    03:78:aa:f4:d1:e3:73:6f:12:ac:2a:f0:9e:3e:04:
                    72:26:e7:15:fb:d2:52:d5:51:3f:c3:d3:dd:be:68:
                    8b:0b:c1:25:2b:8c:eb:52:14:77:5c:92:0b:d6:d2:
                    8b:c9:af:54:35:5d:f8:41:37:4a:b4:0d:be:b2:bf:
                    07:80:aa:b7:22:56:96:a4:86:4c:f3:e5:c3:76:b8:
                    2b:16:ed:8a:7f:a6:07:42:3f:6b:d6:e7:34:7b:2e:
                    72:bf:c6:82:29:b6:b7:ad:fc:5e:c4:cf:8b:cc:0e:
                    b1:25:95:4e:2d:dd:55:2c:63:6b:6c:82:07:7e:b0:
                    0a:41:02:64:46:83:78:00:5d:d7:26:8e:54:f4:14:
                    3a:a5:6f:d5:19:18:37:b5:c2:e5:d8:70:f0:94:3c:
                    45:e5:20:aa:c2:e3:d4:7c:d5:8f:71:97:68:98:c3:
                    8c:db:db:83:44:c4:32:32:55:93:b3:a1:57:26:42:
                    f5:9f:fc:1a:b8:15:fe:98:81:ba:e1:1a:fc:57:68:
                    8d:18:f3:1c:5f:9e:32:6c:0f:c1:5a:e1:7e:65:e6:
                    48:ec:d8:3e:66:13:fe:88:19:b2:3a:11:66:7b:c3:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:33:A3:F1:57:24:B2:82:32:01:D4:50:0B:6D:AE:2C:54:77:61:7D
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:10:17:36:03:c9:63:cf:31:79:0f:88:1d:a4:35:3d:fa:
         83:ea:7c:ad:85:1c:52:56:73:35:f6:fd:67:84:c6:34:d2:fe:
         e6:20:04:9e:65:b9:98:b2:5a:df:79:f6:e9:78:07:3a:d2:6b:
         fa:b3:4e:d1:f6:52:64:84:f4:a5:57:98:17:fd:39:00:7f:1c:
         1d:fa:d2:32:f8:7f:11:13:c0:a8:54:e5:0b:97:74:26:ed:75:
         ec:93:bb:07:44:e0:3f:6f:80:15:76:bf:16:ca:dd:e9:cf:95:
         2f:62:c5:42:7f:b5:e0:b1:21:2f:7f:5e:63:38:fa:84:80:29:
         28:fb:1d:7d:20:34:ef:72:40:48:78:77:9e:89:26:e5:57:e1:
         39:58:e0:42:49:2d:d2:d8:d1:3a:0c:87:fd:8d:93:aa:62:06:
         f6:ce:5c:34:72:5a:f6:0f:47:92:e2:ff:1f:00:b8:a2:9a:be:
         82:67:68:db:77:ad:f7:e3:14:b4:ec:79:67:23:b3:cf:9d:6f:
         03:46:8f:19:fa:fc:72:a8:f4:c9:c4:7f:d4:7f:52:81:cf:3b:
         73:bd:88:4c:5f:bd:8f:97:e1:56:f2:0c:ac:17:a7:9d:ec:69:
         28:40:26:d8:db:28:ac:fd:8f:4b:1b:9c:80:75:ad:08:bd:36:
         6e:2d:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:47:58 2025 by rpki-client