Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa
File:                     3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          tArXjCnEVAlYif8PWh6rJUwDz/xl0jRz+iNDjjHjYCw=
Subject key identifier:   DB:DB:E5:0F:0B:6A:06:3B:B1:18:34:94:D7:BB:56:AE:72:1C:87:22
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       1AC1875164E5CD77C043F9C08559D4F41C9499FB
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        168.194.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:87:51:64:e5:cd:77:c0:43:f9:c0:85:59:d4:f4:1c:94:99:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=DBDBE50F0B6A063BB1183494D7BB56AE721C8722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:bf:ff:fb:ce:4a:1a:9c:6e:3d:ae:22:e8:
                    b2:0f:e4:71:1e:6f:b4:e4:cd:43:7c:53:d0:f9:83:
                    f7:d0:01:b2:c9:68:1f:35:e4:4e:08:c9:32:72:b8:
                    5b:c4:b0:99:de:8f:8e:e2:03:03:bc:2a:f6:83:ac:
                    16:8e:cb:e1:76:f7:7a:c9:40:f7:cf:cd:27:cc:d3:
                    b5:9f:e3:d9:40:c2:16:8e:f7:fe:f0:a1:77:79:2e:
                    53:71:c4:33:d9:bd:ee:1b:83:64:9a:4b:5d:e8:b1:
                    e2:3c:ca:ce:31:58:b1:b4:a0:31:75:e2:1c:d0:24:
                    8f:f4:f1:80:e6:95:4c:1b:7d:7c:c0:67:f1:84:6d:
                    2e:08:a5:2d:e3:1e:2e:f0:96:69:64:2a:87:07:48:
                    ce:57:a0:a2:65:7e:1e:24:83:a1:dc:a0:e0:18:a2:
                    2e:22:67:3f:fa:06:68:a8:8e:b8:20:2f:24:5c:71:
                    b8:98:33:a3:4a:3a:93:2d:6b:cf:a7:5c:ea:78:29:
                    a3:13:39:2b:5b:87:82:42:0c:df:ca:e6:df:51:17:
                    92:44:e0:83:ef:a7:cf:a3:57:09:a5:bb:3c:c8:61:
                    3b:0e:01:77:00:16:ff:a6:53:4c:fe:1d:03:c6:25:
                    57:0c:72:cc:39:d8:55:97:7c:1c:2f:f7:a4:81:aa:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:E5:0F:0B:6A:06:3B:B1:18:34:94:D7:BB:56:AE:72:1C:87:22
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3139342e3132302e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:a0:e0:49:c7:54:cb:c1:2a:e1:85:2d:25:71:41:93:34:
         d8:a2:39:c1:ad:24:b8:d1:83:f4:ab:7c:10:f3:2d:0e:5f:09:
         f2:c9:d7:77:bc:17:7d:70:5d:7a:88:85:0d:2c:7f:c8:49:5d:
         24:bd:fc:0b:ed:f4:62:e6:62:9f:32:08:fd:2d:e5:86:fd:64:
         f9:6f:76:99:e0:3e:52:d2:92:d4:b0:a0:1b:b2:ec:ee:08:5c:
         f1:f3:f9:04:b6:0b:98:d0:f8:c9:55:f7:60:4a:2f:5d:58:c1:
         45:8f:7e:42:05:b7:f6:15:22:64:ed:c9:77:6f:14:5a:ca:c5:
         28:0d:6a:bb:55:c8:f4:73:ca:ad:a4:b5:ba:0a:6c:86:f3:b8:
         b2:4a:ee:f0:78:e5:83:0a:1a:f9:c7:5c:69:e0:4f:91:ff:38:
         16:d2:3e:e6:13:a1:d1:13:27:ee:d3:73:89:fb:69:0a:87:f5:
         18:4c:5f:a2:12:9a:38:84:d3:36:a2:1c:0a:0a:2d:d7:16:17:
         2e:0c:1a:e0:e0:fd:a1:06:5f:bc:0f:dd:85:ef:c6:2d:60:77:
         8c:b1:1c:a1:f7:c6:00:b8:01:d8:c7:6a:fd:5a:a6:86:44:59:
         8c:ad:97:ea:28:53:19:62:d1:55:34:42:51:60:fa:f2:a8:bc:
         8e:49:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:48:50 2025 by rpki-client