Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa
File:                     3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa (raw, json)
Hash identifier:          WPQhACR9II7fFzwEctmqNMOWxb3w3dwSYjpMGsBdSaw=
Subject key identifier:   50:3E:E5:16:30:55:C0:34:FF:F1:BF:68:2C:C4:BB:66:85:8A:2B:10
Certificate issuer:       /CN=AD2E0D7D520E8493681B563F6D06D97221F301B2
Certificate serial:       33E9D66B4C196FA40B98A8069D8A2262A0D0FBC2
Authority key identifier: AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa
Signing time:             Tue 08 Jul 2025 17:54:34 +0000
ROA not before:           Tue 08 Jul 2025 17:49:34 +0000
ROA not after:            Tue 07 Jul 2026 17:54:34 +0000
asID:                     265285
IP address blocks:        168.90.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl
                          rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 05:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e9:d6:6b:4c:19:6f:a4:0b:98:a8:06:9d:8a:22:62:a0:d0:fb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2E0D7D520E8493681B563F6D06D97221F301B2
        Validity
            Not Before: Jul  8 17:49:34 2025 GMT
            Not After : Jul  7 17:54:34 2026 GMT
        Subject: CN=503EE5163055C034FFF1BF682CC4BB66858A2B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:d8:76:a5:b4:6d:aa:cc:c8:1a:ab:15:e3:
                    d1:df:1d:91:75:67:8f:8a:7a:62:3d:c8:41:b6:0c:
                    b4:2b:1b:8d:76:97:b1:79:2e:a8:aa:18:b4:ab:cb:
                    0c:01:b1:3d:14:7f:ad:e1:26:78:85:a1:5b:96:85:
                    c6:58:0c:a0:2d:49:69:26:f1:5b:4f:41:54:62:1e:
                    81:cf:6c:dc:07:cd:ff:b5:0c:f6:53:30:5f:f6:e9:
                    7f:b5:bf:62:35:35:30:30:a8:1b:e2:fb:8d:b2:31:
                    e1:c5:5a:0a:ce:6a:7d:3e:21:77:ff:01:9c:46:19:
                    85:9c:98:57:be:b0:6e:f3:df:48:b1:9e:62:59:4b:
                    b4:37:4c:4c:2d:00:c6:29:04:98:1d:91:59:15:04:
                    ff:14:d8:52:3a:5b:75:55:76:3c:43:6d:32:c1:41:
                    f5:d4:9b:16:12:cb:68:d8:27:dc:ca:dc:69:65:b2:
                    c8:53:65:9f:72:ab:e6:5f:a2:63:bf:47:33:22:bd:
                    07:aa:fe:8e:cd:68:43:9b:01:40:b9:d4:bd:ea:bd:
                    10:f0:91:1a:d5:a3:93:15:00:25:32:7d:5b:d3:a4:
                    32:ea:7a:92:2c:82:72:7f:bd:b4:d1:6f:0a:7c:0d:
                    59:c2:6d:03:50:4a:74:7a:b6:5f:e9:49:c1:87:35:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3E:E5:16:30:55:C0:34:FF:F1:BF:68:2C:C4:BB:66:85:8A:2B:10
            X509v3 Authority Key Identifier:
                keyid:AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:02:75:7c:58:18:54:f2:ea:0a:ad:6b:a0:8d:a5:77:25:e8:
         bf:a6:57:03:a8:ac:2f:08:b6:b2:68:f8:55:f5:66:34:0b:e7:
         15:b2:ee:3a:74:b6:1b:be:58:4a:46:b3:9d:81:02:0d:53:bc:
         e4:61:54:f6:4a:30:f7:45:ce:63:34:d0:51:09:f3:7f:e1:ec:
         27:9b:60:64:b9:2c:67:12:30:b3:de:14:eb:78:b3:b1:d0:d3:
         ce:83:23:51:aa:63:d1:c7:c6:7d:75:d7:84:65:83:5f:f6:1a:
         d8:52:21:67:33:10:7a:f0:2d:07:82:ca:5b:0c:a9:25:fa:50:
         2e:2b:d1:0b:1e:09:7b:04:64:26:88:7c:eb:94:73:e6:a6:13:
         6c:d0:26:de:42:56:fa:bf:a3:5f:0f:38:23:e8:96:22:f5:45:
         e3:e1:5c:7e:52:45:c7:6d:31:a0:62:99:7c:26:23:91:f5:67:
         76:81:8e:11:29:5b:c0:3a:83:b1:92:b1:64:e3:27:50:0a:3c:
         92:43:63:3f:7e:d9:31:d2:e8:34:df:49:86:be:6d:3d:0b:d5:
         75:0d:fa:74:70:e2:62:e3:bc:ff:b0:85:06:8e:ed:a2:83:89:
         7b:27:e7:58:49:4d:a3:63:e4:e8:cc:97:05:28:e7:7e:f5:4e:
         f7:79:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:14:35 2025 by rpki-client