Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3332203d3e20323635343832.roa
File:                     3136382e3139372e3134302e302f32322d3332203d3e20323635343832.roa (raw, json)
Hash identifier:          jWHYs8FStpJqE1qQWI/25nEULlVXewvRJSjcf623U0U=
Subject key identifier:   22:05:FE:62:0C:25:D2:62:13:F9:F2:89:6C:18:C7:28:8D:32:E7:99
Certificate issuer:       /CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9
Certificate serial:       0614D30A48CA6EBDDF844132F9D8F6C37019E466
Authority key identifier: D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3332203d3e20323635343832.roa
Signing time:             Fri 11 Jul 2025 17:42:12 +0000
ROA not before:           Fri 11 Jul 2025 17:37:12 +0000
ROA not after:            Fri 10 Jul 2026 17:42:12 +0000
asID:                     265482
IP address blocks:        168.197.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 21:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:14:d3:0a:48:ca:6e:bd:df:84:41:32:f9:d8:f6:c3:70:19:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9
        Validity
            Not Before: Jul 11 17:37:12 2025 GMT
            Not After : Jul 10 17:42:12 2026 GMT
        Subject: CN=2205FE620C25D26213F9F2896C18C7288D32E799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:71:5a:9f:51:d3:a0:90:cb:a6:a2:84:28:
                    e1:8e:c3:33:fb:2a:11:8b:e8:da:c5:ec:9a:4e:57:
                    86:87:66:5c:96:f8:54:b6:10:22:e5:e1:98:e6:d4:
                    c1:5e:42:c9:e9:15:22:0c:55:bb:f0:f5:74:ab:c8:
                    e9:53:c1:dc:38:26:35:18:36:91:01:59:cc:4d:5c:
                    ff:52:e1:5c:c0:74:88:c3:04:83:e0:ee:09:ae:79:
                    16:95:b9:bd:b3:13:b8:ac:85:b0:74:20:53:9c:8b:
                    41:75:b0:14:57:5d:05:42:70:73:92:4e:5f:a9:2a:
                    43:12:9a:c4:40:84:16:91:7a:a6:82:6f:ae:f4:ee:
                    4d:04:9e:33:e7:27:bf:80:ab:5b:3d:ef:02:d1:cc:
                    cb:6b:d5:06:e2:b6:7f:c1:df:db:4b:99:df:3f:50:
                    0f:60:ab:1e:3b:36:44:ac:6f:cf:9d:f1:c2:6c:29:
                    e8:c1:ed:50:18:0c:94:3f:33:fb:4a:44:83:0d:e9:
                    6d:2d:1e:e5:55:12:21:b1:8f:1b:1e:9a:c1:8d:b5:
                    a4:40:7b:0e:80:fa:87:dc:99:fa:e4:a5:e3:93:f9:
                    af:4c:9a:e9:28:2f:26:eb:41:62:80:8f:bb:1d:39:
                    d4:18:98:a0:53:34:45:4b:fa:17:6b:63:8a:f6:f3:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:FE:62:0C:25:D2:62:13:F9:F2:89:6C:18:C7:28:8D:32:E7:99
            X509v3 Authority Key Identifier:
                keyid:D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3332203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:b7:10:cc:1e:b5:c7:90:4d:e1:68:88:26:36:58:de:bb:
         6f:d6:76:19:62:b8:f0:b0:5b:12:58:6a:e5:e2:59:3c:e1:85:
         9e:d8:05:c8:69:d6:76:fd:4c:40:ce:6f:55:cb:f9:f3:9e:76:
         84:df:4d:c3:54:fb:dc:1f:a3:93:c2:ae:f5:48:e6:f9:a1:f9:
         f3:9f:37:77:ed:2d:7a:95:7c:24:15:1e:69:dc:84:69:76:2c:
         48:2d:58:f4:a3:d8:83:a4:26:bd:10:d9:92:9e:b3:17:92:11:
         8b:fb:d2:2a:1d:6c:8c:e4:a1:30:b9:d4:6b:41:22:1b:3f:9f:
         92:d4:7c:46:4a:a7:1f:17:fa:f0:29:ac:89:13:7d:c1:8e:5d:
         47:1f:90:b2:75:fe:be:37:9a:16:7c:96:33:f2:dd:d1:15:08:
         3b:9f:d8:54:cb:40:08:14:f2:61:57:d5:d4:12:4f:90:74:34:
         86:25:a0:0a:45:06:59:4f:4f:01:20:37:68:01:3f:20:de:4b:
         f9:dd:2f:43:56:63:60:9c:e1:6d:21:e8:99:85:3a:a5:c0:71:
         d4:75:e8:01:91:bf:0e:a4:7f:66:aa:8a:0d:4c:63:37:d2:4a:
         fb:95:87:9f:ac:5d:d8:26:55:be:d7:64:78:42:d5:12:06:0d:
         9e:db:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:44:26 2025 by rpki-client