Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa
File:                     3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa (raw, json)
Hash identifier:          YMwIMkskKlfxzTyWgJAACXw8ShGhl8BBhHbExxVST6E=
Subject key identifier:   6D:73:7A:0B:CB:53:08:D5:D4:3A:05:F2:78:41:99:EB:3D:09:37:52
Certificate issuer:       /CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
Certificate serial:       51030D35E606B358EBF34500BD32FA64D6838723
Authority key identifier: A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa
Signing time:             Sun 13 Jul 2025 00:16:44 +0000
ROA not before:           Sun 13 Jul 2025 00:11:44 +0000
ROA not after:            Sun 12 Jul 2026 00:16:44 +0000
asID:                     265363
IP address blocks:        168.205.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl
                          rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 00:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:03:0d:35:e6:06:b3:58:eb:f3:45:00:bd:32:fa:64:d6:83:87:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
        Validity
            Not Before: Jul 13 00:11:44 2025 GMT
            Not After : Jul 12 00:16:44 2026 GMT
        Subject: CN=6D737A0BCB5308D5D43A05F2784199EB3D093752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:3f:21:fd:e7:75:fd:4b:5a:e7:f7:81:6d:
                    f7:8e:b0:7d:52:2c:42:f6:d9:b6:74:01:f1:7b:82:
                    5f:fa:2c:b2:d2:94:e3:09:19:e3:0c:de:b5:f3:26:
                    af:d8:53:2b:8d:7f:78:09:19:db:34:bd:45:fc:23:
                    5f:ac:80:f9:e5:a0:fe:57:b0:4d:f5:8a:1c:97:d6:
                    e0:2d:bc:5b:e7:be:5e:b7:12:eb:7f:fc:25:32:73:
                    ff:2e:5e:4a:31:1d:56:24:05:44:7d:cf:43:73:5d:
                    8d:e8:74:4e:23:25:c9:8d:36:30:3c:02:20:7c:e7:
                    f2:27:07:12:8d:f3:5b:68:12:8d:8c:bc:0d:f0:ec:
                    3d:2b:2e:2b:69:13:e0:35:d4:dd:7b:55:6c:4b:be:
                    9a:f3:c6:fe:ea:5e:f5:3e:dc:5b:01:c5:bf:87:3d:
                    ed:4d:af:2f:6c:7f:89:1d:eb:7c:46:9d:43:84:b6:
                    b5:12:a6:92:97:03:87:8c:d5:a5:a9:29:23:4e:a2:
                    0e:b6:96:40:01:52:52:27:54:1f:a2:06:03:6d:71:
                    90:1f:e3:d2:32:2c:cc:36:82:e2:52:59:04:ea:7a:
                    90:45:9b:6d:2a:77:ed:d5:0e:f8:cf:fc:1c:eb:94:
                    3d:2e:77:f7:fd:25:69:38:9b:e1:23:15:2a:c5:5b:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:73:7A:0B:CB:53:08:D5:D4:3A:05:F2:78:41:99:EB:3D:09:37:52
            X509v3 Authority Key Identifier:
                keyid:A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:5d:c8:23:69:98:32:d2:36:6b:7b:d4:0b:d7:50:bf:f0:
         b6:73:66:65:c9:6e:6b:f7:c7:30:0e:21:74:ed:45:1f:c0:27:
         c2:c8:fe:9b:15:33:21:44:31:a5:db:18:b1:44:44:0e:6a:e8:
         5e:eb:e5:41:a2:ae:31:bc:cf:d9:cf:c4:89:4d:4a:d0:1b:32:
         a5:36:6f:8d:f8:9e:45:14:59:b8:bc:a8:d0:f5:06:f8:72:5c:
         06:56:77:b1:c6:bf:41:4e:af:08:9a:84:d0:b1:40:64:25:1c:
         ee:d3:ec:e3:34:42:f6:bf:b9:c0:42:94:33:a0:16:5f:f4:fb:
         8b:d4:3a:54:d5:ee:29:13:2a:8f:aa:38:1f:90:f2:81:2b:43:
         b7:f3:de:b5:b9:54:ee:44:e2:db:28:df:a4:49:23:ee:38:aa:
         e5:fb:ea:6d:54:8e:e9:e3:25:37:8a:bb:7a:57:cd:75:c3:43:
         70:7c:80:ef:a9:a0:d6:e3:61:ed:36:2e:ab:75:ae:6c:22:b8:
         76:fc:1e:9e:be:cb:bb:8e:1f:ac:79:ba:7f:be:e0:5e:ef:bc:
         c5:ce:19:35:45:23:56:8a:08:d6:d3:11:30:f6:0a:83:87:21:
         fa:b3:21:b0:41:a5:36:10:f5:da:1a:75:72:b4:70:c8:d9:76:
         0c:6b:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:09 2025 by rpki-client