Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa
File:                     3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          IrLDPBwNqYH0lDDCms/8VMBkI4vSmDFchMeEj1fvtuE=
Subject key identifier:   B2:1F:01:72:8B:91:1A:0F:62:6E:15:66:63:BD:9D:0E:E4:F2:DF:70
Certificate issuer:       /CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
Certificate serial:       7992E2969D91FC54127081F8074C0B26C8D7D4EC
Authority key identifier: 16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa
Signing time:             Wed 27 Aug 2025 19:41:09 +0000
ROA not before:           Wed 27 Aug 2025 19:36:09 +0000
ROA not after:            Wed 26 Aug 2026 19:41:09 +0000
asID:                     264562
IP address blocks:        168.232.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:92:e2:96:9d:91:fc:54:12:70:81:f8:07:4c:0b:26:c8:d7:d4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Validity
            Not Before: Aug 27 19:36:09 2025 GMT
            Not After : Aug 26 19:41:09 2026 GMT
        Subject: CN=B21F01728B911A0F626E156663BD9D0EE4F2DF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:d0:00:8c:f5:8a:60:06:51:39:bd:7e:43:
                    49:91:66:5d:88:30:22:27:4e:01:dc:0b:30:54:3a:
                    98:a7:a5:88:a7:67:b2:7c:cf:75:28:ca:d3:e5:9b:
                    8f:17:79:40:c2:ef:70:3f:91:38:f2:de:cd:dc:17:
                    10:cd:60:73:9f:3e:fb:4e:6c:b0:aa:1b:3b:90:13:
                    9c:e8:50:a8:19:ec:38:a5:4f:1a:9a:6d:df:18:d8:
                    a7:75:e5:8d:3d:a3:e5:6a:91:bc:4e:99:70:04:98:
                    fc:9b:79:04:e4:f8:60:f9:2b:ee:80:93:35:b8:48:
                    9c:31:19:e7:3a:8b:e9:10:9d:80:9a:fa:6b:1f:c6:
                    52:e6:fd:08:8d:9b:bb:fc:bc:c5:e1:f0:c5:b6:ac:
                    aa:67:f3:9b:c3:2b:96:68:4e:0b:01:84:aa:2d:2f:
                    4d:c7:7a:9d:05:f9:dd:97:4d:5e:1a:c9:c3:63:34:
                    18:c5:57:4f:1b:59:f5:27:13:a7:15:cc:4b:29:1d:
                    f9:14:6d:0f:ba:4f:1e:e3:c9:dc:81:45:d3:3c:79:
                    ba:21:ab:c2:b3:83:2c:9b:c4:46:b8:05:62:d4:c9:
                    ba:cf:0f:5f:9f:e8:8a:19:5e:81:85:0d:ce:63:fe:
                    85:57:42:7d:be:76:ae:2e:65:2b:dd:32:f1:b6:69:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:01:72:8B:91:1A:0F:62:6E:15:66:63:BD:9D:0E:E4:F2:DF:70
            X509v3 Authority Key Identifier:
                keyid:16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:b4:c7:bf:17:c9:5b:ef:47:95:f5:be:d8:29:29:ec:40:
         38:84:61:4a:9a:b6:e0:31:63:9a:b2:12:8b:dc:22:c9:b0:12:
         06:00:91:8c:8f:ec:24:68:ef:c3:97:00:4f:25:51:7f:35:fa:
         8f:0e:ad:86:23:66:d2:47:4f:2f:6c:62:8e:2f:4f:eb:f2:1b:
         ed:b8:57:a9:e6:f1:1c:19:a0:25:a6:ab:16:77:19:8b:94:b6:
         32:95:05:2d:2f:19:27:d2:73:f7:a3:63:19:8f:88:09:60:b5:
         b2:00:02:e6:24:df:36:85:34:c9:f5:93:4f:86:ac:10:dc:ea:
         94:ac:16:03:46:ed:8a:c9:49:34:8d:a8:7f:1b:1f:e4:e9:fa:
         b6:00:44:5c:e1:b8:e4:12:1f:66:3e:92:08:42:81:7d:ce:1c:
         00:20:d0:f0:30:06:19:b9:58:7a:93:1b:1d:76:8d:2c:3b:73:
         88:d1:28:11:fe:b7:fc:88:e6:34:0d:ee:25:82:3d:3d:0d:bb:
         d2:51:c9:30:47:b5:90:b7:c7:36:bd:d7:fa:bd:86:13:4e:02:
         8a:08:2d:84:bb:30:bf:9f:6a:e7:e6:57:b1:d0:75:53:1c:1f:
         4c:88:d1:03:5c:b7:50:97:a1:16:5d:85:92:b0:c4:ba:25:1a:
         d9:58:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:40:47 2025 by rpki-client