Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa
File:                     3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa (raw, json)
Hash identifier:          5LbSzGeGRbPkf9EJh+zxU5nFvlk0txLdKn0V9z2T01U=
Subject key identifier:   62:E1:E0:79:C9:1C:D8:9B:4A:07:07:DF:62:FA:CC:03:08:BB:04:84
Certificate issuer:       /CN=FDE3E024B610CB82CCD6BC3247C371E85AED8728
Certificate serial:       3C054CB340D2C3FC8BC14EB9C80B7D7181640B0C
Authority key identifier: FD:E3:E0:24:B6:10:CB:82:CC:D6:BC:32:47:C3:71:E8:5A:ED:87:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDE3E024B610CB82CCD6BC3247C371E85AED8728.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa
Signing time:             Thu 28 Aug 2025 17:54:08 +0000
ROA not before:           Thu 28 Aug 2025 17:49:08 +0000
ROA not after:            Thu 27 Aug 2026 17:54:08 +0000
asID:                     264864
IP address blocks:        168.205.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/FDE3E024B610CB82CCD6BC3247C371E85AED8728.crl
                          rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/FDE3E024B610CB82CCD6BC3247C371E85AED8728.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDE3E024B610CB82CCD6BC3247C371E85AED8728.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:05:4c:b3:40:d2:c3:fc:8b:c1:4e:b9:c8:0b:7d:71:81:64:0b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDE3E024B610CB82CCD6BC3247C371E85AED8728
        Validity
            Not Before: Aug 28 17:49:08 2025 GMT
            Not After : Aug 27 17:54:08 2026 GMT
        Subject: CN=62E1E079C91CD89B4A0707DF62FACC0308BB0484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:6a:b8:2a:7b:37:61:9e:78:60:81:bb:e1:
                    b6:18:fa:8e:2f:d3:6e:57:7b:6f:03:15:65:16:4f:
                    2b:b9:4a:98:5b:7f:f5:29:52:f4:14:70:51:e9:8e:
                    eb:ac:fe:75:26:6d:f1:c6:96:20:fb:b6:1b:a8:36:
                    e3:c5:d7:03:21:00:be:4f:f7:4b:bb:a6:82:fe:a9:
                    cb:ca:13:6f:c5:3a:b2:ec:c3:a8:65:4b:02:e6:78:
                    67:04:da:01:bf:c0:89:78:28:9a:a9:bc:88:77:aa:
                    da:99:fe:a0:3e:74:fb:af:e6:38:14:81:e7:27:9d:
                    ae:69:6e:1f:f0:72:7c:e9:34:ca:78:dd:77:e1:84:
                    b9:e7:96:a2:6b:7f:18:a8:9e:99:cb:c5:83:bb:5f:
                    37:3a:5c:8d:55:04:88:dd:92:04:4b:8b:a1:80:72:
                    8a:da:eb:05:58:44:f6:ba:b4:fb:92:d3:e9:07:08:
                    05:47:67:5e:31:fd:e7:be:14:cb:bf:20:63:c5:43:
                    92:7c:3a:cc:ee:85:29:83:05:28:d9:c2:5d:8d:37:
                    19:6f:53:ca:7f:24:28:26:6c:6b:ad:5c:19:46:32:
                    af:1a:fe:55:19:89:77:9e:a9:2f:51:f8:91:bf:52:
                    3c:ed:e6:25:fc:3f:84:86:da:e7:d3:3b:8b:c2:19:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:E0:79:C9:1C:D8:9B:4A:07:07:DF:62:FA:CC:03:08:BB:04:84
            X509v3 Authority Key Identifier:
                keyid:FD:E3:E0:24:B6:10:CB:82:CC:D6:BC:32:47:C3:71:E8:5A:ED:87:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/FDE3E024B610CB82CCD6BC3247C371E85AED8728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDE3E024B610CB82CCD6BC3247C371E85AED8728.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:55:45:1f:b5:fc:74:0b:d0:4d:3f:72:13:53:25:a1:f2:1c:
         6b:95:59:b8:ee:6a:ba:37:bd:a8:36:a9:33:5a:7f:1e:0c:35:
         0b:e1:e0:91:83:da:37:fd:ac:cc:d6:2a:36:de:79:75:76:ad:
         36:39:a9:19:23:40:c8:ee:4f:52:a4:e3:88:da:b0:f5:be:e0:
         ef:b7:8d:81:be:04:98:22:c2:86:ab:73:7b:72:b8:92:85:1d:
         55:4d:66:bd:44:e7:00:1a:bb:15:22:57:8b:5a:16:b9:57:15:
         7d:fa:5b:04:a6:67:55:0c:85:d1:76:9f:f9:56:ab:07:7b:4f:
         1d:ed:15:d5:16:66:19:7f:84:43:71:5a:ea:bb:ba:90:29:12:
         83:6e:1a:3b:3c:9c:f5:a6:19:a4:c2:c7:30:2d:1b:0c:a2:91:
         74:08:82:13:d3:67:a1:8a:a9:e9:c5:76:13:9c:8e:28:8e:ae:
         fc:d4:12:a0:44:75:9e:80:f6:5d:7b:8e:1f:34:2a:d7:8a:37:
         e4:ce:b6:05:8d:e7:35:44:ae:74:6d:db:41:2e:e7:62:ff:77:
         4e:6e:4c:68:ab:89:0a:21:3a:da:2e:e3:90:4a:24:db:1d:92:
         08:07:36:59:05:a5:11:41:e5:72:b0:04:89:9a:a8:80:aa:4a:
         1b:1d:df:2a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPAVMs0DSw/yLwU65yAt9cYFkCwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRFM0UwMjRCNjEwQ0I4MkNDRDZCQzMyNDdDMzcxRTg1
QUVEODcyODAeFw0yNTA4MjgxNzQ5MDhaFw0yNjA4MjcxNzU0MDhaMDMxMTAvBgNV
BAMTKDYyRTFFMDc5QzkxQ0Q4OUI0QTA3MDdERjYyRkFDQzAzMDhCQjA0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lWq4Kns3YZ54YIG74bYY+o4v
025Xe28DFWUWTyu5Sphbf/UpUvQUcFHpjuus/nUmbfHGliD7thuoNuPF1wMhAL5P
90u7poL+qcvKE2/FOrLsw6hlSwLmeGcE2gG/wIl4KJqpvIh3qtqZ/qA+dPuv5jgU
gecnna5pbh/wcnzpNMp43XfhhLnnlqJrfxionpnLxYO7Xzc6XI1VBIjdkgRLi6GA
cora6wVYRPa6tPuS0+kHCAVHZ14x/ee+FMu/IGPFQ5J8OszuhSmDBSjZwl2NNxlv
U8p/JCgmbGutXBlGMq8a/lUZiXeeqS9R+JG/Ujzt5iX8P4SG2ufTO4vCGS2RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUYuHgeckc2JtKBwffYvrMAwi7BIQwHwYDVR0j
BBgwFoAU/ePgJLYQy4LM1rwyR8Nx6FrthygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDh5TXlXV1Y5bWVWbzZydWlDR1BUYXNBc24xWnh2S0RpaGNSbWhrNzN0
ZnUvMC9GREUzRTAyNEI2MTBDQjgyQ0NENkJDMzI0N0MzNzFFODVBRUQ4NzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZERTNFMDI0QjYxMENCODJD
Q0Q2QkMzMjQ3QzM3MUU4NUFFRDg3MjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4eU15V1dWOW1lVm82cnVpQ0dQVGFzQXNuMVp4dktEaWhjUm1oazczdGZ1LzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzYzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajNqDANBgkqhkiG9w0BAQsFAAOCAQEAflVF
H7X8dAvQTT9yE1MlofIca5VZuO5quje9qDapM1p/Hgw1C+HgkYPaN/2szNYqNt55
dXatNjmpGSNAyO5PUqTjiNqw9b7g77eNgb4EmCLChqtze3K4koUdVU1mvUTnABq7
FSJXi1oWuVcVffpbBKZnVQyF0Xaf+VarB3tPHe0V1RZmGX+EQ3Fa6ru6kCkSg24a
Ozyc9aYZpMLHMC0bDKKRdAiCE9NnoYqp6cV2E5yOKI6u/NQSoER1noD2XXuOHzQq
14o35M62BY3nNUSudG3bQS7nYv93Tm5MaKuJCiE62i7jkEok2x2SCAc2WQWlEUHl
crAEiZqogKpKGx3fKg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:27:16 2025 by rpki-client