Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32322d3234203d3e20323632393838.roa
File:                     3136382e39302e38302e302f32322d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          Uh/HAFWVOzvMGzhOZYqLkbn6+PIl2M4aKLD4CdbAkyY=
Subject key identifier:   A9:8F:B4:AA:05:3A:43:EB:D2:D3:CF:65:A3:64:7A:99:AC:04:15:61
Certificate issuer:       /CN=8E3C33F2D30541B141B2CD21C0A59216233A08BD
Certificate serial:       5B1A7388CAC1FFA2F2B542D4E503E2595F9E8367
Authority key identifier: 8E:3C:33:F2:D3:05:41:B1:41:B2:CD:21:C0:A5:92:16:23:3A:08:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E3C33F2D30541B141B2CD21C0A59216233A08BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32322d3234203d3e20323632393838.roa
Signing time:             Mon 21 Jul 2025 13:38:49 +0000
ROA not before:           Mon 21 Jul 2025 13:33:49 +0000
ROA not after:            Mon 20 Jul 2026 13:38:49 +0000
asID:                     262988
IP address blocks:        168.90.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/8E3C33F2D30541B141B2CD21C0A59216233A08BD.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/8E3C33F2D30541B141B2CD21C0A59216233A08BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E3C33F2D30541B141B2CD21C0A59216233A08BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1a:73:88:ca:c1:ff:a2:f2:b5:42:d4:e5:03:e2:59:5f:9e:83:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3C33F2D30541B141B2CD21C0A59216233A08BD
        Validity
            Not Before: Jul 21 13:33:49 2025 GMT
            Not After : Jul 20 13:38:49 2026 GMT
        Subject: CN=A98FB4AA053A43EBD2D3CF65A3647A99AC041561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:4b:86:75:bb:ea:e0:77:e2:df:62:3b:bb:
                    21:d0:dc:4c:ea:c0:8e:62:66:70:42:ba:85:85:c2:
                    a0:c0:f3:1a:78:2b:a5:8d:68:08:dc:29:ae:51:00:
                    cd:6e:c3:37:12:10:fc:9b:9b:69:70:4b:8b:8b:1f:
                    f7:c6:29:0f:eb:20:83:c7:e7:96:a2:8e:92:0e:4c:
                    ff:3c:0f:26:3e:99:86:64:66:3f:bf:e5:62:c5:63:
                    d6:01:c9:03:67:c9:c6:87:52:b2:9f:03:4e:29:2a:
                    15:99:33:c6:c4:a5:40:b1:ac:01:ef:72:8c:6e:66:
                    4d:19:80:1d:9c:dc:9d:9b:7d:7e:f0:20:28:f3:44:
                    1a:df:a1:69:00:eb:1d:ab:e9:d4:b9:85:a7:f1:54:
                    0b:89:0f:35:4a:96:79:69:43:48:52:98:68:53:87:
                    48:ef:88:b4:a4:51:4c:67:5d:2f:81:98:28:b9:7e:
                    57:03:ce:36:31:85:dd:8d:95:e9:f9:ed:bc:dd:59:
                    73:c9:1c:a8:0f:7f:06:0b:1b:b8:72:9a:d8:77:5c:
                    c1:23:24:e3:a3:2e:55:76:a5:74:05:0d:38:b5:a0:
                    7f:fb:4f:2f:14:27:a6:eb:5f:fc:68:bd:c5:43:6e:
                    93:f9:6e:70:0c:d8:21:8c:8c:44:8a:a4:f5:4b:c9:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:B4:AA:05:3A:43:EB:D2:D3:CF:65:A3:64:7A:99:AC:04:15:61
            X509v3 Authority Key Identifier:
                keyid:8E:3C:33:F2:D3:05:41:B1:41:B2:CD:21:C0:A5:92:16:23:3A:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/8E3C33F2D30541B141B2CD21C0A59216233A08BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E3C33F2D30541B141B2CD21C0A59216233A08BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32322d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:4f:95:ca:ec:f3:b1:b6:7a:4f:3e:5e:74:cf:1f:a7:1e:
         af:8e:b3:07:ec:b8:d6:14:f5:c3:ce:40:2e:7e:16:b2:68:7d:
         1f:cb:80:98:29:a7:27:1e:73:a5:bf:78:9b:20:4a:c1:51:d0:
         75:2b:35:10:a4:fc:82:28:ee:81:ae:c4:b4:9e:75:d9:d6:d0:
         c3:8a:6b:28:f3:25:ad:8c:12:cd:df:8e:6a:76:d0:f5:48:3e:
         49:2d:b0:0b:f5:c0:88:b0:b3:f1:66:31:38:2a:13:6c:23:b2:
         18:a1:a3:f8:6b:f9:d2:ff:ca:9b:46:e5:95:4e:8e:4b:8c:77:
         d4:02:5b:c1:55:51:19:95:44:3e:8a:7a:c3:c1:58:7b:0b:c4:
         64:96:14:6b:f2:dc:c6:b2:31:a5:81:1c:d3:96:1c:34:a8:67:
         bf:bc:b2:e2:bc:2b:a2:9e:d7:1a:ce:e2:49:e2:74:e7:91:c0:
         fa:ea:97:70:45:a5:ce:92:74:43:72:56:69:6f:d2:ce:29:9a:
         1f:bd:fc:2f:5d:53:20:8f:71:f6:e4:d3:1d:63:b0:b2:23:51:
         4a:1f:98:94:6e:12:7d:9d:20:f4:11:a6:6a:08:1f:06:90:d9:
         b9:23:8b:4b:4f:6b:5d:1b:7b:d9:2b:85:0a:29:e6:f7:49:05:
         1e:0b:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:45:44 2025 by rpki-client