Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3138392e302f32342d3234203d3e20323635323830.roa
File:                     3136382e39302e3138392e302f32342d3234203d3e20323635323830.roa (raw, json)
Hash identifier:          XykEqyL+IlCvCxajKeoQi41FPQfxi9ZjRynbe22Az/A=
Subject key identifier:   56:61:7C:03:A6:3F:B4:C6:34:7D:6E:14:DB:1B:2D:08:D8:80:64:83
Certificate issuer:       /CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5
Certificate serial:       55E36A59405B71A94ABC0EAB042D0E013D46C3B6
Authority key identifier: DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3138392e302f32342d3234203d3e20323635323830.roa
Signing time:             Fri 31 Oct 2025 17:39:50 +0000
ROA not before:           Fri 31 Oct 2025 17:34:50 +0000
ROA not after:            Fri 30 Oct 2026 17:39:50 +0000
asID:                     265280
IP address blocks:        168.90.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.crl
                          rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e3:6a:59:40:5b:71:a9:4a:bc:0e:ab:04:2d:0e:01:3d:46:c3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5
        Validity
            Not Before: Oct 31 17:34:50 2025 GMT
            Not After : Oct 30 17:39:50 2026 GMT
        Subject: CN=56617C03A63FB4C6347D6E14DB1B2D08D8806483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:d3:25:ee:29:e2:b8:58:d0:71:fc:ab:a0:
                    69:7e:c3:37:1d:5b:8c:16:5d:b8:43:0e:02:ac:aa:
                    66:e3:fb:e3:b6:5a:19:5a:c1:6a:1c:f5:56:33:45:
                    74:6d:3b:77:a4:86:f3:e0:d7:51:19:80:c4:aa:31:
                    56:90:9f:54:23:13:55:c9:d0:04:b2:44:54:74:b1:
                    a1:c1:07:ae:9e:9a:97:7c:a6:86:7b:8a:ff:a0:fb:
                    9d:5b:de:4c:7b:f9:f5:0e:75:1c:4d:fe:0d:ae:21:
                    50:74:7a:60:90:70:c9:3d:dd:4c:89:1e:45:4c:92:
                    75:5d:24:30:56:aa:e5:b7:51:99:df:03:73:41:d1:
                    25:f1:2a:d9:86:3c:37:d0:fb:cb:68:5f:4a:46:aa:
                    5c:0c:02:63:15:3a:8a:12:7f:9d:50:20:02:db:2f:
                    67:1a:d8:c4:67:2e:42:a7:bc:ad:b8:f6:23:c3:76:
                    d0:4c:a8:c5:e9:46:d0:32:c1:bd:d6:48:f3:33:b0:
                    8d:59:11:6c:57:78:1b:8f:7d:92:58:2f:11:4f:5d:
                    10:ca:11:88:5a:a0:f4:d5:96:68:40:ef:1a:54:ea:
                    87:40:ad:f9:c6:15:f4:48:b6:5d:e0:f6:6c:44:df:
                    57:33:40:e7:b8:84:cf:e7:d3:d5:2c:46:1a:c8:27:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:7C:03:A6:3F:B4:C6:34:7D:6E:14:DB:1B:2D:08:D8:80:64:83
            X509v3 Authority Key Identifier:
                keyid:DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3138392e302f32342d3234203d3e20323635323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:54:f3:12:91:f0:bd:7b:6e:69:51:2b:c9:16:d8:43:77:
         1a:a4:79:b5:5c:af:32:cc:e7:03:40:81:ff:21:1b:95:c6:25:
         9b:42:71:87:c8:48:5b:bd:1f:90:28:c2:21:7c:d1:ef:6e:ba:
         7b:52:6c:8c:9f:6e:c7:fa:aa:5d:49:e4:d6:d0:45:82:35:46:
         9d:87:db:c6:31:76:e9:e3:65:11:30:60:b1:83:f5:bb:59:64:
         8b:3c:2a:be:27:8e:5d:a3:5f:e7:22:fd:04:76:ce:50:0e:36:
         1c:8e:33:a4:17:46:12:9c:63:4c:d4:fb:0c:d5:07:de:38:3d:
         fb:72:95:64:cf:a0:45:99:87:63:d6:4f:81:29:a5:a7:0f:47:
         86:2f:5d:93:6e:33:d9:a0:63:1a:91:21:b6:3e:0f:35:ff:e9:
         b1:d4:62:b3:f5:1d:ae:4e:d6:ac:49:0e:38:28:0c:c9:33:a0:
         58:e2:c5:80:30:4c:12:5a:7c:54:62:09:f6:82:d3:a5:a8:62:
         6e:69:66:f0:ce:60:7d:a7:d6:2d:19:db:3e:06:df:4e:28:21:
         7f:9e:68:38:e9:b8:61:d5:60:88:fc:7e:b9:67:2b:ac:84:e0:
         eb:21:35:dd:87:c7:4d:b7:b4:7c:41:9d:3d:5e:4b:50:2a:a0:
         eb:a6:60:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVeNqWUBbcalKvA6rBC0OAT1Gw7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0NzUzNkFBQjgxNzlGODkzNEY1RDdCMTNGRjlGNkIy
RUU0RjFDNTAeFw0yNTEwMzExNzM0NTBaFw0yNjEwMzAxNzM5NTBaMDMxMTAvBgNV
BAMTKDU2NjE3QzAzQTYzRkI0QzYzNDdENkUxNERCMUIyRDA4RDg4MDY0ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRtMl7iniuFjQcfyroGl+wzcd
W4wWXbhDDgKsqmbj++O2WhlawWoc9VYzRXRtO3ekhvPg11EZgMSqMVaQn1QjE1XJ
0ASyRFR0saHBB66empd8poZ7iv+g+51b3kx7+fUOdRxN/g2uIVB0emCQcMk93UyJ
HkVMknVdJDBWquW3UZnfA3NB0SXxKtmGPDfQ+8toX0pGqlwMAmMVOooSf51QIALb
L2ca2MRnLkKnvK249iPDdtBMqMXpRtAywb3WSPMzsI1ZEWxXeBuPfZJYLxFPXRDK
EYhaoPTVlmhA7xpU6odArfnGFfRItl3g9mxE31czQOe4hM/n09UsRhrIJ0BvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVmF8A6Y/tMY0fW4U2xstCNiAZIMwHwYDVR0j
BBgwFoAU30dTaquBefiTT117E/+fay7k8cUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZoQmJBRVc4RHBwV3A4RlJtemhIUkc2TW9RWnJOZ2NabUNRWm5DTmR6
V1kvMC9ERjQ3NTM2QUFCODE3OUY4OTM0RjVEN0IxM0ZGOUY2QjJFRTRGMUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNDc1MzZBQUI4MTc5Rjg5
MzRGNUQ3QjEzRkY5RjZCMkVFNEYxQzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2aEJiQUVXOERwcFdwOEZSbXpoSFJHNk1vUVpyTmdjWm1DUVpuQ05keldZLzAv
MzEzNjM4MmUzOTMwMmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWr0wDQYJKoZIhvcNAQELBQADggEBAH2rVPMS
kfC9e25pUSvJFthDdxqkebVcrzLM5wNAgf8hG5XGJZtCcYfISFu9H5AowiF80e9u
untSbIyfbsf6ql1J5NbQRYI1Rp2H28YxdunjZREwYLGD9btZZIs8Kr4njl2jX+ci
/QR2zlAONhyOM6QXRhKcY0zU+wzVB944PftylWTPoEWZh2PWT4EppacPR4YvXZNu
M9mgYxqRIbY+DzX/6bHUYrP1Ha5O1qxJDjgoDMkzoFjixYAwTBJafFRiCfaC06Wo
Ym5pZvDOYH2n1i0Z2z4G304oIX+eaDjpuGHVYIj8frlnK6yE4OshNd2Hx023tHxB
nT1eS1AqoOumYBY=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:26:43 2025 by rpki-client