Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20323632393832.roa
File:                     3136382e3139352e3234302e302f32322d3332203d3e20323632393832.roa (raw, json)
Hash identifier:          OpfoBAmMCq0J6dlAFwm/I7a4Z8uhhJGHB8N8n5/OaRM=
Subject key identifier:   AE:DE:35:29:0F:BB:D0:AE:A2:DA:7F:C3:99:EC:EB:9A:AB:33:67:EF
Certificate issuer:       /CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
Certificate serial:       248BE116DA0BD861064ACA981F11B77E53E53C78
Authority key identifier: E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20323632393832.roa
Signing time:             Wed 27 Aug 2025 15:15:55 +0000
ROA not before:           Wed 27 Aug 2025 15:10:55 +0000
ROA not after:            Wed 26 Aug 2026 15:15:55 +0000
asID:                     262982
IP address blocks:        168.195.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl
                          rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8b:e1:16:da:0b:d8:61:06:4a:ca:98:1f:11:b7:7e:53:e5:3c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
        Validity
            Not Before: Aug 27 15:10:55 2025 GMT
            Not After : Aug 26 15:15:55 2026 GMT
        Subject: CN=AEDE35290FBBD0AEA2DA7FC399ECEB9AAB3367EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:03:d4:6a:e4:76:35:20:e8:f7:10:46:f5:
                    a5:17:36:a6:52:67:2f:96:f3:c2:2a:d7:3d:3d:22:
                    38:56:b8:d4:e7:52:03:4d:95:36:97:8f:74:3f:02:
                    5f:02:e6:70:b8:60:93:83:7d:82:df:26:e5:01:b6:
                    d4:d5:b7:c8:e7:9f:62:d3:45:be:b0:ee:c5:cf:94:
                    c8:45:e3:a6:b8:f4:a0:05:30:e4:c0:0e:e1:dd:67:
                    25:5d:40:19:55:d8:5a:fa:f7:55:e2:83:04:6e:f6:
                    7b:4f:61:f0:f0:76:e1:05:b8:d8:c5:6a:48:3f:cf:
                    64:8d:3b:53:86:03:8d:c1:af:c9:86:ec:32:fd:63:
                    e5:43:af:ef:0e:7e:a6:61:3e:74:6c:03:14:07:9e:
                    0e:84:e9:fb:1c:8f:97:bc:52:ad:12:64:8e:2d:06:
                    63:52:9f:83:ce:3e:27:0d:d2:b3:d7:39:cd:15:d9:
                    f7:2d:b3:7a:4b:57:98:d7:76:4d:00:28:b6:d8:ac:
                    ef:d7:d8:d3:73:b4:e1:61:f5:3e:cc:9b:3d:2f:27:
                    3d:e9:4c:30:67:7c:b0:e0:7a:5b:85:a8:a7:40:bc:
                    91:02:ca:fe:1e:c9:59:ac:99:0c:fe:42:bd:05:13:
                    87:98:25:a3:0e:b0:96:33:9d:f4:01:8f:50:99:ff:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:35:29:0F:BB:D0:AE:A2:DA:7F:C3:99:EC:EB:9A:AB:33:67:EF
            X509v3 Authority Key Identifier:
                keyid:E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20323632393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:af:a2:6c:98:4d:41:e7:9d:e4:81:0b:75:18:21:10:81:
         b3:bd:1d:55:b5:84:68:cc:e0:eb:e0:86:93:ba:2c:e5:20:75:
         e8:29:5d:e4:bc:d5:42:d8:aa:e5:0a:1d:33:d4:a5:3c:7b:de:
         fa:86:fc:f3:97:59:99:3a:04:29:c6:50:2b:94:18:89:3d:ad:
         09:92:be:24:cf:7d:6c:11:f3:0b:ac:7b:52:f3:92:24:35:93:
         d3:62:a3:02:8d:f4:48:ff:81:13:4d:a0:c6:b7:10:50:01:fd:
         cc:02:93:0c:3c:f8:f3:a9:c4:4a:26:63:e8:8a:47:d9:1b:60:
         a5:13:cb:78:33:cd:e7:8f:c3:76:a8:73:90:67:1e:67:bd:85:
         00:5e:03:89:78:7e:50:1d:89:18:2a:e0:7e:be:09:32:7a:98:
         70:f8:65:c4:75:55:37:48:67:ad:45:b1:a7:be:2c:cc:c3:59:
         95:d8:97:3c:7e:d7:c7:b1:88:36:cd:91:2f:17:54:89:a0:b0:
         b7:f0:f0:0e:78:01:d0:43:57:4f:24:61:e4:9b:b9:da:f3:c9:
         6a:4d:e1:82:e1:19:76:7e:2f:13:b2:36:c4:03:5b:0c:46:f0:
         52:37:d9:50:c2:2b:6f:16:93:36:a2:74:41:3a:dd:92:86:71:
         a9:ec:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:40:16 2025 by rpki-client