Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa
File:                     3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa (raw, json)
Hash identifier:          aYt7HyWdft1w//h0iz65bSyedw/zVIH+MiQLjWAhPDs=
Subject key identifier:   D5:69:27:4C:DF:46:96:B3:5A:E7:7C:09:08:27:1E:FB:F4:BD:98:56
Certificate issuer:       /CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
Certificate serial:       0D9A9C12ECF5564A5D393A53DA31ECA9D0C5716E
Authority key identifier: D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa
Signing time:             Wed 17 Sep 2025 20:03:04 +0000
ROA not before:           Wed 17 Sep 2025 19:58:04 +0000
ROA not after:            Wed 16 Sep 2026 20:03:04 +0000
asID:                     265983
IP address blocks:        164.163.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl
                          rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9a:9c:12:ec:f5:56:4a:5d:39:3a:53:da:31:ec:a9:d0:c5:71:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
        Validity
            Not Before: Sep 17 19:58:04 2025 GMT
            Not After : Sep 16 20:03:04 2026 GMT
        Subject: CN=D569274CDF4696B35AE77C0908271EFBF4BD9856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:79:d6:42:64:04:1a:f7:9e:ff:3f:71:d0:
                    79:38:62:a5:ec:52:48:6e:a1:e5:4b:4e:b2:72:a4:
                    b2:12:7e:63:58:3c:7a:e0:66:46:a7:d6:87:3a:0e:
                    4a:18:d1:ee:48:07:7d:81:1a:e3:50:36:7a:ab:35:
                    0a:6c:b4:03:3a:44:69:cf:2b:02:d8:d9:73:a2:ae:
                    b4:8e:e8:a1:48:28:fd:ae:43:31:ef:d0:5b:12:77:
                    58:b9:0d:4f:45:88:2a:af:0b:49:02:16:75:8d:65:
                    b4:12:03:fc:b8:e7:6f:f0:ba:22:34:ba:fc:7b:de:
                    1b:d8:dc:d6:d4:2f:fa:c5:56:4d:bc:b6:f7:e7:b0:
                    aa:66:ec:62:d8:6a:a6:ec:26:94:0b:77:fb:47:c9:
                    1f:aa:7e:93:3c:3e:ee:09:f2:f1:89:15:9b:a7:e9:
                    ce:f7:08:1d:d4:3b:fb:e9:42:10:5f:c2:31:be:25:
                    51:30:2a:5f:e4:3b:1d:0e:7c:d9:bb:38:ea:94:19:
                    27:61:86:67:e9:29:05:bd:e5:99:ed:ad:45:32:52:
                    83:70:10:84:d4:02:7a:75:cf:6d:77:da:a7:be:39:
                    22:14:d0:05:8e:81:7a:06:2b:8a:b8:c9:2d:2b:7d:
                    d9:e5:cc:a0:cb:ad:9b:1e:c1:36:75:f3:ef:bd:71:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:69:27:4C:DF:46:96:B3:5A:E7:7C:09:08:27:1E:FB:F4:BD:98:56
            X509v3 Authority Key Identifier:
                keyid:D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:fd:00:5f:87:f3:77:d0:ca:78:f5:9a:92:5a:43:97:b0:
         45:29:ad:85:f6:1a:14:73:e2:95:c0:19:0d:82:19:73:5b:f1:
         ac:ea:85:b1:e9:d4:82:c2:de:6f:a1:a9:a3:ab:91:f8:7c:eb:
         b3:d3:17:19:45:b4:8e:90:ce:f8:c1:68:9f:78:37:e4:0e:19:
         a8:44:c4:69:ed:04:e4:12:f9:12:3f:56:2f:f2:4b:1a:3a:9a:
         62:bd:ed:00:5b:3d:e0:0a:b8:f3:be:b4:b6:f6:8b:97:d7:3d:
         d2:11:28:15:83:88:71:fc:62:81:e0:b1:51:b9:5f:c6:e3:d5:
         3f:9f:48:42:b6:aa:8d:cd:7a:04:a3:6c:c0:98:50:78:93:a5:
         59:44:79:93:13:95:5d:c2:c6:c2:d7:dd:9d:2e:56:f2:f9:74:
         2f:8b:f8:a6:a4:09:f4:fa:92:ab:41:65:c3:6e:47:29:2d:ac:
         93:1f:32:6d:0e:24:40:35:ab:8e:55:9e:25:4d:d2:d2:2b:bd:
         c2:ee:3b:c1:56:69:e2:a7:c4:9e:ad:bf:62:57:af:c5:ac:15:
         4c:75:58:7d:f1:00:27:d0:d9:02:bc:1f:45:cd:23:cc:6c:32:
         da:9a:86:e1:15:57:6d:bd:c8:2c:4e:da:b1:07:4e:32:f5:3f:
         7a:93:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:06:15 2025 by rpki-client