Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          iIJMoMcThOuoEnq+Cnbn3zvIxzh5yY8XsoyD7LIgvVk=
Subject key identifier:   0E:C4:EB:11:21:F4:AF:96:B6:07:95:30:87:F5:4F:19:CA:B7:09:39
Certificate issuer:       /CN=16171D3350AE619647CF6C101AB78E2709DD330E
Certificate serial:       33B9CCBEA52B90CA66E71AB2B41771DF2C5F7703
Authority key identifier: 16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa
Signing time:             Tue 12 Aug 2025 15:29:22 +0000
ROA not before:           Tue 12 Aug 2025 15:24:22 +0000
ROA not after:            Tue 11 Aug 2026 15:29:22 +0000
asID:                     265287
IP address blocks:        168.90.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b9:cc:be:a5:2b:90:ca:66:e7:1a:b2:b4:17:71:df:2c:5f:77:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16171D3350AE619647CF6C101AB78E2709DD330E
        Validity
            Not Before: Aug 12 15:24:22 2025 GMT
            Not After : Aug 11 15:29:22 2026 GMT
        Subject: CN=0EC4EB1121F4AF96B607953087F54F19CAB70939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:44:8b:f7:fb:75:16:06:74:9a:ec:fc:20:
                    d3:3d:31:77:94:ce:b7:31:ce:95:70:dd:af:ae:39:
                    e4:3b:ed:62:b0:3b:a3:89:d4:84:e6:f6:46:3f:28:
                    fa:00:0c:33:4d:01:fa:82:7b:ca:79:68:c9:fe:50:
                    63:e5:16:e6:d5:d5:ce:58:ff:ef:83:3f:b4:cf:ec:
                    42:87:81:f8:a5:ed:25:fc:43:2b:7d:ad:88:ec:25:
                    8b:82:b7:fe:55:6b:ba:a7:d3:aa:8f:7c:c3:b0:68:
                    d4:87:ae:38:f4:f3:03:60:26:19:54:cf:13:82:e3:
                    e6:3a:42:f8:26:b4:0e:af:05:b6:97:3b:9f:3a:03:
                    e4:8f:d4:8c:6e:b7:5d:ee:00:21:c2:28:22:7c:82:
                    aa:e1:bd:8a:ca:4f:78:29:65:6e:8e:ce:aa:b1:4e:
                    11:03:36:aa:62:0b:70:7a:86:8c:e7:76:8c:9e:45:
                    f8:f4:85:4d:ee:41:47:58:4d:cd:79:08:8d:bb:7b:
                    47:1b:5e:8d:0f:92:de:00:fc:79:e5:13:c9:1a:09:
                    c3:bf:17:44:65:68:ce:c3:48:1b:cc:8f:58:5a:03:
                    2d:4b:a4:58:90:f0:e1:7f:a0:ae:33:a0:76:e0:5b:
                    c0:73:64:0b:2c:c7:e8:bd:a0:19:f0:ed:8f:ad:57:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:EB:11:21:F4:AF:96:B6:07:95:30:87:F5:4F:19:CA:B7:09:39
            X509v3 Authority Key Identifier:
                keyid:16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:f8:f8:95:30:4c:8e:f0:6b:da:7b:53:9d:bd:b6:62:be:
         a7:20:f3:0e:61:51:5b:3e:71:4a:47:4c:d0:b2:f4:2c:f5:e0:
         19:2e:07:99:f6:be:cc:db:3c:3e:8b:82:ac:2b:36:bd:ff:57:
         46:d4:bf:76:85:65:27:a0:1d:5d:38:2a:09:cc:36:a6:63:71:
         c9:cc:60:17:c2:d4:0d:f7:64:c7:eb:7d:f6:2e:05:1c:6f:33:
         05:c3:2c:4e:f4:0d:5b:f7:37:ed:9d:54:5d:25:83:71:42:19:
         a1:ef:12:a5:0e:ec:87:6a:af:e9:8f:7e:45:e8:c7:36:5e:63:
         d9:dd:7b:ed:ee:14:f0:13:16:cd:92:42:33:3d:0f:83:7e:50:
         a2:a7:dc:66:45:02:35:30:18:3b:c3:c7:74:d8:3b:60:7c:4a:
         3a:e4:68:fa:14:52:b5:a1:70:3c:f1:75:8e:13:dd:4d:34:42:
         92:d8:c9:21:52:e3:f0:e9:3b:3c:61:98:d7:87:6d:c1:0f:f9:
         e0:ac:f4:19:86:cb:80:08:43:43:de:e2:ed:ac:9d:fd:d8:c1:
         4f:04:2f:b4:03:ea:67:d1:05:ac:ed:46:f1:d5:cb:51:87:86:
         23:41:5c:c2:0e:85:a8:b7:da:df:cc:91:c7:c6:50:56:bb:f2:
         35:10:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:26:05 2025 by rpki-client