Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          A9lyN8q5fkZfTw9ZTFN+c7d9mTYoJxc6mCNPKESu4Uo=
Subject key identifier:   C0:BD:73:80:B9:F8:50:98:B1:E2:A0:8F:F2:B2:88:EE:C0:98:32:63
Certificate issuer:       /CN=16171D3350AE619647CF6C101AB78E2709DD330E
Certificate serial:       667ECF95F19CAE20941AA0DB7660F406C5329D56
Authority key identifier: 16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa
Signing time:             Tue 12 Aug 2025 15:29:29 +0000
ROA not before:           Tue 12 Aug 2025 15:24:29 +0000
ROA not after:            Tue 11 Aug 2026 15:29:29 +0000
asID:                     265287
IP address blocks:        168.90.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 09:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7e:cf:95:f1:9c:ae:20:94:1a:a0:db:76:60:f4:06:c5:32:9d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16171D3350AE619647CF6C101AB78E2709DD330E
        Validity
            Not Before: Aug 12 15:24:29 2025 GMT
            Not After : Aug 11 15:29:29 2026 GMT
        Subject: CN=C0BD7380B9F85098B1E2A08FF2B288EEC0983263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:03:e7:88:32:73:c1:a3:7d:d0:b4:bf:04:
                    a7:4f:fa:e7:56:5e:94:3d:5c:31:0e:cf:7f:b7:71:
                    9e:7f:98:ae:a1:be:99:ac:6c:6e:c5:00:f9:c0:6a:
                    02:f8:e6:07:3d:fe:4e:17:ee:2a:da:1e:39:38:1a:
                    59:d1:39:af:14:2a:9c:c9:74:5d:f2:18:2c:b5:a8:
                    34:d4:b1:26:d3:41:76:79:0d:0a:56:8f:02:fb:f7:
                    80:23:99:60:51:5c:e0:92:99:b5:97:31:2a:60:d2:
                    19:44:1d:0c:ed:a7:00:d4:88:b3:b3:ad:07:4d:33:
                    db:be:b6:6c:b0:3b:a5:e7:52:51:25:0f:bd:82:2e:
                    3f:e6:dd:53:39:af:91:2b:58:43:49:b9:30:64:08:
                    2c:ce:1d:2d:94:7a:4e:cd:f4:b3:53:fe:55:a3:0c:
                    bc:63:55:85:9f:8c:43:d0:e6:99:25:fb:f0:31:9b:
                    1a:da:36:8a:19:64:92:93:99:60:cc:2f:23:0a:d2:
                    21:86:92:93:36:da:b8:71:33:65:ec:02:c1:f2:a5:
                    54:07:a4:d4:ab:e6:12:07:f8:e6:f5:05:56:7b:17:
                    23:2b:f3:2b:e8:0b:7d:df:60:3b:62:15:6b:fe:c7:
                    96:01:4a:2a:03:48:90:b8:90:b1:dd:b1:cf:3c:f3:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:73:80:B9:F8:50:98:B1:E2:A0:8F:F2:B2:88:EE:C0:98:32:63
            X509v3 Authority Key Identifier:
                keyid:16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:14:09:47:e8:50:63:26:76:17:5b:e4:97:53:9e:ee:35:21:
         2b:ba:48:a7:d3:14:ce:ee:d5:f3:81:96:01:93:22:5a:aa:1a:
         e0:03:3e:0d:e3:ff:d1:ad:75:46:0e:ff:f0:7d:c0:7b:17:8c:
         6e:ca:c5:bb:e8:be:65:2c:9c:ae:6d:f7:87:0c:94:86:08:fa:
         2e:b9:43:68:17:a2:12:af:68:cf:1c:89:43:6a:f5:59:fa:38:
         0a:6a:b2:b0:f7:93:f7:dc:6d:d6:5d:16:74:03:69:00:b5:eb:
         86:a9:99:6e:62:3f:a6:58:f9:9b:86:0b:01:5f:a1:cc:bd:1b:
         8c:b5:27:b4:87:b1:c3:97:f1:c3:ef:94:f9:34:c3:d3:be:55:
         37:9c:77:d3:06:ec:85:8d:de:75:f0:ff:15:e1:a2:aa:ef:af:
         69:4c:c4:d4:16:90:02:b5:01:02:37:9e:55:bf:ed:90:d7:6c:
         6f:77:16:ec:6e:03:6f:ed:dd:ab:4d:6c:6c:29:9e:58:3d:b4:
         1d:bc:35:d6:9a:f2:ce:42:44:12:76:ec:4c:21:65:1b:b5:6b:
         be:19:ab:86:f0:69:2f:30:8d:99:27:cd:4b:1d:8e:dd:46:b4:
         77:1b:91:e1:05:01:df:8e:19:49:57:0a:f2:ba:15:aa:fa:bc:
         d4:d8:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:34:38 2025 by rpki-client