Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
File:                     3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          qaeujse6To+86JDG7B/12+3bdsglfjBgWEE3JqNPSOo=
Subject key identifier:   38:0B:C7:CC:A0:B8:45:D1:A4:15:1D:0C:F1:73:88:00:18:D6:B1:A4
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       4D6D2794C6A9A23F076F08C283994D3CB53407C3
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:22 +0000
ROA not before:           Tue 19 Aug 2025 20:01:22 +0000
ROA not after:            Tue 18 Aug 2026 20:06:22 +0000
asID:                     262503
IP address blocks:        167.249.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6d:27:94:c6:a9:a2:3f:07:6f:08:c2:83:99:4d:3c:b5:34:07:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:22 2025 GMT
            Not After : Aug 18 20:06:22 2026 GMT
        Subject: CN=380BC7CCA0B845D1A4151D0CF173880018D6B1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:01:d3:a4:0b:e4:88:bb:10:64:cb:d9:ff:
                    f4:c8:e6:b0:54:2d:5a:aa:92:80:a8:74:4f:3b:d3:
                    75:7a:d0:d0:49:99:5f:f9:a5:22:18:3d:8b:0e:8e:
                    dc:b8:a6:f3:45:cf:7e:d2:e8:90:e4:fb:a8:50:b2:
                    08:d9:c1:a8:fa:89:09:66:7d:96:7f:b8:fb:4e:47:
                    aa:3a:7e:4e:04:ae:79:83:5c:35:6c:d1:8b:02:f1:
                    01:c8:63:77:7f:91:39:fb:2a:2f:c6:12:fd:8f:77:
                    ae:4f:a9:bc:d1:81:d9:b5:19:c9:de:ae:5e:b0:8a:
                    ae:8a:95:ca:b0:10:c9:21:ba:b0:49:5f:7f:6e:20:
                    13:f3:dc:30:ed:3f:e6:58:28:4c:51:59:7e:fb:82:
                    fd:87:a0:a6:0b:ab:bf:d9:2d:58:f3:44:b4:4d:a5:
                    68:01:95:90:36:f3:e8:d1:86:38:14:d3:bb:6d:fa:
                    02:ae:00:8c:ea:57:ae:df:a0:4d:f2:75:10:de:65:
                    29:03:6f:01:eb:10:2c:68:7b:68:a7:43:43:56:b0:
                    37:d2:72:6b:86:95:8c:f3:8b:1e:53:0f:28:2d:f8:
                    8e:a2:1a:2f:59:76:c2:1d:97:5f:44:ba:93:5b:a3:
                    a9:1f:ab:1b:8b:8a:12:f1:93:c2:77:83:44:7c:9f:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:C7:CC:A0:B8:45:D1:A4:15:1D:0C:F1:73:88:00:18:D6:B1:A4
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:68:79:b5:a5:5e:32:50:21:cc:bb:0f:15:ea:f3:7d:f0:46:
         aa:e7:0b:15:bf:89:f9:1b:4a:d7:a1:10:50:70:87:df:24:7a:
         5a:7a:6f:26:57:8b:52:99:2e:a2:e4:a4:31:c4:79:b6:29:63:
         bf:6e:a3:67:bb:f2:bf:e1:18:af:c2:52:77:81:f5:dd:50:26:
         d4:0d:7f:d5:f2:00:16:67:6a:d8:de:6d:3b:cc:37:81:35:3c:
         e7:e7:8d:b7:c7:4a:aa:d9:a3:00:35:1a:d7:d5:45:17:06:c1:
         07:06:34:99:4c:92:e7:cf:43:3d:45:c5:ba:ce:43:2e:71:0e:
         4f:55:cd:ca:53:f7:08:ac:42:86:71:c0:24:8b:5d:5e:07:2d:
         76:09:3a:72:72:6d:cd:20:3f:d1:fc:a0:cf:8d:24:2a:0e:fb:
         ee:bc:ec:38:00:86:ae:8c:49:9c:07:a0:95:36:f0:60:d6:1d:
         50:3a:ed:9f:e7:8f:2b:96:dc:03:f7:bc:59:4c:7f:1e:2e:12:
         4f:58:fc:a5:f0:b9:d3:d4:54:e3:2f:b6:fa:a1:b3:35:ab:f0:
         5d:7f:92:b0:a1:3b:89:f0:c4:82:01:1e:99:36:10:a1:95:84:
         2e:c3:16:ec:c1:a4:d5:bf:e2:df:ea:d8:1c:20:99:5b:70:69:
         c6:6a:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:23:15 2025 by rpki-client