Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa
File:                     3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          g6NG/GHMwrCQxzXTAF7pDu2O5O0QXT5twYRHS3K6de0=
Subject key identifier:   FB:FE:E2:A7:98:12:40:0F:E1:85:08:D8:47:4C:3D:94:89:98:DC:C6
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       5ECFD8B97AA70D3DA8DD8D27E99AF6CC94EE81AC
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:23 +0000
ROA not before:           Tue 19 Aug 2025 20:01:23 +0000
ROA not after:            Tue 18 Aug 2026 20:06:23 +0000
asID:                     262503
IP address blocks:        167.249.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:d8:b9:7a:a7:0d:3d:a8:dd:8d:27:e9:9a:f6:cc:94:ee:81:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:23 2025 GMT
            Not After : Aug 18 20:06:23 2026 GMT
        Subject: CN=FBFEE2A79812400FE18508D8474C3D948998DCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:a6:ce:6a:57:8b:58:e5:e8:59:fa:66:f5:
                    6b:60:7f:47:fb:16:63:88:8f:16:f0:46:6e:f4:97:
                    e1:54:e5:a6:93:0e:56:36:59:84:7c:d5:6f:db:cf:
                    2a:13:65:2d:d6:ce:a1:b5:79:43:66:8b:bd:38:56:
                    8a:1b:1e:b8:38:82:b9:89:ab:0e:b3:52:7e:33:4c:
                    d5:d9:22:02:0d:a4:98:d9:8d:fe:39:0a:24:2a:80:
                    bc:2d:86:c4:86:03:ea:24:c2:24:61:2a:dc:cd:71:
                    da:3e:e7:2b:a9:eb:5a:ad:d6:5c:a2:2d:92:cf:9f:
                    07:a4:31:d9:ab:ec:75:25:5c:6c:36:ad:5c:64:e2:
                    59:4b:56:c7:9e:a2:25:57:93:92:f3:d1:de:36:13:
                    23:b1:39:26:52:54:d4:1b:7b:cc:b8:89:16:c1:de:
                    49:1e:9c:44:76:84:04:d0:af:11:a6:77:f0:17:ed:
                    e6:a2:b9:15:4d:52:f8:f0:20:ff:86:d1:74:6a:a6:
                    44:a4:ab:4d:dc:df:b6:72:14:70:bb:df:95:bb:bb:
                    73:6f:e2:05:a7:f1:3c:94:3e:e2:a3:65:76:62:b5:
                    7e:f1:38:4f:5e:c0:30:50:3a:01:f2:e2:4d:ad:19:
                    f8:ee:57:48:2a:b3:69:29:53:2e:73:78:45:14:75:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FE:E2:A7:98:12:40:0F:E1:85:08:D8:47:4C:3D:94:89:98:DC:C6
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:43:7c:ef:96:cf:c7:f3:5b:ed:46:13:4f:0c:27:af:95:91:
         08:98:85:3a:d7:3b:a6:51:08:25:b2:0e:ba:b2:00:aa:56:13:
         43:ae:b3:dd:dc:04:74:b1:77:3d:3b:72:26:f6:1b:2b:8f:41:
         ef:36:8b:c8:bb:8f:ad:73:41:84:18:57:1d:a6:e8:54:07:b2:
         bc:26:e2:a5:50:2e:05:a2:3e:7a:3c:4e:f9:e1:97:45:d6:3f:
         19:45:ce:3f:92:18:b9:77:06:06:ad:67:d1:a6:6d:be:3e:79:
         a0:2a:09:99:70:f5:16:4b:19:d1:92:6a:78:2b:96:af:bc:2e:
         46:35:a8:fb:8b:43:ec:ed:4b:45:77:d4:c0:57:e8:77:53:f3:
         a2:bd:e1:be:86:83:d1:e0:4a:ad:d4:2b:5e:e6:37:96:85:2b:
         a1:c7:de:f4:b7:9f:be:19:75:aa:9c:df:bd:35:af:41:5c:25:
         63:59:84:19:4e:43:54:33:fe:66:c9:54:36:a0:47:db:4e:4d:
         40:69:68:35:84:5c:69:2f:9f:cf:b2:e1:0d:76:d4:4d:03:03:
         30:a9:d6:de:4b:a3:c9:92:ca:27:44:d7:1d:28:50:07:bc:02:
         22:a5:eb:7f:fc:62:5c:19:92:de:5c:99:ca:2d:2d:5e:f0:ea:
         cb:74:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:23:12 2025 by rpki-client