Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33362e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          3cNum6dtWh3fEPLmkxIYmlVKjH5retEqRecZ4OwzUs4=
Subject key identifier:   CB:5C:7A:0A:BB:20:F4:DE:EF:29:73:52:94:C1:CC:02:56:7F:F9:6C
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       660081859BA37C66227C66B979E71D70A2F6207A
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 15 Aug 2025 12:03:08 +0000
ROA not before:           Fri 15 Aug 2025 11:58:08 +0000
ROA not after:            Fri 14 Aug 2026 12:03:08 +0000
asID:                     263347
IP address blocks:        191.37.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 19:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:00:81:85:9b:a3:7c:66:22:7c:66:b9:79:e7:1d:70:a2:f6:20:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Aug 15 11:58:08 2025 GMT
            Not After : Aug 14 12:03:08 2026 GMT
        Subject: CN=CB5C7A0ABB20F4DEEF29735294C1CC02567FF96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ca:40:43:09:4d:94:d0:af:19:80:d6:88:89:
                    8a:88:46:6a:27:4e:bf:9d:01:00:79:e5:ae:a1:a5:
                    9a:ba:b8:13:0c:a4:46:8e:99:99:52:2b:43:37:49:
                    fc:5a:87:10:0f:d6:56:88:ca:35:85:b5:05:d9:6c:
                    22:9b:08:4d:74:5e:a6:7b:91:eb:d9:8e:1b:bb:92:
                    35:26:ac:b2:b7:73:c9:e3:44:af:98:dc:a1:d7:f2:
                    af:a0:b7:d6:d0:c5:5f:3c:bf:fa:3c:26:f8:b6:9f:
                    f4:41:92:97:4b:55:f6:d6:40:4c:a4:9d:bf:42:2b:
                    01:d2:20:b2:b8:b0:d6:33:c4:28:b6:62:af:f5:c1:
                    c6:fd:4e:bd:bd:bf:3f:87:da:64:f6:66:ad:39:ed:
                    1e:07:e4:8e:67:80:4c:77:a4:a0:50:7e:51:93:49:
                    f5:4a:96:0f:81:a4:f7:27:17:27:68:81:da:19:69:
                    07:3b:1d:ce:95:15:11:c0:ca:a3:7a:a6:25:72:ab:
                    e6:ad:89:38:ce:2d:0c:3a:dd:bc:8f:fe:fe:26:b3:
                    97:c2:d0:9f:c1:6a:ea:cc:2a:73:8a:d8:2a:8d:19:
                    50:4d:74:2b:0a:55:8d:06:e8:1e:be:93:b4:1a:95:
                    bf:f6:5b:a9:a0:a0:cc:e9:0b:f3:48:c8:d1:18:69:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5C:7A:0A:BB:20:F4:DE:EF:29:73:52:94:C1:CC:02:56:7F:F9:6C
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:74:5c:ab:3d:8a:b3:37:45:80:65:72:63:c8:e4:46:f7:
         5e:ac:cc:16:87:1d:e0:42:6f:c3:2e:c5:d9:e9:11:b7:7b:f4:
         0f:9e:a7:19:38:b2:d0:8f:89:63:1a:1c:af:c6:4e:cb:44:f2:
         02:ca:b8:ed:1d:ef:05:77:d4:a5:05:f5:f4:e7:b3:13:ce:5f:
         1b:5c:23:af:f8:8e:02:1d:91:fb:5c:5d:71:56:4d:3b:af:7b:
         fd:08:68:9d:d3:79:e1:52:a0:ce:7d:9c:b0:5d:3a:71:b8:80:
         30:ea:34:44:13:96:9e:f3:b6:fb:9f:2d:41:9c:7a:7f:2a:b0:
         11:fe:93:06:4e:13:86:2c:0e:33:a6:8f:96:58:c5:6c:49:2c:
         72:d4:2c:8e:46:d3:4f:bb:fd:2e:d0:bc:25:50:36:ff:b3:57:
         73:99:c7:f6:10:4f:a3:45:f0:d2:53:76:17:75:bc:69:4f:d2:
         14:24:66:62:26:0d:da:1f:61:d5:0c:9a:c6:79:92:64:25:9e:
         33:2d:16:e8:34:56:1d:4d:63:3a:09:3f:2d:9e:6f:cc:99:e3:
         97:43:87:a0:b0:5d:75:fa:56:15:38:80:10:fb:06:4f:d2:ba:
         d1:d1:3c:00:9c:1e:e7:83:e3:c6:56:97:b5:7e:8a:7a:e3:e8:
         f9:35:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:47:57 2025 by rpki-client