Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa
File:                     3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa (raw, json)
Hash identifier:          UVSATM4AVB7C+9R/+LmF7n07FGRfrCnEmDUiZGT1edI=
Subject key identifier:   44:E6:2F:86:82:81:07:0A:94:5A:B4:88:C3:FA:E3:1C:4A:AA:10:D6
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       6213CA7CADAC01C9178A5779BAADBA4F84F4E1B8
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa
Signing time:             Thu 18 Sep 2025 18:13:34 +0000
ROA not before:           Thu 18 Sep 2025 18:08:34 +0000
ROA not after:            Thu 17 Sep 2026 18:13:34 +0000
asID:                     265424
IP address blocks:        168.195.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:13:ca:7c:ad:ac:01:c9:17:8a:57:79:ba:ad:ba:4f:84:f4:e1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Sep 18 18:08:34 2025 GMT
            Not After : Sep 17 18:13:34 2026 GMT
        Subject: CN=44E62F868281070A945AB488C3FAE31C4AAA10D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:cb:17:fa:27:c1:8b:4a:c8:54:e0:fa:af:
                    b6:35:b4:9f:90:a7:f5:52:eb:37:e3:b9:f6:c4:48:
                    65:5d:2c:b9:cf:63:8f:5f:c1:3c:a5:73:02:25:13:
                    f0:68:b0:aa:4b:74:40:db:2b:2e:66:cb:fc:bb:73:
                    3b:d9:11:1c:9a:d5:5f:39:3d:8c:a8:61:99:8d:ea:
                    1e:d4:9a:bd:9f:6d:2b:1b:c3:44:dc:46:ee:d3:ad:
                    4b:2b:4e:58:83:c6:ba:d5:65:2b:e9:73:1a:d6:cf:
                    30:fa:f2:ec:41:ec:c5:89:4b:d2:34:24:29:45:5f:
                    7f:3f:17:0b:ca:3d:13:17:3d:4b:0d:4b:15:30:7b:
                    ff:fa:92:ef:9b:d5:c0:57:e4:fa:da:68:2c:09:b9:
                    93:9d:a8:9d:e9:c4:67:20:bc:b0:19:3b:82:c1:b1:
                    e3:d6:4b:89:39:4c:ce:6b:c8:da:b0:94:67:c7:46:
                    64:39:6b:4b:d3:92:26:c6:51:f2:58:42:c3:66:15:
                    1e:04:d7:dd:44:8f:6b:17:24:a6:06:59:7d:17:b6:
                    31:bd:f6:3b:f7:85:17:14:32:25:e8:08:bb:ae:42:
                    fa:f5:4a:3b:bf:64:c3:64:1c:fc:f2:59:5d:1a:b5:
                    c4:d4:b1:5d:a2:3f:85:8c:c5:39:f2:e6:5d:cf:24:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:2F:86:82:81:07:0A:94:5A:B4:88:C3:FA:E3:1C:4A:AA:10:D6
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:34:84:85:96:85:81:a5:60:3d:db:e7:ac:14:fb:56:02:2d:
         1d:3d:56:74:0b:57:1b:dc:8e:e7:c7:9d:5a:41:7a:e8:bc:40:
         8c:22:ee:d4:91:bd:fa:a5:35:11:49:ec:9b:5e:0d:35:30:20:
         29:ad:9d:90:80:74:4f:59:17:e7:d9:19:3e:f3:d5:69:8d:69:
         cb:03:fd:d3:9a:be:92:6c:eb:dd:5b:0a:4d:4e:a0:3f:fa:38:
         d7:a0:8e:f7:3e:e0:ca:4e:c5:14:ef:18:90:da:49:ee:3b:20:
         72:a6:26:6a:1f:63:c6:31:07:be:e9:d7:c3:c5:c7:87:f3:18:
         ed:a6:48:44:fc:a5:60:11:91:e9:4c:6d:81:6c:e1:ea:2d:39:
         b6:dd:93:e0:27:2d:0b:9c:7b:19:49:54:95:86:b1:2d:42:3b:
         95:83:76:82:a7:69:f0:5c:a0:67:03:b9:90:50:49:24:0c:90:
         36:b2:4d:93:eb:32:5d:2a:ac:8e:ea:bf:dc:1c:a5:42:f2:a6:
         c8:81:ca:84:91:15:57:e4:f2:2b:28:08:e2:23:48:76:3a:09:
         0e:8d:1e:24:5e:4d:f3:c5:5f:d4:f0:a2:d3:b9:eb:ca:7d:cd:
         8e:c5:e3:0b:6d:65:29:ed:be:37:e1:d6:d4:46:dc:23:a3:66:
         03:85:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:38:03 2025 by rpki-client