Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32372e302f32342d3234203d3e20323635343234.roa
File:                     3136382e3139352e32372e302f32342d3234203d3e20323635343234.roa (raw, json)
Hash identifier:          zUqlpDM+XxTJnBm0YV/rohIij3RSVmMbrB/BgLQ9CKw=
Subject key identifier:   2A:EC:44:61:F2:03:55:6D:42:F0:82:6F:53:73:0A:97:ED:71:59:E0
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       6675A4770F481E55C3553DB1E04F73C58F79DB53
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32372e302f32342d3234203d3e20323635343234.roa
Signing time:             Thu 18 Sep 2025 18:15:30 +0000
ROA not before:           Thu 18 Sep 2025 18:10:30 +0000
ROA not after:            Thu 17 Sep 2026 18:15:30 +0000
asID:                     265424
IP address blocks:        168.195.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:75:a4:77:0f:48:1e:55:c3:55:3d:b1:e0:4f:73:c5:8f:79:db:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Sep 18 18:10:30 2025 GMT
            Not After : Sep 17 18:15:30 2026 GMT
        Subject: CN=2AEC4461F203556D42F0826F53730A97ED7159E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:4d:5a:3d:60:69:29:b9:82:f1:15:09:f7:
                    71:1d:7b:98:5b:85:07:86:45:bc:f3:c1:cc:dc:0e:
                    e6:96:c9:ce:da:48:13:59:ce:74:d4:40:96:87:f5:
                    1b:bc:b7:fc:7c:c9:14:2f:9b:4c:10:ee:fc:21:bb:
                    8d:e2:1e:e3:b2:61:0b:90:36:89:ae:93:02:0a:ab:
                    4f:bb:88:a2:9f:00:9f:fc:38:a6:eb:d0:02:4c:20:
                    71:39:da:32:ae:06:77:41:12:a4:08:15:01:65:32:
                    0f:d2:90:58:e5:67:e1:f2:45:49:5a:b8:14:d7:cf:
                    c7:9d:b7:f5:dc:41:e0:c2:4c:41:37:3b:ba:47:82:
                    b0:88:ca:cc:a8:9b:aa:bb:a6:bd:fb:c6:82:5c:0c:
                    c6:0f:ab:c2:37:6b:51:83:62:37:89:14:b3:17:55:
                    f5:76:f8:42:be:02:79:8c:66:ff:3a:b7:22:bd:34:
                    68:ac:27:fa:fc:5c:41:e7:4f:ff:65:bd:b0:b3:70:
                    3b:2e:68:98:66:0b:88:ff:41:e1:58:d0:db:18:4c:
                    0d:9b:0f:6c:e0:81:c5:08:9e:78:9b:f8:d6:f1:4b:
                    6b:30:0d:e9:d6:1b:72:58:f2:d8:c7:1b:e8:13:5f:
                    a8:38:bb:c9:6f:e2:22:c6:3a:cb:7b:e5:11:e3:34:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:44:61:F2:03:55:6D:42:F0:82:6F:53:73:0A:97:ED:71:59:E0
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32372e302f32342d3234203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:36:d5:9d:c0:ba:cc:54:02:f1:35:01:28:55:62:d1:19:
         09:6f:41:b1:a2:36:80:d4:01:82:fd:71:0a:89:a7:a1:fb:5f:
         8d:17:f8:99:14:59:26:87:f6:4f:90:8b:b6:c9:c0:c2:2f:78:
         5f:d0:9b:94:f2:99:f5:16:21:03:ae:d2:44:e5:5e:eb:b8:36:
         07:43:85:0a:77:fa:ce:cf:3e:c2:44:24:e1:1f:65:5f:13:71:
         09:d7:0f:7f:40:05:c7:c8:73:60:06:43:91:a4:99:cf:a0:f5:
         91:3d:0b:59:81:66:85:10:0f:3c:62:22:d2:ca:1a:96:2b:06:
         b2:ee:8e:90:bf:dc:4a:ef:bc:4b:5e:f1:a8:4b:8d:ae:61:0f:
         09:b1:cd:db:4e:e3:c4:4b:c4:cf:32:2b:7a:81:bd:d5:34:9f:
         dc:32:f6:5b:a3:6d:11:fe:4c:95:79:c7:1b:e1:48:20:d4:85:
         eb:e0:e4:7f:25:2f:4d:1e:d2:d2:c7:e9:d8:82:63:b7:67:a1:
         94:50:35:b0:ee:4a:e7:8e:10:c3:e7:f3:43:25:e4:47:7e:18:
         3b:2f:e3:9c:8f:bb:7c:97:16:41:cc:ca:0b:6b:52:04:3f:d8:
         95:5f:98:0d:39:67:41:10:8b:c4:65:41:a9:ae:52:19:d0:5f:
         40:41:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:38:01 2025 by rpki-client