Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135322e302f32332d3233203d3e20323635343631.roa
File:                     3136382e3139362e3135322e302f32332d3233203d3e20323635343631.roa (raw, json)
Hash identifier:          ZjsB+i+HeaPRS/xs0TWEeI7qr3leqjb2o+qwLGG22fU=
Subject key identifier:   25:A9:17:D8:FC:68:00:44:AC:36:18:B4:98:12:75:ED:DD:C1:2D:BA
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       3BBA96BBAD4D399DC2DD6858925D651137FD699F
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135322e302f32332d3233203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:25 +0000
ROA not before:           Fri 12 Sep 2025 15:31:25 +0000
ROA not after:            Fri 11 Sep 2026 15:36:25 +0000
asID:                     265461
IP address blocks:        168.196.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 23:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ba:96:bb:ad:4d:39:9d:c2:dd:68:58:92:5d:65:11:37:fd:69:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:25 2025 GMT
            Not After : Sep 11 15:36:25 2026 GMT
        Subject: CN=25A917D8FC680044AC3618B4981275EDDDC12DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:02:48:8e:00:c5:31:94:fb:34:cc:3d:97:
                    1d:dd:e3:80:46:77:b6:b5:9d:c5:10:b4:74:ae:19:
                    9a:c6:d9:0d:d2:be:a6:44:67:6b:68:15:88:7c:aa:
                    04:40:20:09:3c:48:43:cd:ba:42:d6:4c:4a:19:43:
                    29:e6:3c:eb:f8:f1:2e:9b:ee:fb:44:22:0e:18:4d:
                    66:c3:00:55:1a:d1:cb:f1:62:47:92:3e:26:f8:43:
                    5e:e0:91:75:db:fa:c3:c8:08:87:23:cf:65:40:7d:
                    a4:aa:90:68:37:f0:18:09:6e:df:fe:c9:39:ff:23:
                    7f:4f:91:13:7a:57:86:6b:9f:5f:ce:25:0f:b9:76:
                    0a:6d:e4:2e:ac:4b:3c:ff:58:34:d8:a9:7c:c6:0c:
                    7b:f6:5e:9d:5b:bb:4d:7e:4c:93:3f:75:61:91:0d:
                    00:7b:74:49:67:62:02:49:48:be:6d:5a:8a:fa:35:
                    4e:30:b9:e7:82:f3:ee:c6:33:cb:18:57:9b:29:23:
                    4f:74:27:f4:0c:f6:3f:f9:10:7a:a6:f5:35:67:03:
                    e9:0d:30:65:35:99:b4:bf:bb:c9:52:c0:71:9b:2a:
                    ba:71:f5:41:9e:4b:1c:65:d8:fb:0c:ff:eb:f9:e7:
                    15:fd:c6:91:dd:b5:90:32:0f:e9:d1:2e:75:2a:3b:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A9:17:D8:FC:68:00:44:AC:36:18:B4:98:12:75:ED:DD:C1:2D:BA
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135322e302f32332d3233203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:95:c2:b4:8e:9b:fc:1c:83:e3:89:35:0c:69:ea:de:e4:5a:
         73:59:5f:97:fc:b9:fd:aa:2a:21:f0:14:a0:01:57:81:22:cb:
         0c:f0:6e:99:8c:1c:61:34:01:2d:39:7a:19:4b:6e:9f:c3:2b:
         77:ed:d3:14:8d:ac:f1:c6:c8:d1:a3:b9:ba:41:c0:a4:3c:54:
         ab:21:c0:9b:3f:aa:c7:94:14:d5:de:46:78:73:88:d6:b7:da:
         6a:a9:4d:4a:4c:e8:1b:a0:67:4e:5c:9a:b0:68:0f:54:18:57:
         10:91:15:b6:52:41:b6:6c:14:35:67:78:3b:fd:bd:2b:ac:92:
         11:f5:d4:a1:c8:22:58:13:f7:3b:9e:be:f5:9a:46:75:d4:f4:
         81:3b:3b:55:eb:18:c1:4f:7b:1b:36:8a:13:da:74:6f:8e:be:
         3b:7f:29:0a:40:ac:66:c3:06:73:81:e0:b5:89:eb:c8:eb:e2:
         37:39:19:ba:8f:91:bf:9f:13:c7:db:64:94:3f:d3:4d:6c:49:
         4e:aa:83:29:d3:47:7c:3b:c9:13:ac:be:c9:c5:3e:24:ea:63:
         5d:60:35:d8:a4:25:27:a8:de:d6:64:cf:22:b9:c4:c5:02:7e:
         c8:da:87:9a:65:41:c6:12:f6:be:88:2c:a5:1e:b8:ba:f4:bb:
         6a:64:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:37:21 2025 by rpki-client