Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135322e302f32342d3234203d3e20323635343631.roa
File:                     3136382e3139362e3135322e302f32342d3234203d3e20323635343631.roa (raw, json)
Hash identifier:          IlO1cehuqtdP2CtKKygYj9ulv3NlL8BSnEc3rcXtH4Q=
Subject key identifier:   86:24:29:DA:05:69:D3:CB:70:EF:4F:DE:75:4C:3D:B6:76:2E:CA:D8
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       12389EF15240FE5A53603F328D224BCBF51A6429
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135322e302f32342d3234203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:27 +0000
ROA not before:           Fri 12 Sep 2025 15:31:27 +0000
ROA not after:            Fri 11 Sep 2026 15:36:27 +0000
asID:                     265461
IP address blocks:        168.196.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:9e:f1:52:40:fe:5a:53:60:3f:32:8d:22:4b:cb:f5:1a:64:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:27 2025 GMT
            Not After : Sep 11 15:36:27 2026 GMT
        Subject: CN=862429DA0569D3CB70EF4FDE754C3DB6762ECAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:20:53:4f:ca:13:2c:6b:f6:15:0f:b2:09:
                    69:11:de:0d:2d:c7:cb:9f:4c:18:49:47:1d:16:40:
                    da:89:eb:af:d0:5e:03:99:e3:10:cb:77:4c:ca:df:
                    0c:96:5c:43:0b:44:ef:77:25:e8:12:66:a7:00:99:
                    d1:47:91:98:40:27:84:70:f6:b9:dd:5f:63:92:a9:
                    97:89:6d:70:18:91:6e:a0:ce:95:db:b6:a5:a8:a7:
                    dc:93:9f:66:9f:76:6b:e5:d5:be:41:66:15:75:62:
                    29:49:62:22:2b:57:e9:24:cf:47:45:a8:c7:f6:71:
                    2e:23:b1:4a:03:e4:ec:7d:b3:a7:e2:c4:b7:48:bc:
                    75:4f:a6:f7:55:ff:2b:d4:79:ed:2b:f2:6e:af:64:
                    a2:65:e2:45:0b:f5:72:f0:3a:d4:c1:c1:5d:15:52:
                    51:44:57:ea:6b:9f:8b:b3:3d:f2:9b:af:9e:d3:db:
                    6c:bc:f4:63:ab:ca:66:bd:72:70:50:9a:3b:99:5a:
                    47:d9:e9:2d:fc:71:86:49:2f:04:2b:02:d8:1a:81:
                    ff:c6:52:5b:10:ea:bb:1a:0b:83:71:53:c5:75:b1:
                    bf:e8:ba:08:1e:7a:7b:e9:3e:ce:ca:6f:d8:46:ca:
                    9b:c2:fc:8f:40:23:bd:33:56:de:94:1b:4d:d2:50:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:24:29:DA:05:69:D3:CB:70:EF:4F:DE:75:4C:3D:B6:76:2E:CA:D8
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135322e302f32342d3234203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:12:fb:52:89:c0:9a:39:9e:cd:43:59:57:4f:a0:b1:e8:1b:
         63:78:86:11:bf:b7:c3:74:49:1c:a3:df:aa:3c:54:17:52:98:
         e2:e6:aa:81:c4:6f:57:dc:d1:ea:92:ef:8b:89:07:47:dc:99:
         1b:8a:5e:7f:b7:f2:9d:5f:4e:f7:a3:bf:7b:a9:88:f8:59:14:
         20:a5:d5:b5:a1:28:9d:bf:33:0b:8b:9b:55:d5:b4:e8:b6:14:
         07:f8:1c:59:27:72:91:7a:5c:91:f1:f7:38:06:ea:52:8a:11:
         63:fc:c7:ca:0d:23:e6:15:96:43:c1:d4:0f:3c:fe:60:6a:19:
         c2:e3:f5:04:d4:08:4b:38:2f:59:de:25:ee:7b:65:38:39:7f:
         1a:64:41:8f:fb:cc:29:19:88:2f:af:3f:0a:5c:8c:74:2c:ea:
         ad:80:51:da:46:3d:0d:40:00:f0:5d:cf:e9:c1:99:36:de:d5:
         23:e4:40:67:fe:f8:42:4b:be:32:c6:fd:2e:69:4b:82:0f:ac:
         37:5c:cf:71:e3:ac:99:6b:4f:12:fd:0e:a8:ce:4b:0a:bd:a5:
         ae:74:88:d1:3b:5b:5e:a2:b6:15:3f:07:ca:10:0d:4f:30:ad:
         2f:ca:40:c7:bf:11:44:8c:4c:fb:b3:ac:77:fd:3c:bb:2f:45:
         85:45:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:28:15 2025 by rpki-client