Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa (raw, json)
Hash identifier:          AfgADzyhLigmS3IhMUQSDCXMYTHNZ0iSppW5VRd7xoA=
Subject key identifier:   40:5C:4E:13:D9:3E:B4:6C:09:EB:86:9B:80:F2:50:FC:BC:1D:83:9F
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       6972A5373E4590C6FBE58B16EC828EB77F359280
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa
Signing time:             Thu 18 Sep 2025 18:14:05 +0000
ROA not before:           Thu 18 Sep 2025 18:09:05 +0000
ROA not after:            Thu 17 Sep 2026 18:14:05 +0000
asID:                     264948
IP address blocks:        168.232.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:72:a5:37:3e:45:90:c6:fb:e5:8b:16:ec:82:8e:b7:7f:35:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Sep 18 18:09:05 2025 GMT
            Not After : Sep 17 18:14:05 2026 GMT
        Subject: CN=405C4E13D93EB46C09EB869B80F250FCBC1D839F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:1d:ee:c5:7d:a4:27:31:89:f6:a0:b0:da:
                    66:c9:c7:0e:bd:ba:01:f2:08:8a:32:38:1f:d1:17:
                    0d:41:1e:6e:59:59:af:77:af:93:0b:01:c1:4a:25:
                    ed:5f:d1:5f:c4:3b:14:22:6d:12:f3:75:a1:2e:bf:
                    4d:6f:53:25:7a:e0:04:80:41:06:1e:4f:29:b6:9e:
                    7a:14:22:a6:d5:43:fb:a6:07:ce:16:f2:de:0f:9f:
                    50:a9:73:5d:d0:02:20:fb:cb:b1:fe:92:1d:01:0b:
                    e5:75:85:ca:ee:cb:cd:77:e2:a9:43:5d:c0:19:5d:
                    97:07:95:7e:6e:42:4a:0d:83:8d:e0:7f:2d:77:f5:
                    62:ad:ec:89:61:ce:7e:de:72:6c:c1:8c:91:a4:93:
                    11:57:e7:99:db:8f:b2:2f:2c:ef:ee:b8:56:d8:73:
                    64:2e:d0:2c:8c:4b:b2:b4:6b:84:79:7e:bb:c1:e3:
                    9d:ca:24:ae:c4:b2:37:cd:65:97:1c:15:07:bc:c6:
                    eb:76:a0:c1:e0:68:0b:b6:49:95:c9:d3:6d:5f:aa:
                    5a:68:45:90:ce:06:a6:21:81:bb:b9:81:44:b7:2e:
                    a5:b4:26:23:a2:39:8e:f4:18:ca:df:a5:21:14:5d:
                    24:db:9e:14:d3:96:fb:1a:ef:89:7b:33:5e:95:d3:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:4E:13:D9:3E:B4:6C:09:EB:86:9B:80:F2:50:FC:BC:1D:83:9F
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:20:7b:26:b0:ff:d3:cd:dc:29:c5:c0:17:69:ac:31:03:0d:
         4e:c2:f6:e7:be:e1:5f:09:d3:63:09:30:2e:5e:ba:10:ee:30:
         6a:5a:58:2d:a0:18:37:a9:c7:fa:e8:00:54:08:20:f9:57:b6:
         0f:2b:72:95:b2:73:cf:6d:42:a6:f0:d4:d1:cf:8e:70:8b:38:
         6e:70:52:a1:41:64:19:98:fa:63:1e:30:08:b5:f5:44:82:55:
         66:c9:f4:c1:8a:6e:da:70:69:b7:17:32:c2:dc:5c:86:7b:51:
         c5:ab:26:ac:3a:51:74:c1:34:82:a4:24:ac:24:2c:40:c5:5f:
         bf:8f:68:46:a8:9d:7e:10:8d:0e:29:92:85:0c:b1:f6:6d:15:
         21:07:17:e1:0c:02:8d:06:ce:d1:c8:f2:61:20:60:c7:27:ab:
         4f:d8:35:c1:26:c8:0a:f1:64:7f:dd:8e:66:df:5d:68:56:b2:
         b5:03:dd:83:76:8d:93:f5:00:38:f9:f3:ac:5e:6e:1b:7e:5e:
         f5:2d:28:6d:fa:32:11:10:53:f4:11:ca:b3:57:14:90:8a:66:
         27:0f:8d:db:02:13:ff:6c:1b:4b:e4:bb:bb:6d:cc:cf:61:80:
         5a:4c:6a:27:02:74:57:2c:33:97:2a:25:72:28:4b:cb:e7:43:
         0b:4c:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 01:12:19 2025 by rpki-client