Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136342e302f32322d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          sGbWmqHk5weRKCYyrc4ZjKQWdl1w9X76+3agDKEMckg=
Subject key identifier:   37:79:EC:F8:01:F2:72:C5:1C:95:AA:9F:5A:3A:25:28:7B:EC:59:4A
Certificate issuer:       /CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
Certificate serial:       4E0C74CE21DB5438D33D041AFAD03F918DBC0278
Authority key identifier: D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3234203d3e20323635343638.roa
Signing time:             Tue 16 Sep 2025 15:49:06 +0000
ROA not before:           Tue 16 Sep 2025 15:44:06 +0000
ROA not after:            Tue 15 Sep 2026 15:49:06 +0000
asID:                     265468
IP address blocks:        168.196.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:74:ce:21:db:54:38:d3:3d:04:1a:fa:d0:3f:91:8d:bc:02:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
        Validity
            Not Before: Sep 16 15:44:06 2025 GMT
            Not After : Sep 15 15:49:06 2026 GMT
        Subject: CN=3779ECF801F272C51C95AA9F5A3A25287BEC594A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ba:ab:c3:08:fe:53:dc:21:08:22:d9:4b:05:
                    3d:28:2d:6c:76:3e:83:1a:01:28:b1:3a:af:f4:74:
                    d1:50:e7:5b:6f:3a:fe:fc:c3:a4:fb:4c:aa:36:08:
                    b9:3f:10:d2:98:b9:db:4d:82:31:2b:3d:cf:8e:94:
                    24:b8:06:31:17:d2:29:3c:b4:34:a8:e7:6a:35:dc:
                    a0:45:75:c1:a2:0b:8d:fd:93:dd:5d:23:d8:47:56:
                    6a:9a:cf:46:05:f0:21:50:b1:70:4b:ad:9b:56:ff:
                    be:a7:67:2b:1d:37:ab:41:1a:61:0e:d3:ad:78:98:
                    51:7f:32:04:6b:3f:7c:d5:4d:7c:84:55:d1:62:98:
                    24:39:5f:43:2c:e9:fc:74:15:c2:56:a1:ff:b2:09:
                    9e:f7:0c:d6:b2:74:d3:88:e5:a3:71:87:0b:21:e1:
                    f1:e1:59:3d:ee:a4:21:65:98:69:6c:08:d7:ba:00:
                    55:73:c3:fb:51:72:6a:dd:10:8d:ae:9e:10:5b:5e:
                    d1:4d:41:e9:3e:68:fc:7b:ee:77:6a:af:8b:b2:83:
                    1c:c2:23:6b:b1:5a:15:9c:47:0f:f0:2a:da:f5:89:
                    41:dc:71:8e:28:8c:40:d9:b0:7b:d2:d6:7f:e5:60:
                    f7:18:f9:be:d8:cb:6f:1c:41:b3:84:24:03:14:ca:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:EC:F8:01:F2:72:C5:1C:95:AA:9F:5A:3A:25:28:7B:EC:59:4A
            X509v3 Authority Key Identifier:
                keyid:D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:eb:81:7d:c1:b0:d7:30:10:6d:99:dc:be:9e:b4:39:74:
         56:ad:1f:7c:32:52:f7:40:db:59:13:41:70:c9:2e:43:64:5d:
         98:12:49:30:0e:06:12:fa:3a:f7:a1:81:8d:a8:bd:8b:7f:35:
         05:26:60:93:99:dc:86:ac:1f:58:06:32:0a:0c:b0:cd:c6:8d:
         9b:0b:d3:65:7e:57:47:7e:7a:58:27:a7:b0:09:d4:43:e0:e2:
         d9:8a:3e:b0:b7:38:8a:d8:6f:46:e5:82:a8:a9:76:5d:5d:f9:
         7b:57:8d:ea:55:22:ee:43:9a:4f:6c:fd:51:b3:0a:cc:66:1e:
         b5:36:b3:94:e8:e7:37:c4:c9:12:42:5f:27:1f:c3:ea:48:d2:
         85:2c:32:c3:9f:26:4c:c5:1b:80:af:39:95:cd:3c:f6:ea:22:
         fa:3e:b9:0c:20:07:56:84:3b:8e:ec:87:bc:f6:74:55:b9:53:
         36:75:e0:67:69:54:31:5a:e4:51:bb:db:eb:e2:06:4e:50:fc:
         f1:db:9b:1a:b5:f6:5d:85:34:a7:04:e1:61:fc:b8:86:49:2c:
         2c:72:72:a2:d4:72:bf:a4:62:a8:fd:96:7d:98:71:0b:31:bc:
         85:f6:3e:d3:18:a9:b9:d8:60:6e:df:e9:b7:90:90:f6:a0:0f:
         7c:96:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:55:49 2025 by rpki-client