Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa
File:                     3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa (raw, json)
Hash identifier:          tdHzWepgJjgudC2yhCBD8JneXIfij9C0XXUgfdzTwBM=
Subject key identifier:   10:AD:0A:13:30:7D:28:80:FA:75:7A:15:21:DB:54:09:2F:32:5F:04
Certificate issuer:       /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial:       14EF5264ED6BF88B88123238DE05F04EC1732A06
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa
Signing time:             Thu 11 Sep 2025 14:24:46 +0000
ROA not before:           Thu 11 Sep 2025 14:19:46 +0000
ROA not after:            Thu 10 Sep 2026 14:24:46 +0000
asID:                     263137
IP address blocks:        168.228.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
                          rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ef:52:64:ed:6b:f8:8b:88:12:32:38:de:05:f0:4e:c1:73:2a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
        Validity
            Not Before: Sep 11 14:19:46 2025 GMT
            Not After : Sep 10 14:24:46 2026 GMT
        Subject: CN=10AD0A13307D2880FA757A1521DB54092F325F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:b0:31:d6:8b:39:ae:d7:33:58:9d:d7:e7:
                    2b:d5:b2:5f:51:5f:ff:6f:d8:e6:5a:63:86:52:37:
                    41:5e:df:6d:1f:fe:9d:51:2b:07:5e:ec:c5:a7:a9:
                    6d:73:49:95:64:c1:6a:e8:e3:af:9d:46:98:9a:ed:
                    e8:b5:fd:7e:b7:23:d5:46:59:ea:01:43:f6:59:53:
                    fd:50:59:d2:07:1a:8d:fa:25:c4:ef:33:50:8d:cc:
                    6a:0a:14:48:d9:d6:ff:fe:8b:d4:0d:3d:81:c3:17:
                    c6:9e:e3:f4:cc:f5:a3:e7:b8:b9:25:c4:bb:77:c3:
                    cb:50:b7:1f:88:30:83:b3:83:96:ce:8b:6d:15:97:
                    6a:65:7e:7d:6e:77:b7:b1:fa:5d:97:8b:b0:61:19:
                    cd:a9:fe:31:d8:98:9c:11:0c:29:41:70:1c:b0:b2:
                    7a:b7:35:b1:ee:98:c3:e5:2b:8b:ab:52:81:d1:f1:
                    ea:f8:d4:34:5b:d9:33:4b:c0:a9:be:fa:fa:a6:ec:
                    f1:e0:7c:a4:38:19:fb:e0:4f:a5:29:b1:f4:f8:ca:
                    e2:4a:ed:41:a0:93:98:6d:89:ef:dd:d2:05:49:5e:
                    fa:eb:d7:a3:b5:c1:62:64:6b:2e:87:4e:75:ce:13:
                    38:bd:33:a7:55:91:a1:82:6a:10:3a:2c:4b:9c:ad:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AD:0A:13:30:7D:28:80:FA:75:7A:15:21:DB:54:09:2F:32:5F:04
            X509v3 Authority Key Identifier:
                keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:fe:52:cc:2b:74:3b:87:d3:86:bc:50:0d:cb:de:1b:17:
         d5:95:67:1b:34:b2:b9:e9:fb:33:0a:e2:b1:0e:02:82:fe:93:
         54:af:84:2f:98:43:a2:28:75:e4:bc:df:a2:c4:00:0b:f9:69:
         9d:ea:82:41:57:86:4a:a8:93:c8:a1:17:72:00:59:3f:79:d4:
         bc:fa:d8:69:35:68:be:af:4b:8d:a9:68:20:5a:e5:48:9d:e8:
         bb:f6:48:c9:02:73:5e:19:e4:9d:b1:9a:9e:9f:1e:e0:18:d1:
         2c:15:28:e4:00:a6:ff:47:08:64:36:8c:ed:74:f6:ff:56:3d:
         4d:db:f3:67:bf:1c:d4:fd:74:ad:91:6d:cf:bf:55:9c:91:e3:
         40:ad:ae:79:a7:2e:ed:67:80:68:c2:59:a8:b9:1a:23:82:a0:
         7a:c0:95:b8:c6:99:b0:04:13:24:67:a1:e9:f5:cf:45:44:e2:
         36:d3:d1:3d:b1:31:90:e0:82:18:c1:ba:19:cb:43:e9:e5:73:
         a2:ef:91:80:cb:39:ea:64:ab:34:3a:f6:d7:2d:2b:6f:09:4d:
         24:0c:82:09:54:90:c3:63:15:b9:20:d1:c2:c4:88:1d:fd:92:
         58:e6:1b:b0:89:f8:13:61:02:ec:2d:a3:3e:4b:9d:ac:b0:94:
         22:82:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:03:38 2025 by rpki-client