Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3232203d3e203238313238.roa
File:                     3136382e3139352e33322e302f32322d3232203d3e203238313238.roa (raw, json)
Hash identifier:          x4jp0UGmeCug/GvAW42BbBRP8Iv2A0mMd6VCHW9L/gY=
Subject key identifier:   E6:3E:AC:62:6D:C1:F6:F9:AA:34:F8:52:84:CF:63:0C:B5:AC:17:53
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       0550BE20B6A2C81CD861C7B6718FE6C95CD4EA73
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3232203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:32:34 +0000
ROA not before:           Fri 12 Sep 2025 14:27:34 +0000
ROA not after:            Fri 11 Sep 2026 14:32:34 +0000
asID:                     28128
IP address blocks:        168.195.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:be:20:b6:a2:c8:1c:d8:61:c7:b6:71:8f:e6:c9:5c:d4:ea:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:27:34 2025 GMT
            Not After : Sep 11 14:32:34 2026 GMT
        Subject: CN=E63EAC626DC1F6F9AA34F85284CF630CB5AC1753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:9d:33:d7:42:b8:4b:75:31:21:85:0c:d4:
                    23:06:3d:b3:fc:a3:ba:57:7f:82:5b:9d:2e:0d:61:
                    6d:f2:fc:fb:96:80:00:e8:c5:68:90:e2:2a:f1:ed:
                    1b:d1:18:47:34:0c:d9:a3:e3:15:45:a8:33:b3:d1:
                    0a:a9:0e:59:0a:6a:53:14:e2:1e:94:c3:35:17:91:
                    de:d5:83:98:9e:f1:f5:23:bd:31:41:8d:24:31:14:
                    28:85:67:39:04:c0:33:e5:a7:29:13:c8:88:2b:4d:
                    1e:69:4e:40:fd:63:cf:94:8d:b0:3e:25:30:ec:61:
                    2a:40:ac:47:88:63:66:b7:fa:83:d9:a0:15:97:fe:
                    db:b3:2c:6f:49:05:77:eb:88:c1:5c:0e:83:28:22:
                    bb:9e:4d:4f:f6:1c:56:83:ba:b2:68:95:64:7c:84:
                    92:46:9a:47:f8:71:6a:d3:2c:42:ff:7f:31:21:6b:
                    8e:1b:9f:13:66:da:53:0c:b2:bb:f3:1e:b1:0f:7a:
                    2b:ac:8b:a5:0d:19:33:9c:56:fc:94:5b:ca:82:23:
                    91:79:c1:a6:86:ba:1e:49:fc:df:10:49:80:96:ea:
                    0a:c4:84:7b:2c:74:d0:e1:f3:da:93:46:e1:5d:88:
                    37:ee:69:15:d5:dc:f5:f6:eb:b6:31:c7:a2:0f:4a:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:AC:62:6D:C1:F6:F9:AA:34:F8:52:84:CF:63:0C:B5:AC:17:53
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32322d3232203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b2:9a:6d:e6:30:36:47:79:b2:b6:6e:6d:54:78:f2:55:42:
         38:f2:7b:6d:e0:03:4f:93:38:2a:81:e9:6b:49:72:48:68:7b:
         f5:69:5f:c5:42:70:02:33:94:d4:ac:1c:53:89:87:ff:ec:56:
         ad:97:1b:a2:82:b9:ad:cf:9e:60:cf:54:04:d8:3d:95:68:c3:
         78:35:be:88:8a:6f:1f:c0:5f:0b:71:46:a9:94:d4:8b:6f:d3:
         d8:f5:ca:07:d3:e8:0c:22:36:92:e1:e7:d7:85:4f:60:bf:66:
         fb:bd:46:39:41:0a:27:ef:db:d1:79:28:4a:23:00:28:09:b1:
         12:f0:eb:ca:b7:89:ed:64:07:64:24:e9:25:60:11:bd:ef:af:
         66:5f:2c:2e:20:ca:2a:85:85:30:e6:8c:17:56:8b:d7:c6:18:
         43:e9:bf:a7:fe:e5:9b:8f:25:34:a0:2b:c5:b6:f5:98:54:87:
         5f:df:af:18:13:b4:42:af:17:4c:51:bc:92:38:55:53:37:42:
         9b:c0:75:14:cf:1b:c5:39:cc:89:03:63:40:86:45:6e:51:03:
         c8:29:ec:b5:43:c1:73:7a:f8:eb:98:07:97:e6:d3:f0:26:69:
         5c:e9:9b:df:55:44:9b:61:a3:88:a2:d6:54:a8:8e:98:c4:a7:
         dd:39:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:24:13 2025 by rpki-client