Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133332e302f32342d3234203d3e20323634393431.roa
File:                     3136382e3233322e3133332e302f32342d3234203d3e20323634393431.roa (raw, json)
Hash identifier:          YLD/kmyanUIBpdFq8SdW1e376PAS5yOpqe6boLMheU8=
Subject key identifier:   48:24:48:96:CE:BF:77:EC:6B:1A:D4:6C:0E:C3:56:4B:4D:04:46:F5
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       699DBFEBEE89510B2D2FF961BAF7B5E336177674
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133332e302f32342d3234203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 00:31:08 +0000
ROA not before:           Tue 02 Sep 2025 00:26:08 +0000
ROA not after:            Tue 01 Sep 2026 00:31:08 +0000
asID:                     264941
IP address blocks:        168.232.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9d:bf:eb:ee:89:51:0b:2d:2f:f9:61:ba:f7:b5:e3:36:17:76:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 00:26:08 2025 GMT
            Not After : Sep  1 00:31:08 2026 GMT
        Subject: CN=48244896CEBF77EC6B1AD46C0EC3564B4D0446F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:9f:f0:34:15:01:b3:77:ff:bd:5c:46:39:
                    10:c7:a7:b4:81:af:07:e0:e2:5c:bb:9f:ad:50:05:
                    26:7f:02:fb:d9:70:d2:7b:a5:77:cd:0c:a4:a8:cc:
                    f0:f2:b4:b6:2e:1c:75:2d:d9:ac:f8:33:ca:ec:a5:
                    13:94:b2:7b:f4:94:6e:90:5d:cc:57:63:62:60:67:
                    23:0f:bf:f7:78:a4:ce:c7:52:98:a7:7c:37:15:a5:
                    00:a4:f7:c7:5b:40:4b:9a:74:11:a2:ba:31:86:64:
                    df:c4:0d:66:30:fa:3f:e6:7a:b4:ea:fd:50:41:29:
                    9f:1a:4f:06:44:49:a7:86:8f:5d:39:3c:f1:6b:ac:
                    89:06:d1:a0:30:ff:23:60:5a:70:4f:af:39:d9:23:
                    60:c3:e9:3c:ff:92:0c:97:f8:aa:d9:09:6d:15:1b:
                    12:7e:a5:5d:56:d8:7c:00:f2:5e:e5:de:32:42:6c:
                    7c:76:62:19:97:d1:7b:7c:40:b8:88:22:f5:70:a3:
                    e4:9a:01:31:66:a1:a7:ed:2d:7a:30:17:bc:7f:b8:
                    a7:ff:c9:a8:44:1e:5f:15:8c:6c:7d:47:43:40:4f:
                    e0:f3:32:0b:7f:fe:45:13:3d:8e:6b:95:4c:30:8b:
                    39:e6:25:30:c5:ab:66:16:b6:b7:f0:30:93:bb:d0:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:24:48:96:CE:BF:77:EC:6B:1A:D4:6C:0E:C3:56:4B:4D:04:46:F5
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133332e302f32342d3234203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:32:97:ed:ba:5f:a8:fe:bd:1f:c0:11:24:1d:bb:b1:7b:b8:
         91:67:1c:8d:0f:d3:fa:78:d6:18:88:20:c9:44:d5:21:7d:f0:
         84:8f:11:12:44:c0:ad:8f:4c:1a:e9:ca:08:4e:1b:4e:76:54:
         aa:08:ee:00:12:b2:0f:c0:b8:17:56:fe:ce:be:33:82:91:3f:
         59:9c:83:f3:d7:dd:d9:d9:91:4e:1e:49:84:37:91:ee:a8:7b:
         11:39:c3:5e:0a:de:e3:46:9d:a0:57:fe:16:72:3a:71:51:b4:
         68:67:18:3d:b1:c1:13:87:84:01:73:9d:54:00:b2:bb:da:62:
         23:bc:04:07:8a:12:a3:39:2c:7d:a6:cb:15:92:5f:42:04:bc:
         55:fc:32:03:8f:a8:8a:0a:97:64:15:a2:3c:e8:09:86:cf:2e:
         e8:85:ce:ef:83:ad:ec:0e:3a:ce:ec:e4:1d:01:ea:f4:01:07:
         47:43:8b:fc:10:c5:0f:77:73:59:e7:e1:79:a4:fc:c7:57:e8:
         36:85:83:eb:65:57:18:ed:32:00:14:fd:4b:55:89:09:a5:f5:
         76:dd:cf:d8:e9:18:e5:99:11:dc:4a:82:01:48:1e:e7:31:64:
         87:db:a5:c7:4e:40:a5:57:be:b8:8b:f4:7d:79:d6:f1:86:f4:
         61:df:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:53:01 2025 by rpki-client