Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa (raw, json)
Hash identifier:          Oqgw+YLkIVYQgxQeJSZaus8VDcaJQ4LODU7MW5S9ZMY=
Subject key identifier:   92:94:37:AA:AB:F0:36:1A:A4:2E:3F:CF:E9:00:78:D1:3A:B8:A3:5F
Certificate issuer:       /CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
Certificate serial:       59ACEB224C093003566E68A149485B126D0E4966
Authority key identifier: 79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa
Signing time:             Mon 01 Sep 2025 15:18:35 +0000
ROA not before:           Mon 01 Sep 2025 15:13:35 +0000
ROA not after:            Mon 31 Aug 2026 15:18:35 +0000
asID:                     265943
IP address blocks:        131.196.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ac:eb:22:4c:09:30:03:56:6e:68:a1:49:48:5b:12:6d:0e:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
        Validity
            Not Before: Sep  1 15:13:35 2025 GMT
            Not After : Aug 31 15:18:35 2026 GMT
        Subject: CN=929437AAABF0361AA42E3FCFE90078D13AB8A35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:bd:a5:45:94:0a:c0:c0:4b:40:58:90:49:
                    6b:50:2a:a3:b6:6c:d6:fd:32:87:c7:a8:65:81:03:
                    3f:99:bc:88:42:8d:91:cb:88:9d:e1:48:6c:be:8d:
                    ac:0d:4e:a9:0b:95:0e:22:da:69:1f:2c:59:1f:0c:
                    89:d4:8b:de:a6:2a:0d:1d:ae:e0:64:bb:53:bd:90:
                    0d:91:ef:25:76:e7:7e:d5:14:13:fa:81:85:3f:bf:
                    e3:94:e3:a3:94:82:f7:7f:e8:a5:08:ce:e7:4d:ad:
                    ea:16:89:5d:aa:54:a2:ae:28:3b:a3:63:76:d3:39:
                    61:92:02:ac:c7:6d:66:57:a4:f8:94:1d:b2:01:47:
                    df:cf:4c:aa:53:32:12:c7:91:97:cb:31:96:ac:a7:
                    b6:d6:a7:30:21:20:49:b2:e9:04:ff:f7:fa:3d:f6:
                    ca:a0:49:f9:3b:6d:7b:56:a4:04:4f:97:78:79:d8:
                    ef:81:40:a4:16:e1:c6:e4:14:39:7c:87:9b:8e:85:
                    a7:38:8a:d5:1f:20:11:82:a3:a3:6e:61:e8:d6:ee:
                    5b:39:05:2f:ac:99:b7:32:dc:1a:66:81:b2:10:27:
                    74:09:d9:b5:94:79:9b:20:f5:fa:6c:cc:8f:25:7a:
                    6d:69:9a:9f:3c:0a:6d:45:68:84:74:5d:86:81:7d:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:94:37:AA:AB:F0:36:1A:A4:2E:3F:CF:E9:00:78:D1:3A:B8:A3:5F
            X509v3 Authority Key Identifier:
                keyid:79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:1f:5c:d1:93:3d:64:a1:8d:8f:8d:3e:12:15:02:aa:ec:24:
         09:58:58:8b:a2:0c:4f:70:ac:16:a6:77:cd:14:c4:a1:4d:98:
         0d:55:ca:21:f3:65:b9:cb:d5:aa:37:9b:5e:25:01:b5:e3:ca:
         db:4d:86:45:6f:42:db:c0:6e:aa:51:0a:17:83:ab:37:57:92:
         d3:6c:1d:28:48:c9:a1:85:62:37:f2:d2:24:de:2d:57:4f:1f:
         14:5b:0e:d9:b7:f8:20:de:44:04:19:de:01:ea:ac:23:a4:c2:
         0b:3d:5a:c9:2f:13:21:6d:27:f6:59:10:9a:71:5d:77:69:64:
         d8:34:be:67:5a:17:ef:2d:a3:40:fa:be:8e:a4:e3:d2:58:c3:
         ed:42:fb:8f:f8:a0:34:b5:b4:d9:38:03:34:01:e4:fa:e7:07:
         99:21:6e:2b:a6:75:70:e6:4d:09:24:a2:19:be:56:fb:69:2b:
         0a:e1:92:aa:94:95:d7:11:cf:88:cf:2f:57:a1:f6:76:aa:9d:
         be:d8:e5:d3:6f:6c:97:63:52:07:7d:50:9b:6f:32:ce:34:70:
         20:70:f6:5e:e4:fd:f2:bb:bc:b8:58:b2:d4:ce:c8:dd:77:b0:
         e6:20:d8:9b:87:62:8f:dc:da:33:bb:0f:fe:2b:7f:8f:fc:a9:
         e1:29:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:44:50 2025 by rpki-client