Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa
File:                     3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (raw, json)
Hash identifier:          vEpVHjPoJyD3d/+A39aktl+bol9QiKAklSpPBcpN2Y0=
Subject key identifier:   99:14:64:E9:F4:25:A7:CC:BE:88:1A:94:F2:73:9F:4E:B1:F2:AE:3D
Certificate issuer:       /CN=11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB
Certificate serial:       73177D935ED8B68909AE1B2F2FACC9058C73784A
Authority key identifier: 11:B1:6D:6B:E6:D3:3E:3F:2C:4A:90:0D:8F:26:CF:FE:E6:12:6F:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa
Signing time:             Tue 02 Sep 2025 21:23:08 +0000
ROA not before:           Tue 02 Sep 2025 21:18:08 +0000
ROA not after:            Tue 01 Sep 2026 21:23:08 +0000
asID:                     265246
IP address blocks:        167.250.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.crl
                          rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:17:7d:93:5e:d8:b6:89:09:ae:1b:2f:2f:ac:c9:05:8c:73:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB
        Validity
            Not Before: Sep  2 21:18:08 2025 GMT
            Not After : Sep  1 21:23:08 2026 GMT
        Subject: CN=991464E9F425A7CCBE881A94F2739F4EB1F2AE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:98:d0:7d:69:19:62:f0:28:53:ab:ef:07:
                    90:d1:7f:03:c8:b4:94:a5:f1:89:7c:39:48:e2:9e:
                    6c:a7:13:6f:54:24:5d:d0:2a:97:28:1a:eb:98:aa:
                    27:19:d4:a3:43:ff:4a:d9:8d:79:9a:d8:61:41:9d:
                    75:67:7e:c9:07:24:b8:04:ba:d5:9e:aa:1c:65:ad:
                    5c:79:28:50:c0:41:9f:ad:cd:74:a5:01:d5:58:53:
                    3c:1f:4f:50:f3:0a:00:cf:e4:7b:dc:5b:ae:59:f9:
                    91:6d:38:12:04:c1:51:68:c4:9e:8e:70:6b:4a:15:
                    a6:f8:eb:95:f7:bc:06:32:54:83:2d:b6:33:f4:6a:
                    14:d2:5f:8c:ee:73:a3:96:cf:c8:77:a0:27:d5:e0:
                    ed:85:53:f8:4e:2f:e6:ab:02:52:ce:8a:0e:a5:fd:
                    b1:f8:e7:50:a9:50:2e:5d:d2:30:53:dd:c5:20:0b:
                    79:46:70:45:4b:c3:51:73:8f:76:c8:01:43:94:3c:
                    b6:e9:93:0e:95:11:25:3a:76:f4:65:21:83:de:d9:
                    b6:19:cc:fb:98:4c:6d:d1:28:ca:21:90:9b:98:a6:
                    d7:0e:7a:f0:2b:a5:c5:a5:8a:ff:b7:de:85:8f:aa:
                    9f:6d:8d:c5:fd:20:28:8b:3c:3b:48:85:db:19:72:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:14:64:E9:F4:25:A7:CC:BE:88:1A:94:F2:73:9F:4E:B1:F2:AE:3D
            X509v3 Authority Key Identifier:
                keyid:11:B1:6D:6B:E6:D3:3E:3F:2C:4A:90:0D:8F:26:CF:FE:E6:12:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B16D6BE6D33E3F2C4A900D8F26CFFEE6126FBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:a3:ff:46:d8:c4:75:05:5c:db:0d:0e:3f:ac:86:63:15:
         bb:3c:09:26:e2:d7:e9:57:5b:83:7f:df:1d:ae:73:7e:5a:a5:
         77:b6:47:b6:3e:c7:b9:80:c5:13:4e:4b:d6:c7:d8:81:e9:c5:
         f3:98:fe:03:3f:3c:36:f7:33:02:d7:84:86:4d:53:19:2d:0e:
         b6:84:c3:ac:3c:d9:8e:85:92:06:77:37:eb:56:73:00:9c:d4:
         0f:56:2a:7f:e7:16:ff:32:02:f7:0f:b5:01:ee:2a:03:eb:74:
         e9:68:a2:43:f1:43:9f:8b:db:08:37:f9:25:4f:01:34:5f:80:
         1c:ca:ba:b4:0d:cd:06:6e:02:77:dd:bb:79:85:f5:e4:08:fe:
         2d:70:76:7b:7d:af:5c:0f:99:08:d1:ea:26:73:3c:5f:7e:65:
         93:1c:6e:43:af:e1:85:46:82:00:de:19:5b:15:cb:6a:8e:c2:
         b7:83:98:4e:d3:a8:4f:83:5a:00:31:25:9a:64:a0:28:14:b7:
         4d:f2:95:13:e0:fc:36:0d:e5:8e:7a:2d:f3:58:41:d7:c2:f4:
         a8:1f:53:32:e1:a4:cf:29:6c:c0:ec:98:0f:17:6d:47:c9:08:
         53:d0:44:bf:8d:ae:bb:94:33:0c:d4:7e:62:6b:58:99:0b:27:
         24:da:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:07:18 2025 by rpki-client