Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa
File:                     3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          J+Tgy2kfJu/ITK8QiOEsF0Jaw56LrKCjOUnnDqqAqYk=
Subject key identifier:   4C:F9:FE:83:39:F6:DA:19:19:96:46:14:2E:49:41:4F:60:82:F4:3A
Certificate issuer:       /CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
Certificate serial:       48685FA4434FEE0684EBE31EDC88493ADD4219FE
Authority key identifier: 48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa
Signing time:             Tue 28 Oct 2025 12:00:15 +0000
ROA not before:           Tue 28 Oct 2025 11:55:15 +0000
ROA not after:            Tue 27 Oct 2026 12:00:15 +0000
asID:                     269194
IP address blocks:        168.181.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 07:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:68:5f:a4:43:4f:ee:06:84:eb:e3:1e:dc:88:49:3a:dd:42:19:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
        Validity
            Not Before: Oct 28 11:55:15 2025 GMT
            Not After : Oct 27 12:00:15 2026 GMT
        Subject: CN=4CF9FE8339F6DA19199646142E49414F6082F43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:9a:fc:86:98:4a:0d:36:68:28:30:67:0c:
                    9d:86:4a:17:76:57:f3:e1:25:6f:b9:cd:51:a6:74:
                    57:6e:bf:99:04:42:86:70:ce:c8:67:1f:f1:4e:b7:
                    53:4d:8a:5e:fa:d2:b8:dc:a2:a1:40:f6:28:ea:41:
                    4b:56:b2:44:d7:4b:bd:19:34:69:f2:11:64:93:ed:
                    b3:90:3b:4e:09:5c:46:2d:fd:6b:74:9a:34:49:a7:
                    73:98:10:ab:41:f5:7c:6f:89:3c:e8:e6:c2:42:6c:
                    30:24:b6:af:ee:ab:4c:67:81:b9:dc:d4:93:ad:8e:
                    76:1b:e7:6b:d3:e8:9d:c4:9e:70:1a:48:76:3f:1d:
                    84:92:ae:1a:eb:5a:c2:46:5d:36:d4:09:a2:88:ce:
                    7e:06:a4:25:f0:68:44:ae:27:52:ae:ca:bf:26:e5:
                    7d:74:3c:c7:db:67:71:9b:b2:29:4f:ef:51:0c:96:
                    12:54:b0:98:7e:c8:92:8a:ff:12:9a:8b:ca:25:1e:
                    09:e3:7b:5d:91:4e:aa:5a:9e:c4:67:8f:96:61:b3:
                    29:2a:22:c9:4f:42:51:4d:d4:a4:68:59:4f:ad:6a:
                    9a:c1:7f:4b:b9:17:ee:59:82:52:7f:2f:ee:c7:8a:
                    0a:9f:1c:a4:e0:3f:6b:1b:43:c8:f2:c4:cf:fe:92:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F9:FE:83:39:F6:DA:19:19:96:46:14:2E:49:41:4F:60:82:F4:3A
            X509v3 Authority Key Identifier:
                keyid:48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:1f:19:d6:e9:4f:c6:e1:17:e1:2e:c3:48:12:2e:07:22:
         c9:66:f1:39:e4:5f:66:7a:84:43:53:fb:86:0a:89:68:d3:ca:
         fe:65:cd:47:73:8e:03:79:f1:67:bb:22:b6:06:1c:e3:29:cb:
         06:9b:86:5f:31:af:c7:1c:8f:30:8b:4c:b3:b2:a9:49:62:ae:
         ca:60:f6:12:92:ce:f4:07:c2:4d:29:a8:4f:69:18:9b:ec:3c:
         8b:b3:d4:a7:df:0f:1e:c5:e0:b2:0b:3d:90:ff:5b:77:5c:5b:
         03:9f:2c:eb:3f:50:83:98:72:a8:38:99:79:01:ca:5f:97:61:
         7b:2d:77:50:02:b1:f1:d8:6d:a8:47:fc:02:e4:78:e7:ab:f2:
         8d:6f:da:80:75:47:1f:c4:8d:2e:98:00:0d:e3:09:23:fb:94:
         af:7c:f5:e9:98:26:91:82:8c:e9:0c:4e:fd:78:14:c0:ce:3a:
         5c:e8:53:76:eb:38:6d:6e:77:46:80:a8:52:08:81:26:2c:8a:
         26:b4:14:97:9d:18:ae:25:99:ea:2b:af:69:88:86:e5:b8:2e:
         70:8e:2c:8b:af:c4:d8:6c:2b:d7:e4:f7:8e:c5:1a:e5:17:66:
         d1:e0:6f:42:36:44:12:33:65:50:58:78:e4:83:b0:76:2d:64:
         70:6a:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:56:27 2025 by rpki-client