Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa
File:                     3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (raw, json)
Hash identifier:          2qOT4j6HG0vWun6Vyzh2Pkj1UkPidk6rSXOhaCbNHUU=
Subject key identifier:   DC:9E:42:69:E1:B0:03:A0:B2:12:C7:9F:32:D7:52:95:B5:B6:8D:0A
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       52EF4C103F7C86B05DE61B269683313158567D89
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa
Signing time:             Mon 15 Sep 2025 20:13:31 +0000
ROA not before:           Mon 15 Sep 2025 20:08:31 +0000
ROA not after:            Mon 14 Sep 2026 20:13:31 +0000
asID:                     267263
IP address blocks:        160.238.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ef:4c:10:3f:7c:86:b0:5d:e6:1b:26:96:83:31:31:58:56:7d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Sep 15 20:08:31 2025 GMT
            Not After : Sep 14 20:13:31 2026 GMT
        Subject: CN=DC9E4269E1B003A0B212C79F32D75295B5B68D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:9e:49:bb:f4:10:f2:9a:65:1e:13:53:20:
                    e7:db:ae:23:fc:99:de:b9:01:af:2b:0b:c2:ec:79:
                    3f:b4:4d:8e:b6:5a:45:c0:f4:95:03:d2:6d:55:2e:
                    74:10:98:24:c5:e1:e7:ee:f6:c6:59:0c:a9:b1:c2:
                    58:61:f2:0e:9c:21:df:28:4e:5d:d7:4e:c4:7e:c7:
                    dc:7f:c4:8f:b0:77:42:36:01:ec:23:3f:cd:8c:01:
                    4c:a8:ab:86:d5:24:8d:5f:37:29:23:ea:db:1b:e2:
                    fc:61:e7:3f:5a:57:fc:dc:36:61:34:17:0a:08:d7:
                    59:03:11:36:e8:f7:39:aa:ef:3a:52:dc:5a:5a:57:
                    20:67:d7:64:cb:48:a1:9f:c6:b3:01:28:88:9d:2a:
                    84:e6:53:da:5f:66:6a:48:d4:8e:cf:74:e8:82:ab:
                    61:bc:b8:03:b3:06:1a:a3:50:0f:db:9f:6b:5c:d3:
                    08:af:26:c9:cb:b6:4b:a0:0f:0b:e2:65:36:e6:24:
                    37:87:32:2d:21:7e:ea:a0:a1:b1:9e:94:bc:c0:4b:
                    8a:bc:1f:0f:d7:59:27:e2:fe:6f:e1:60:7a:88:c1:
                    ff:57:cb:02:f8:2c:2e:c8:9f:ab:ad:b1:5f:f6:83:
                    38:5f:0a:a0:0a:2f:44:43:5f:49:b0:99:ec:f6:5a:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:42:69:E1:B0:03:A0:B2:12:C7:9F:32:D7:52:95:B5:B6:8D:0A
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:6d:07:b5:35:64:92:54:98:c4:a5:5f:8d:03:f8:f6:0a:
         0b:fe:40:4b:02:20:e6:9a:56:09:57:74:29:d1:70:f4:53:9e:
         90:b2:a4:f2:4e:d7:2c:3b:27:04:9c:f6:2b:c1:46:53:28:6a:
         45:1c:e1:77:dc:35:d4:5c:4e:3e:c2:0d:01:b4:09:0f:0a:d7:
         17:c6:d1:1e:ea:19:67:50:f8:93:42:70:e7:5b:c4:c8:51:7a:
         2d:06:b3:3c:ad:49:2e:a7:00:fd:53:2a:43:ce:85:3e:22:96:
         d3:16:ba:ff:4d:0f:a9:8b:bc:3f:a6:06:82:39:4c:c0:42:78:
         fc:db:94:f8:c7:8f:92:0b:73:b1:6f:83:51:a8:c5:50:16:54:
         dc:ed:17:8a:33:d0:2e:c5:14:0b:d7:5a:31:e9:3d:52:53:ff:
         18:cd:83:c6:fe:a5:52:04:cf:a9:70:e2:be:aa:cf:70:9b:78:
         9e:b5:d8:23:47:b4:9b:ca:3d:b5:3a:0d:c4:31:db:c9:a9:d5:
         c2:b7:ec:e5:5b:90:88:a2:22:13:8d:bf:d3:00:b7:a1:0f:e4:
         f1:a8:05:39:6f:d6:4f:71:55:98:58:67:95:f8:a3:ac:c7:64:
         03:54:86:a8:20:30:b4:c7:58:bb:c7:35:e0:d0:19:27:b9:7f:
         79:75:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:24:06 2025 by rpki-client