Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa
File:                     3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          wDyeqFwsrpg0TiiytYOPIlT87VV15saC+EJVMH6Ut4c=
Subject key identifier:   44:55:01:D6:30:87:E4:37:12:92:A1:BC:0E:A4:C7:20:DC:ED:C7:74
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       6DD8F3C7F94AD92AA8C8B81A4562A1F5F4F3AF73
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:16:40 +0000
ROA not before:           Mon 08 Sep 2025 14:11:40 +0000
ROA not after:            Mon 07 Sep 2026 14:16:40 +0000
asID:                     263569
IP address blocks:        168.232.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d8:f3:c7:f9:4a:d9:2a:a8:c8:b8:1a:45:62:a1:f5:f4:f3:af:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:11:40 2025 GMT
            Not After : Sep  7 14:16:40 2026 GMT
        Subject: CN=445501D63087E4371292A1BC0EA4C720DCEDC774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:aa:7d:72:e2:cf:79:ef:20:c1:c8:2f:45:
                    aa:f8:a0:43:c7:84:ed:8c:4a:42:03:6a:7a:77:8e:
                    06:75:1b:0b:0c:40:8a:ff:93:d6:62:2f:3d:81:df:
                    f3:87:f8:7e:cb:b5:fa:56:14:f8:36:01:c8:fa:78:
                    8c:a2:86:33:dd:5b:6e:3e:8d:49:2e:ef:c1:b6:d9:
                    08:81:1a:b5:07:3a:d2:ee:ba:11:30:4a:38:70:93:
                    1b:a2:d3:c6:c1:fe:2d:28:d3:30:a6:f9:5c:fb:3a:
                    e6:da:2b:28:13:07:ba:76:54:35:38:54:06:fd:33:
                    bc:3d:a2:7b:47:98:f0:5d:3b:82:a9:a7:33:02:7e:
                    80:a1:b4:56:5e:3f:90:f8:28:10:f5:cb:75:5c:7f:
                    25:01:42:2e:1b:65:8f:a5:18:34:0c:ea:81:9b:78:
                    3e:2c:aa:90:2a:b4:4b:6c:8e:9c:47:a1:d4:c2:a5:
                    32:cf:1d:9b:c8:56:28:12:ad:11:28:ea:05:c5:4b:
                    1a:36:29:a4:14:92:81:6f:79:e2:8b:45:98:d5:1f:
                    a7:cd:b2:3e:88:f9:25:f6:19:53:02:9f:13:60:0b:
                    22:77:de:ca:c7:40:44:7b:dc:a8:76:37:29:aa:06:
                    9f:37:0d:61:af:cd:14:1f:73:ca:3a:b4:c4:d5:2c:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:01:D6:30:87:E4:37:12:92:A1:BC:0E:A4:C7:20:DC:ED:C7:74
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:9b:c4:a4:b6:46:69:1e:fa:12:49:09:91:fc:d3:30:82:
         11:44:be:4d:0f:b7:0a:8e:03:76:d5:6e:6e:59:76:ac:77:54:
         2a:10:79:f5:a5:65:fc:02:3f:f2:82:1d:51:91:6b:0d:6a:d4:
         6c:b7:ef:1c:85:0d:4e:21:e6:41:b0:7d:1b:69:07:24:c4:f4:
         fd:21:1b:4b:72:ac:bb:57:73:b4:49:65:57:01:db:65:75:a4:
         ae:23:91:d3:bb:60:f2:23:66:5a:15:8b:b0:5a:cd:9b:c5:94:
         e5:9c:c6:34:38:ae:a4:87:06:00:21:df:43:a4:88:fb:c5:e5:
         a4:bd:4b:6e:58:7b:9d:fd:24:d9:de:cc:95:c2:f8:43:4a:82:
         13:f5:5f:73:fb:3a:07:99:3d:0c:b6:3f:59:92:f1:f9:47:36:
         f4:f4:cd:e1:d2:9d:13:de:00:0f:a6:0e:b5:e6:1f:2b:37:5a:
         c5:87:0a:ef:85:df:12:2b:81:41:58:72:8b:ed:07:73:a1:c0:
         15:74:12:8b:3f:81:9c:22:04:ea:5e:4c:ce:09:0d:b8:78:22:
         d2:b6:38:69:a6:6c:78:69:02:ab:68:7e:37:26:2d:c1:88:ab:
         2d:f2:e6:53:8e:e7:86:af:1d:35:a0:ab:44:23:fa:0c:86:06:
         f3:3d:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:09:09 2025 by rpki-client