Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          lHJVqNZj3vjIqJ5itGDOjs2eirJZAX/am+tl4QT6duE=
Subject key identifier:   8B:81:7E:95:66:2B:72:01:02:51:45:D1:E3:D2:4B:1F:7D:E4:84:85
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       0B9461780B8116B61523804A197C0B689A28DF80
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:48 +0000
ROA not before:           Wed 22 Oct 2025 20:43:48 +0000
ROA not after:            Wed 21 Oct 2026 20:48:48 +0000
asID:                     262765
IP address blocks:        168.232.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:94:61:78:0b:81:16:b6:15:23:80:4a:19:7c:0b:68:9a:28:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:48 2025 GMT
            Not After : Oct 21 20:48:48 2026 GMT
        Subject: CN=8B817E95662B7201025145D1E3D24B1F7DE48485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:da:da:74:10:62:c6:6b:1d:89:a8:c0:80:
                    4d:f7:dd:fe:3e:ff:e0:11:30:7f:f6:79:98:91:0d:
                    03:78:fb:12:96:0a:2d:b1:96:c5:ac:8e:13:9f:90:
                    9b:63:89:ba:26:9b:38:e3:1e:eb:8b:73:d8:62:fd:
                    d3:20:21:2d:8c:74:96:00:0e:3f:fe:e7:be:bb:5c:
                    3f:d9:ce:28:f0:23:ec:69:bb:eb:e4:2a:91:b8:5a:
                    86:23:bd:20:2e:00:1d:ca:db:fe:ff:5f:fa:5d:a1:
                    ba:73:b3:ba:97:4f:1b:cc:a4:76:8d:68:f9:30:6b:
                    c8:b7:ff:b0:d3:ac:8e:53:29:9e:98:da:99:9c:31:
                    86:d4:44:0f:7d:d0:cf:ae:ed:70:3d:90:d8:37:77:
                    15:27:76:08:80:96:b5:c6:0e:eb:d6:33:08:e9:d3:
                    2f:29:41:44:93:44:51:47:59:08:43:6d:51:b8:ee:
                    3a:3e:c2:e0:49:de:ba:e7:70:9f:ae:0d:b5:38:3e:
                    cf:12:6e:ff:00:d0:31:ad:d1:89:01:d0:58:b3:22:
                    27:e3:7f:78:3c:bf:35:e9:7b:1d:33:76:a2:ed:f7:
                    f3:ef:ef:eb:65:6e:35:94:7a:15:58:fb:db:7b:85:
                    44:7e:8c:ae:45:9e:fe:02:a8:ee:fb:8a:5d:e0:bd:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:81:7E:95:66:2B:72:01:02:51:45:D1:E3:D2:4B:1F:7D:E4:84:85
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b5:89:e6:f2:35:bf:36:cd:92:6d:ed:8f:3d:fb:f6:f6:a8:
         21:70:84:67:ee:32:65:9a:69:74:10:2a:2f:65:3c:29:59:b0:
         2a:5f:fd:0c:fe:1f:09:f8:27:af:83:c9:61:07:4f:92:dc:e8:
         f3:b3:81:bc:e6:17:53:09:22:03:bf:f8:7b:61:c9:16:d5:99:
         27:a7:8a:3e:74:ab:f8:b9:93:3d:0f:4c:af:8e:ca:01:e2:90:
         d9:bb:d6:ab:4d:51:f4:a0:f3:d0:02:39:fc:d0:1e:80:01:22:
         16:de:b2:7e:35:d2:4f:7c:a6:8e:5c:8e:e8:83:0b:48:bb:10:
         42:7f:4b:8f:89:b2:a3:67:ec:b0:be:a6:2a:b4:ce:17:64:4a:
         ae:b9:f6:4b:7e:12:fd:88:fd:c9:c3:24:0e:2e:e9:57:04:d5:
         aa:80:8a:0a:01:a1:60:5d:a8:88:19:75:2f:24:15:8e:72:ad:
         2f:ee:4f:61:1f:f6:c2:ca:0b:8c:94:d0:61:e9:84:37:35:ac:
         29:4c:4f:34:26:15:1b:b7:94:00:ef:d0:d5:2b:7d:5c:55:2a:
         d4:8b:58:63:bb:ff:79:ef:f5:2b:26:04:20:d5:d8:11:dd:ff:
         65:93:71:62:73:ec:bd:7e:b1:31:1a:95:43:b4:bb:19:a7:8a:
         18:44:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:34 2025 by rpki-client