Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37342e302f32332d3233203d3e20323632373635.roa
File:                     3136382e3233322e37342e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          fOR7xVTa/flYT1ZAM81Y6huXUNK2WDLgTE7y7+698cM=
Subject key identifier:   C5:63:98:0C:80:13:34:D3:11:EF:14:F8:AA:FB:D9:7A:56:E1:92:52
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       5E5ACDA3236FA389418D3DD526C82047573AAE86
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37342e302f32332d3233203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:42 +0000
ROA not before:           Wed 22 Oct 2025 20:43:42 +0000
ROA not after:            Wed 21 Oct 2026 20:48:42 +0000
asID:                     262765
IP address blocks:        168.232.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:cd:a3:23:6f:a3:89:41:8d:3d:d5:26:c8:20:47:57:3a:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:42 2025 GMT
            Not After : Oct 21 20:48:42 2026 GMT
        Subject: CN=C563980C801334D311EF14F8AAFBD97A56E19252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:da:5a:c5:db:60:d9:b2:50:6e:72:a7:86:
                    5f:ef:48:aa:0c:8b:e1:72:ac:1b:56:48:f1:61:b5:
                    9f:fd:d0:67:62:d8:58:3a:e5:ef:89:c2:2b:ae:81:
                    44:cb:e9:dd:41:08:3b:7b:31:94:74:d7:c3:8d:37:
                    87:61:1a:45:eb:0d:9d:c5:0e:95:75:e9:71:fc:72:
                    b8:b7:b5:b1:b0:fc:84:9a:89:82:6d:ac:a9:04:68:
                    a1:f1:20:0f:33:36:ac:f0:93:13:f5:24:1f:6c:ef:
                    c4:01:00:cf:be:77:58:a6:15:fc:b9:0b:3a:a2:65:
                    c2:1f:af:da:4d:5c:77:40:28:86:f9:b7:61:86:d2:
                    57:14:e4:c1:ee:5b:2c:ab:8c:8c:b1:3c:49:f0:59:
                    32:b4:c1:33:c6:24:16:11:b0:4d:8c:ac:da:ad:26:
                    8c:6f:85:cc:8f:bd:ce:7c:6f:10:b0:a7:c5:02:fd:
                    98:36:ee:d3:96:97:e7:fd:43:39:3c:57:40:b5:6e:
                    6f:33:6d:2c:14:95:84:a7:e9:a7:32:b9:6d:32:48:
                    a9:ea:49:20:83:67:b5:4e:7b:6a:fb:73:39:15:4c:
                    52:3e:7f:75:78:d9:55:a6:0f:77:45:53:f5:73:95:
                    92:7e:e0:35:94:9f:1d:70:f2:0d:0e:70:3a:d1:61:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:98:0C:80:13:34:D3:11:EF:14:F8:AA:FB:D9:7A:56:E1:92:52
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37342e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:9d:49:38:12:15:17:40:67:54:10:22:4f:aa:4c:ee:b6:
         ac:b6:6e:00:0b:15:03:65:86:70:7a:ea:f0:dc:b9:20:8b:83:
         76:9f:b6:7b:96:39:f9:d4:7d:74:2b:85:b3:30:29:85:8a:60:
         44:07:24:5e:66:ed:05:0e:1d:2a:43:f4:16:cb:ce:39:61:98:
         2f:67:85:26:be:5b:c4:37:93:2a:8f:ea:64:86:e4:12:4d:1c:
         ab:69:a7:f8:dc:2b:be:a8:fc:d3:c6:d8:a7:5a:ae:fe:6f:67:
         69:60:f4:d3:5a:50:d1:e8:89:39:75:44:f5:f5:9d:52:e0:11:
         4d:19:31:f6:38:9f:47:90:1d:8c:e0:8f:08:eb:c9:d0:38:68:
         1e:73:2e:fd:2d:32:d2:5a:8b:40:b8:fb:f0:91:45:f7:8e:4e:
         33:ae:c6:08:54:be:6f:11:42:ba:d7:2f:b8:4b:75:71:87:bf:
         ea:f8:1f:fc:85:e0:97:02:c5:f3:5c:a1:13:34:2f:ec:b6:98:
         0a:7f:11:28:f1:20:7c:af:5f:a0:62:7b:07:95:12:5f:ca:3b:
         41:36:78:92:bb:a3:69:5a:94:cf:4a:b6:5e:8b:95:b7:a7:13:
         88:3f:66:c0:1d:29:49:e4:24:7b:9c:f9:06:5f:7d:0b:86:c3:
         10:2b:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:42 2025 by rpki-client