Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/3136382e3232372e33392e302f32342d3234203d3e20323731363837.roa
File:                     3136382e3232372e33392e302f32342d3234203d3e20323731363837.roa (raw, json)
Hash identifier:          bSsCJMUE/TJU/1iOCMv7l1i+iTLi3Cvsb9vh7gm6e+o=
Subject key identifier:   08:2D:34:66:D0:C4:71:AB:49:56:0B:02:38:5E:25:1B:62:BA:DD:88
Certificate issuer:       /CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
Certificate serial:       3BDE6AFE9A79B2A1CA51EABFA1AA84CC6993EF07
Authority key identifier: 4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/3136382e3232372e33392e302f32342d3234203d3e20323731363837.roa
Signing time:             Fri 08 Aug 2025 14:13:38 +0000
ROA not before:           Fri 08 Aug 2025 14:08:38 +0000
ROA not after:            Fri 07 Aug 2026 14:13:38 +0000
asID:                     271687
IP address blocks:        168.227.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 00:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:de:6a:fe:9a:79:b2:a1:ca:51:ea:bf:a1:aa:84:cc:69:93:ef:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
        Validity
            Not Before: Aug  8 14:08:38 2025 GMT
            Not After : Aug  7 14:13:38 2026 GMT
        Subject: CN=082D3466D0C471AB49560B02385E251B62BADD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c1:c4:fb:12:d1:21:f2:e6:e8:38:dc:d1:20:
                    cd:bf:a3:97:68:d6:c2:35:0a:89:40:8a:76:54:38:
                    8c:57:50:ff:ce:68:03:81:37:f2:d1:8d:aa:9f:3c:
                    73:0a:7b:08:1f:a8:4a:1b:3d:30:4b:e1:b7:73:05:
                    a5:e6:7d:71:ba:5b:e2:29:24:09:be:2f:49:39:a3:
                    4c:e1:df:3f:78:76:44:66:f7:e1:94:b1:a4:92:98:
                    4c:84:57:4c:38:88:4e:16:26:c5:ed:88:60:7d:5d:
                    8a:27:4b:91:bf:45:4f:49:1a:13:2b:34:53:89:f6:
                    0c:be:6c:a0:b7:4c:e5:12:ee:3b:8b:a6:d3:23:47:
                    64:89:f3:52:a4:12:11:4d:7f:8a:47:96:6a:b8:ad:
                    c0:76:5d:e5:2c:eb:c7:9d:7c:ac:61:f2:5b:7b:5d:
                    c7:45:f4:7a:d8:10:ef:d1:9b:9f:77:cc:d9:83:84:
                    6b:97:c2:dc:e9:0d:87:e5:03:6a:d6:14:86:ac:ef:
                    d1:9f:2e:50:66:4c:77:96:4f:8e:3b:2c:6d:be:9f:
                    90:89:6b:61:96:21:e9:ed:d3:45:b9:df:f7:82:59:
                    5a:51:f9:2b:7b:07:0d:2d:2b:53:6d:42:47:9b:5c:
                    45:59:0e:28:36:3f:4e:07:bd:bb:cd:8b:0c:6c:39:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2D:34:66:D0:C4:71:AB:49:56:0B:02:38:5E:25:1B:62:BA:DD:88
            X509v3 Authority Key Identifier:
                keyid:4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/3136382e3232372e33392e302f32342d3234203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:31:18:e6:55:e8:5f:50:5e:c9:6b:1d:44:18:a2:9c:d2:
         9b:d5:be:1f:20:ff:fe:7b:d7:d9:b2:e4:41:1b:29:de:9f:51:
         20:89:13:ae:bc:07:f0:39:5f:4e:22:6d:c9:0d:db:33:ab:c2:
         05:d4:88:cb:3d:a3:4d:ca:bb:11:a6:44:d5:3f:6b:7e:03:3e:
         17:ae:35:d4:cf:d0:0f:f5:fc:14:3f:3a:89:64:3f:80:e2:0e:
         21:0a:08:2b:b9:91:1c:66:a9:fa:46:29:fd:a7:c3:97:e8:91:
         04:3d:03:65:57:af:9b:64:0f:2e:9b:14:cd:d0:15:d0:40:aa:
         27:4d:ec:41:ad:fe:50:56:2d:53:bc:43:89:3b:63:35:16:b0:
         5f:48:98:69:64:49:60:35:e1:1a:49:f3:3e:56:4a:6b:20:1b:
         99:a8:42:61:9b:f2:5b:7c:aa:2d:51:8a:58:d4:8e:1f:9c:7d:
         df:3f:1a:61:4b:66:41:5f:7f:dc:20:42:3f:2f:39:97:0a:b6:
         69:ae:68:af:51:d0:c0:e4:13:5d:da:d0:46:40:56:27:2f:30:
         8c:50:20:2f:13:47:ae:60:0a:df:f6:df:8d:f8:1d:e2:ca:ac:
         f4:fe:d0:7d:6b:16:92:60:50:46:ab:00:67:7a:55:8b:46:ba:
         2d:59:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:04 2025 by rpki-client