Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa (raw, json)
Hash identifier:          5twUD7Zh/RIT+TLiVqk0mnPDet2EfEUHgvjY43xFI+k=
Subject key identifier:   A0:4B:00:CB:6C:3C:43:2C:C8:01:15:48:72:78:D2:93:E6:C2:0F:D5
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       2FEB71740E7AC3F3BEF9085078DBEEDE6C7A0A
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:37:10 +0000
ROA not before:           Mon 14 Jul 2025 15:32:10 +0000
ROA not after:            Mon 13 Jul 2026 15:37:10 +0000
asID:                     264936
IP address blocks:        168.232.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:71:74:0e:7a:c3:f3:be:f9:08:50:78:db:ee:de:6c:7a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:32:10 2025 GMT
            Not After : Jul 13 15:37:10 2026 GMT
        Subject: CN=A04B00CB6C3C432CC80115487278D293E6C20FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:5f:f7:92:c0:fb:29:fb:9e:6d:3a:8f:8c:
                    4f:cd:a7:8f:08:49:b5:8d:2e:ac:60:0d:c8:e4:a5:
                    6a:b3:e2:0d:2f:88:f7:e4:7c:92:8a:06:02:98:38:
                    5b:7d:db:44:11:1b:63:8d:ea:a1:2c:6b:2d:c1:d2:
                    bd:2d:a4:73:2c:83:ca:c2:9f:61:63:0c:4b:c6:c9:
                    e5:c4:27:30:2d:24:6a:6c:62:ac:8d:d4:c8:3c:e0:
                    b2:9f:f6:e3:14:89:a0:47:b3:dc:cd:5c:bb:db:f4:
                    d0:e4:95:41:a4:7b:c2:dc:48:a0:4d:68:82:94:ac:
                    8c:a6:4a:d8:cf:b9:cc:ff:b5:7e:3a:40:fb:91:f9:
                    fc:dc:71:b1:44:93:20:ef:ed:f9:6b:50:24:56:fd:
                    ef:8b:b7:10:5e:25:b7:8a:d3:15:67:ae:83:c9:82:
                    9f:7f:40:cb:44:43:55:18:92:d0:75:d8:0b:2f:21:
                    4d:82:bc:f2:ce:b4:57:90:5d:f2:ae:16:13:ec:02:
                    1b:10:e7:17:db:a4:f5:f5:51:27:49:c6:86:0b:31:
                    cb:ee:0b:c1:bc:a6:12:7f:85:12:39:10:73:db:12:
                    0d:b1:14:b6:c9:77:82:ff:c0:2b:10:1e:04:3b:56:
                    b5:ac:48:7f:5e:52:29:14:46:d7:54:ce:b1:4f:69:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:00:CB:6C:3C:43:2C:C8:01:15:48:72:78:D2:93:E6:C2:0F:D5
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:bc:5a:83:d6:89:19:05:b4:0b:ee:82:4e:21:9a:b7:78:9a:
         d5:01:cd:fa:f5:62:6f:92:08:96:c8:ee:63:8f:4f:0a:c0:c7:
         64:95:a6:3e:f6:43:d7:ac:37:2d:f7:0f:f8:2d:15:36:20:9e:
         7f:7e:81:9c:ae:31:33:70:ad:25:57:18:fd:4c:6c:18:ca:cf:
         5e:b9:57:84:a7:53:f3:5a:9a:65:4f:03:ed:24:72:14:2d:bd:
         86:81:44:05:21:6a:10:d0:3c:a3:e4:d7:d3:91:fd:56:70:ae:
         31:8a:54:89:82:ee:0b:cd:2e:39:4f:4d:42:39:f4:37:43:88:
         43:3b:c9:e2:ab:25:25:35:15:c0:53:6f:7e:ab:48:4e:fc:bf:
         0b:01:10:7c:4c:16:73:9f:0d:1f:9f:68:b0:97:83:8d:ba:95:
         92:55:e9:28:1b:95:d5:01:3e:c2:cd:4e:53:75:d1:3f:2f:ad:
         a3:a3:d2:6c:d0:d9:2c:13:e0:2a:0f:e9:c5:f3:9b:80:8e:35:
         76:a2:1c:6c:9f:91:45:94:87:48:97:b4:ec:51:b3:d8:1f:ef:
         2a:f9:96:81:7c:10:67:22:51:cd:9d:76:c1:b3:ee:fc:54:4e:
         21:c7:e3:ca:2e:59:d3:b3:a5:7a:9f:4d:5f:9a:f3:2a:df:17:
         89:a5:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:12 2025 by rpki-client