Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          K4qaK2iuFdIQLXT6Z+fj+E6kZK3JcVIymtEqeRhaYKY=
Subject key identifier:   AE:02:29:20:57:A9:4D:78:83:2B:9F:E7:E6:AB:E7:5C:4A:CE:54:85
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       2339178A314D88127018255FE462BA59406F3E83
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:37:15 +0000
ROA not before:           Mon 14 Jul 2025 15:32:15 +0000
ROA not after:            Mon 13 Jul 2026 15:37:15 +0000
asID:                     264936
IP address blocks:        168.232.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:39:17:8a:31:4d:88:12:70:18:25:5f:e4:62:ba:59:40:6f:3e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:32:15 2025 GMT
            Not After : Jul 13 15:37:15 2026 GMT
        Subject: CN=AE02292057A94D78832B9FE7E6ABE75C4ACE5485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:d5:02:06:bd:eb:52:96:b9:5c:d0:c3:35:
                    ff:35:4a:ff:26:ca:a1:bd:00:ac:19:2c:e3:54:6d:
                    3d:1a:89:d3:1b:45:2d:66:4a:3d:af:43:20:e8:b4:
                    6c:4d:3c:7a:db:dd:44:19:3c:e1:50:88:1f:66:16:
                    b3:b7:35:30:bb:03:e2:92:3e:65:e4:87:00:a3:65:
                    f8:25:de:54:3a:f6:49:5b:45:7e:e1:da:3c:ee:d5:
                    ba:74:6b:0a:3b:9e:72:20:62:e0:ab:2a:f6:bf:03:
                    87:0b:f7:6f:2a:03:d4:c2:5c:aa:a7:5f:64:01:1c:
                    f7:b9:38:e8:f1:7f:af:6d:a0:bf:d8:4e:3d:d7:77:
                    e5:74:d1:5d:e2:7e:e3:ca:7f:73:25:5e:cf:bb:5a:
                    27:8f:a4:e8:ba:56:4c:be:f8:a9:ed:d4:a9:b0:2a:
                    e6:b6:59:88:29:27:48:2d:8d:73:19:63:47:68:c8:
                    ac:54:d9:e9:95:e7:32:c1:ad:e5:52:25:eb:39:41:
                    01:a4:95:11:3f:b2:e2:4e:c4:06:81:3b:da:38:b0:
                    1a:e9:53:a1:97:c4:b6:1d:5b:2c:1f:72:c2:59:7f:
                    25:20:36:44:f5:14:39:67:5c:b8:ff:62:f6:a1:28:
                    78:7a:2a:1f:b2:57:62:88:40:f6:14:8f:9a:ff:54:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:02:29:20:57:A9:4D:78:83:2B:9F:E7:E6:AB:E7:5C:4A:CE:54:85
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:0e:53:68:bc:15:a3:10:b5:7f:e5:e1:bb:48:60:0b:56:d6:
         b8:83:f5:6f:12:18:9e:4a:19:19:09:09:ad:46:30:6e:1d:2f:
         a2:d3:36:1c:a9:05:1d:23:b2:e2:1f:a1:3a:b3:6c:b9:0e:87:
         c8:96:d6:d0:5d:f7:86:ae:e3:9b:d7:f8:7e:e1:f0:6e:31:a0:
         e8:57:db:dc:b0:d4:dc:01:c6:c4:c1:84:38:b8:e1:d3:e7:40:
         fa:2b:6f:2e:60:2e:f0:5d:af:1c:11:35:54:22:49:4f:be:d1:
         46:5b:2c:f9:7b:d5:20:21:70:5c:34:97:33:16:09:a4:f0:4f:
         03:5e:ea:5c:d5:1a:49:b0:be:78:aa:05:cd:c9:da:90:b0:f3:
         41:69:80:7c:08:7c:56:37:2c:04:0f:95:1d:b3:a8:5d:4a:88:
         b9:fc:97:9c:c4:f3:3d:44:95:fd:92:d4:b9:18:6c:d6:d9:96:
         73:63:74:dc:0f:78:8c:78:16:41:75:d4:d8:ca:97:b4:e2:81:
         ed:7e:20:89:3f:c9:8f:d0:70:15:66:0c:e1:93:8b:4a:33:e2:
         64:e6:c5:cc:87:c3:a9:9d:57:e4:53:a5:68:46:3e:6d:1b:fe:
         be:79:55:62:7a:f8:88:ee:48:7b:0a:e6:4b:fb:a2:bd:16:f8:
         af:b8:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:19 2025 by rpki-client