Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          mpaEIjYmj/XIy/pF1Q+slyU9WMnzD38h63KEtX0wXPA=
Subject key identifier:   1F:E1:71:D9:75:D9:A6:E2:F5:5F:C1:F4:44:40:FD:44:00:05:0B:7B
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       29DC527038382C611D097EF0B5EC4673D76BB0D3
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:37:12 +0000
ROA not before:           Mon 14 Jul 2025 15:32:12 +0000
ROA not after:            Mon 13 Jul 2026 15:37:12 +0000
asID:                     264936
IP address blocks:        168.232.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:dc:52:70:38:38:2c:61:1d:09:7e:f0:b5:ec:46:73:d7:6b:b0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:32:12 2025 GMT
            Not After : Jul 13 15:37:12 2026 GMT
        Subject: CN=1FE171D975D9A6E2F55FC1F44440FD4400050B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:b0:15:f2:32:59:0b:be:95:1e:4a:7a:68:
                    9d:71:7a:5b:20:4a:01:bf:8f:07:74:b1:50:73:b9:
                    2b:e2:0b:f0:df:3e:64:0e:9a:90:56:af:a1:96:9b:
                    a0:c2:b3:ca:ba:a2:91:5c:7f:ae:11:6d:23:19:3a:
                    ae:da:cc:d8:49:e7:cf:0e:50:ab:ed:08:af:6f:f6:
                    33:94:4a:74:01:04:a0:07:5a:29:ed:78:28:b9:e0:
                    22:8d:ea:1c:5b:df:ab:4b:8f:62:c5:70:90:9d:2b:
                    21:0b:17:aa:74:25:52:15:9e:2c:c0:07:e5:ec:b0:
                    0e:66:de:05:1e:f3:37:fe:28:2a:4e:20:b3:7e:c3:
                    fc:b7:a3:ee:a9:f9:f0:df:4a:cb:02:a5:32:3b:e3:
                    ca:2c:46:67:de:a7:18:de:25:47:38:72:0f:44:e3:
                    f2:17:b0:09:15:d1:63:a2:c5:9b:1c:9b:9c:d2:ab:
                    fa:57:a1:09:27:f6:92:e8:21:db:8e:02:dc:99:37:
                    db:4d:70:53:2e:50:06:21:c8:fd:c1:1a:ef:1d:41:
                    f3:b7:0b:3c:c9:fe:a1:4c:8d:ab:d8:c8:7a:43:65:
                    fc:92:af:e6:ad:ae:f1:25:b9:76:1d:6a:de:a2:6d:
                    07:ab:b2:38:44:3c:0d:17:5c:5f:76:e4:40:cf:cb:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:71:D9:75:D9:A6:E2:F5:5F:C1:F4:44:40:FD:44:00:05:0B:7B
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:e2:1c:e8:47:61:c1:32:52:11:8e:b1:53:2f:c2:fc:82:
         63:81:6a:b7:0e:14:5e:af:0c:34:6c:0a:bd:2a:d3:fd:15:cc:
         3c:83:c8:8d:8a:13:3a:a9:27:ee:f9:6e:29:3a:88:80:37:51:
         94:3c:43:37:0f:58:87:63:3e:a6:17:b8:10:89:16:56:48:5d:
         cb:99:9b:53:49:07:1b:b1:b5:48:86:04:6b:f4:58:26:b3:6e:
         17:6e:7c:91:58:91:41:2a:21:19:dc:10:1a:28:2d:42:83:44:
         24:a4:86:3f:1f:a8:e1:78:25:e2:91:b1:30:50:8f:c8:bf:44:
         52:02:87:c6:88:df:40:da:0d:b4:a8:36:0c:8d:d0:f0:01:91:
         41:50:9a:f4:bf:ed:b1:7b:77:2a:83:c2:aa:48:01:56:b7:90:
         f5:1e:b2:48:40:58:71:9c:93:65:c8:95:25:35:dc:11:ac:b5:
         a9:92:e6:b6:06:cf:0d:ac:0a:91:89:b2:d9:4b:98:ed:e4:39:
         7d:ae:b6:8d:00:22:05:fc:6f:36:f3:b8:db:5c:72:4c:e8:7a:
         1f:25:35:99:e8:56:65:57:1f:41:de:d9:fb:e0:2b:70:90:55:
         fc:00:78:23:fa:af:a2:f1:45:8d:75:43:3d:3a:b9:ad:4f:15:
         86:5f:bf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:41 2025 by rpki-client