Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa
File:                     3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa (raw, json)
Hash identifier:          koiwBDjB69JBa1B10LfIoi3ua0zkGeSW9TxMhVrd95k=
Subject key identifier:   76:5C:DD:13:E6:83:25:4B:3D:06:88:81:44:5B:1F:2D:F6:00:C4:79
Certificate issuer:       /CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
Certificate serial:       0C72842DDF2A2D54747DC7AD8457E69234FDD603
Authority key identifier: 5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa
Signing time:             Thu 19 Jun 2025 13:57:51 +0000
ROA not before:           Thu 19 Jun 2025 13:52:51 +0000
ROA not after:            Thu 18 Jun 2026 13:57:51 +0000
asID:                     265394
IP address blocks:        168.194.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 10:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:72:84:2d:df:2a:2d:54:74:7d:c7:ad:84:57:e6:92:34:fd:d6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
        Validity
            Not Before: Jun 19 13:52:51 2025 GMT
            Not After : Jun 18 13:57:51 2026 GMT
        Subject: CN=765CDD13E683254B3D068881445B1F2DF600C479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:81:40:b7:9d:8c:47:7f:85:7d:c1:5f:b7:
                    7e:55:21:4d:cb:59:d9:4b:c6:40:47:f3:47:ef:31:
                    3c:13:ab:e8:57:94:80:39:20:2b:b2:36:e0:dc:e5:
                    96:51:a2:a8:dd:26:fa:c6:45:e5:41:c6:93:e2:76:
                    95:93:ae:19:2d:2a:38:ba:e6:74:1d:65:b2:2a:a7:
                    b7:06:60:ab:33:39:be:b1:81:90:da:cc:65:85:d4:
                    58:4f:55:7e:47:1f:e5:13:a0:c2:58:95:1c:93:8c:
                    c5:03:26:4f:ef:df:0c:06:a3:30:f4:ef:ce:8c:87:
                    a6:b7:4e:1e:d9:8f:ad:26:d0:71:25:42:27:a6:c9:
                    7b:4d:e1:c4:cd:59:ea:7c:9f:21:7a:ec:3c:33:c3:
                    02:bf:1b:1d:13:e7:18:bf:38:24:33:19:c9:96:d4:
                    6b:14:84:f6:aa:19:a8:f6:4e:4f:13:57:39:cc:b1:
                    be:01:ef:bf:23:85:97:d0:dc:3c:27:a1:b7:b5:d5:
                    fe:99:f5:5a:31:28:c6:66:e4:89:46:ff:dc:07:d6:
                    56:92:e7:d8:db:45:09:e0:1c:52:4c:e2:c3:24:a4:
                    55:3d:0c:7e:77:ae:55:8b:2b:15:31:c1:00:00:5b:
                    1b:43:a4:dd:c1:39:30:89:88:26:7e:02:51:85:c5:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:DD:13:E6:83:25:4B:3D:06:88:81:44:5B:1F:2D:F6:00:C4:79
            X509v3 Authority Key Identifier:
                keyid:5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:9c:d7:21:bc:05:9d:32:4f:d7:88:71:cb:42:0e:93:37:
         79:da:c9:0e:63:97:ca:60:67:04:e3:fd:2c:45:1b:02:1c:de:
         5b:ec:6d:1e:94:e8:74:42:f1:79:dc:c4:6b:19:ca:57:58:ca:
         a0:eb:a4:f0:70:5b:7a:41:33:9f:c1:36:e2:de:a8:b3:f7:40:
         b3:29:e5:49:67:b9:55:0d:d8:7d:ae:de:cb:62:28:f7:19:e4:
         ed:26:cb:cd:a4:f6:b9:98:75:55:92:55:25:95:3a:d0:d6:61:
         58:ba:8c:8b:c0:eb:3f:c7:f0:34:e7:d1:47:7f:37:c8:e2:cc:
         27:ac:d3:33:be:20:cc:a2:38:d7:cf:4d:5b:44:5b:07:1d:53:
         8f:79:47:d7:18:54:19:d1:01:3f:ff:9e:21:09:56:0a:8d:b1:
         a4:cb:ab:0a:bd:7c:54:1a:86:f1:fb:3b:04:4c:9b:75:99:12:
         8d:85:a8:78:e3:54:03:31:24:8e:dd:7d:61:c7:aa:9e:2d:0b:
         7e:95:e1:8c:c1:07:f3:12:24:9d:76:da:ce:fa:d4:05:51:cd:
         ee:0e:fd:d7:b9:8e:8a:90:87:db:93:53:de:91:f8:ce:7a:01:
         82:6e:2f:f7:9c:a8:7a:c1:6b:24:d2:33:b5:cf:02:fa:19:d8:
         55:02:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 02:48:43 2025 by rpki-client