Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          RO0dMMtpa74Lzkefm8v4BPAHu04y6hf67g6js3TztaU=
Subject key identifier:   C2:3B:EF:BA:C8:98:6C:46:BB:C7:3A:35:E3:21:A0:11:AB:B8:5E:78
Certificate issuer:       /CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
Certificate serial:       3176FD1BB26D74F42C76FB889E6E40A87ED08377
Authority key identifier: 5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa
Signing time:             Mon 21 Jul 2025 16:56:24 +0000
ROA not before:           Mon 21 Jul 2025 16:51:24 +0000
ROA not after:            Mon 20 Jul 2026 16:56:24 +0000
asID:                     265342
IP address blocks:        168.181.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 00:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:76:fd:1b:b2:6d:74:f4:2c:76:fb:88:9e:6e:40:a8:7e:d0:83:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
        Validity
            Not Before: Jul 21 16:51:24 2025 GMT
            Not After : Jul 20 16:56:24 2026 GMT
        Subject: CN=C23BEFBAC8986C46BBC73A35E321A011ABB85E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:7f:86:e3:4d:f7:1c:cd:1b:1c:c3:6d:b7:
                    2c:a4:ad:59:51:94:6c:ea:32:62:d5:b5:e3:45:67:
                    9c:b5:06:fe:eb:8a:ff:7f:a4:a8:90:7f:eb:03:67:
                    64:51:ad:f9:c4:ae:22:8c:ef:5f:54:c9:df:11:88:
                    83:31:03:30:82:6b:2f:12:2d:f2:71:62:bd:15:91:
                    3f:b2:f5:a3:ee:d8:f4:bf:04:30:ba:38:8f:fa:a4:
                    1b:27:8b:3e:18:e0:2f:65:1f:32:8d:b9:c5:83:4f:
                    27:4c:a8:52:67:ec:d5:f7:d5:d4:e0:45:c5:40:ff:
                    d6:e8:bf:79:6e:d5:ae:00:a8:57:77:95:5f:5f:91:
                    d0:5a:d9:ce:8d:1d:d2:12:fe:87:0b:b5:f6:a8:1f:
                    c7:a2:03:8a:65:be:2f:c4:e4:f7:14:9d:9f:0f:35:
                    f9:4d:1d:ea:78:ff:ff:c7:e4:ab:b8:9f:d6:40:21:
                    4a:f6:34:06:df:6b:a2:33:10:94:18:df:c2:79:65:
                    21:fe:5b:17:67:51:e5:d1:5f:8a:76:53:16:ab:fa:
                    98:d2:1c:09:ab:ee:9c:20:b0:79:d1:78:e7:a7:7c:
                    93:84:fd:0c:2d:c1:67:51:fd:ea:12:2d:4f:50:e4:
                    32:93:0f:ac:e6:46:66:19:0c:0c:47:c4:54:ef:03:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3B:EF:BA:C8:98:6C:46:BB:C7:3A:35:E3:21:A0:11:AB:B8:5E:78
            X509v3 Authority Key Identifier:
                keyid:5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137342e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:45:83:d4:0b:6c:d7:bb:80:f1:fe:4a:12:e4:c1:a5:4a:fe:
         e5:d5:83:1e:b6:42:97:68:bb:89:ea:91:71:f8:80:a7:96:0d:
         a0:46:ed:5a:88:21:35:ff:98:78:a0:26:4c:aa:82:6b:e6:fa:
         0d:ec:5f:95:3e:b8:72:a4:44:4c:b3:af:f6:74:9b:19:09:f4:
         8b:52:7c:63:44:60:48:56:8f:44:43:25:28:63:39:d2:ca:d0:
         fd:a3:11:01:1c:a0:fb:0c:ab:c0:1e:0c:ca:21:5e:15:d3:e3:
         17:12:eb:cf:55:13:4c:da:2c:c3:0d:d5:52:ce:1e:60:a7:65:
         70:9a:bd:87:14:9d:51:e5:8f:6b:6f:d9:f0:e2:a5:cb:89:9e:
         36:d1:34:ea:3b:6d:ff:64:7d:d9:85:40:13:53:12:ba:72:72:
         58:c5:a1:9d:df:14:e9:54:14:90:cc:6e:dd:e3:ea:bc:a8:ef:
         44:19:3a:7d:0a:5c:31:ef:11:cf:f3:5f:f5:a6:13:d3:2d:9a:
         4a:9f:6e:9f:07:a5:da:4f:69:ad:93:ee:c3:3c:88:c0:5c:d1:
         15:7e:e8:0a:2b:9c:a1:de:e8:80:22:71:eb:05:26:9a:2d:25:
         bd:46:f7:84:db:61:35:50:68:65:45:61:e9:86:6e:03:75:4a:
         91:83:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:47 2025 by rpki-client