Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
File:                     3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa (raw, json)
Hash identifier:          JJZKUZ0Hjw5xvjebjVCtWt8q/R8lEj0ymhwVOumMFOs=
Subject key identifier:   39:AD:9E:F4:D5:F5:85:47:9D:63:0C:EE:4D:E0:4B:F6:6E:A2:C1:DF
Certificate issuer:       /CN=02DC74163A88F81D8B63F23F57A7016D972478F4
Certificate serial:       61A2407A2D27B19CB0A1495541EFB9280BDAA5FD
Authority key identifier: 02:DC:74:16:3A:88:F8:1D:8B:63:F2:3F:57:A7:01:6D:97:24:78:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
Signing time:             Tue 29 Jul 2025 18:54:40 +0000
ROA not before:           Tue 29 Jul 2025 18:49:40 +0000
ROA not after:            Tue 28 Jul 2026 18:54:40 +0000
asID:                     265455
IP address blocks:        168.196.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.crl
                          rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 03:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a2:40:7a:2d:27:b1:9c:b0:a1:49:55:41:ef:b9:28:0b:da:a5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02DC74163A88F81D8B63F23F57A7016D972478F4
        Validity
            Not Before: Jul 29 18:49:40 2025 GMT
            Not After : Jul 28 18:54:40 2026 GMT
        Subject: CN=39AD9EF4D5F585479D630CEE4DE04BF66EA2C1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:94:21:b9:92:b0:4c:73:26:bf:05:b0:53:
                    44:3c:16:e1:6a:0b:eb:ff:e8:56:d9:7c:5e:f7:ab:
                    88:f0:64:16:be:33:cb:ac:89:d1:df:8e:89:95:ce:
                    3e:fe:48:3c:89:a9:15:db:d5:71:18:b6:7e:93:07:
                    19:a3:58:c6:b4:e1:7d:39:f5:d6:a6:4b:aa:d0:53:
                    f5:6e:90:c9:34:ac:f5:02:22:e3:d4:82:4b:a8:8d:
                    97:a7:14:fc:ca:75:b2:f5:cb:e3:18:13:73:c4:a6:
                    ab:64:83:83:03:7f:21:6f:bd:8d:a3:5e:11:7c:bc:
                    cc:6c:f7:37:cd:84:c7:ba:9d:9a:86:80:3d:50:99:
                    83:e1:c6:7b:ba:d7:0c:a4:72:d9:0c:52:92:f5:20:
                    c6:e0:08:3f:81:cb:03:bc:f2:8d:2d:ff:f1:d4:0a:
                    62:49:c9:00:5f:bd:df:d0:6b:ee:d2:b7:cf:e1:b1:
                    76:44:8e:62:a7:d0:9e:54:63:8e:95:5c:7f:79:2b:
                    4d:33:b3:2e:05:6f:2b:50:3f:47:01:3f:7c:b0:4d:
                    ca:a4:45:e3:78:bc:b8:a9:65:7c:af:30:fe:e9:f4:
                    e6:1f:04:6f:6d:70:8f:56:91:56:ac:d1:21:b7:9d:
                    f3:4d:5a:dd:87:df:6e:39:03:86:a4:c6:b3:f1:ea:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:9E:F4:D5:F5:85:47:9D:63:0C:EE:4D:E0:4B:F6:6E:A2:C1:DF
            X509v3 Authority Key Identifier:
                keyid:02:DC:74:16:3A:88:F8:1D:8B:63:F2:3F:57:A7:01:6D:97:24:78:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:64:71:dd:55:ad:1b:c4:d7:81:1c:14:a6:96:f0:90:ee:
         b4:c0:7b:73:9f:c0:4b:1f:d7:5d:a1:1e:26:ba:68:ea:82:9d:
         a4:cc:64:43:f4:a1:2f:ca:06:08:f3:85:90:9c:0c:fe:c4:d6:
         09:08:90:31:e5:b7:ed:72:a3:c2:41:1b:c1:17:fc:fb:5c:e7:
         7f:a5:5e:38:8b:26:2e:80:25:d6:aa:62:be:5d:36:e9:82:07:
         32:7c:42:74:7b:ba:60:38:6f:98:ae:7c:fc:bd:8c:5a:7e:49:
         95:74:b8:80:20:fa:3a:94:8c:7c:c0:c4:62:88:22:6d:77:5a:
         cb:9e:7d:ba:92:c7:0f:4b:23:6e:7f:0f:63:5e:40:36:f8:d3:
         a3:a7:ad:ea:4a:6b:30:b3:f8:7d:fd:be:98:6f:ae:46:03:f2:
         88:85:7b:19:88:83:d3:ed:b3:de:9a:a5:3a:7c:76:f2:b3:28:
         e0:7b:b8:83:53:e3:23:d4:7d:0a:c0:9a:3d:c6:4c:12:01:e7:
         72:a0:e3:05:da:07:64:27:90:dd:82:65:0d:50:db:d2:1f:a3:
         03:f9:d7:a2:07:b4:1b:54:25:88:04:70:47:d3:1c:b2:ad:d5:
         1d:71:dc:bb:70:3a:5f:18:cf:cd:aa:f0:a5:25:2f:9d:6d:4d:
         f7:0c:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:09 2025 by rpki-client