Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa
File:                     3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa (raw, json)
Hash identifier:          ld3RxMFnBkzGOi+8wtSuRvsqEIBpCAObI+PW4ttFO7E=
Subject key identifier:   53:37:F8:B4:C8:90:FF:CA:0C:C0:2B:D8:3D:A8:AD:1E:C8:3E:36:05
Certificate issuer:       /CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
Certificate serial:       5097ECA3AA0384D9AE29DE4FDD03D095B7D52B27
Authority key identifier: 14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa
Signing time:             Thu 30 Oct 2025 17:56:23 +0000
ROA not before:           Thu 30 Oct 2025 17:51:23 +0000
ROA not after:            Thu 29 Oct 2026 17:56:23 +0000
asID:                     265468
IP address blocks:        168.196.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:97:ec:a3:aa:03:84:d9:ae:29:de:4f:dd:03:d0:95:b7:d5:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
        Validity
            Not Before: Oct 30 17:51:23 2025 GMT
            Not After : Oct 29 17:56:23 2026 GMT
        Subject: CN=5337F8B4C890FFCA0CC02BD83DA8AD1EC83E3605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:3d:d1:c7:8e:8c:fc:57:15:4f:75:99:6d:
                    ba:22:10:e0:dd:d3:74:1a:af:60:56:ba:e1:79:80:
                    58:7a:6d:84:59:9d:c6:90:dc:30:1d:21:2b:a0:ed:
                    a5:52:23:d1:53:9b:ba:d2:3a:12:36:9d:fb:75:b7:
                    08:f1:8c:46:a6:35:ce:2a:d2:f8:41:9d:37:51:94:
                    fb:12:be:9d:35:e9:42:9c:81:79:ea:b8:76:d0:e0:
                    1b:71:7d:1a:dd:89:59:81:52:c5:95:1a:10:8d:d4:
                    23:10:73:09:eb:9d:96:eb:15:af:bf:45:52:11:10:
                    97:3b:1e:f1:42:71:e7:57:d1:a3:f7:89:01:ae:1e:
                    04:bb:39:eb:b3:17:08:a0:08:a8:aa:fd:eb:8c:3b:
                    80:e8:42:b2:3b:e9:3b:d3:76:0b:38:07:c8:14:29:
                    09:0f:06:b8:b8:b9:30:a0:1f:7d:37:b9:28:bc:46:
                    e4:bb:dc:77:24:83:2c:a5:e2:62:10:b9:a4:57:39:
                    f4:e7:af:af:91:5e:4c:7c:61:71:22:d5:0c:65:e8:
                    04:b7:3e:2f:ec:96:cb:3a:72:f0:0d:59:e6:88:ca:
                    b0:23:a8:37:ec:26:c9:62:b3:7a:a3:a7:49:23:2b:
                    2d:42:cf:ce:91:6b:db:85:a6:6a:d5:cd:aa:97:3c:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:F8:B4:C8:90:FF:CA:0C:C0:2B:D8:3D:A8:AD:1E:C8:3E:36:05
            X509v3 Authority Key Identifier:
                keyid:14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:72:44:4f:d5:68:cd:1e:06:f7:42:9a:37:f0:9c:a0:d6:2b:
         c9:af:c6:aa:2e:ad:47:2a:38:eb:be:f9:37:12:50:0e:12:ba:
         da:16:e0:4e:09:7d:d7:45:4d:f9:fe:60:45:d6:30:1f:cb:9c:
         e1:65:3b:8a:0a:31:b3:0f:02:01:8a:fa:18:7a:4d:87:8b:6e:
         6b:28:72:57:d2:70:6a:28:a4:db:3f:01:67:5d:06:81:f1:b8:
         64:fa:e1:e7:95:f9:0e:a4:04:f4:77:ed:49:5d:57:78:90:9d:
         fb:eb:1d:7a:69:d7:de:88:b0:58:95:1c:eb:42:5e:a4:a5:72:
         9f:09:86:f4:da:cc:02:ae:b5:52:50:1f:bc:19:3b:f7:6f:21:
         4d:31:20:0e:9c:c8:ad:a8:45:1e:f1:0c:8d:6a:2f:09:13:16:
         0e:c3:d3:99:09:1d:71:e3:61:7f:fe:e0:b2:e1:2f:d8:45:9a:
         b4:a4:4b:51:d3:3c:09:c0:43:bc:e1:db:98:5a:87:2e:b4:75:
         9a:af:d6:76:9d:28:d4:1b:27:fd:4c:28:24:7c:78:30:80:e0:
         56:de:80:84:b5:d7:62:65:45:30:8f:7a:49:99:6c:06:4e:25:
         80:77:76:b8:0c:a7:9a:6b:9b:b4:8b:38:32:7c:49:46:55:31:
         ba:aa:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:46 2025 by rpki-client