Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136352e302f32342d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136352e302f32342d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          pZlvf9sCp+k3qByigPZ6UzN/slmpPnVJNbTYb5omjM4=
Subject key identifier:   1B:1D:5A:80:F0:28:B2:88:AF:5B:7D:21:F6:B0:02:F6:2B:41:F0:89
Certificate issuer:       /CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
Certificate serial:       12F95502186F6281B6A96C3E24542BC72EA1120E
Authority key identifier: 14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136352e302f32342d3234203d3e20323635343638.roa
Signing time:             Thu 30 Oct 2025 17:56:29 +0000
ROA not before:           Thu 30 Oct 2025 17:51:29 +0000
ROA not after:            Thu 29 Oct 2026 17:56:29 +0000
asID:                     265468
IP address blocks:        168.196.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:55:02:18:6f:62:81:b6:a9:6c:3e:24:54:2b:c7:2e:a1:12:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
        Validity
            Not Before: Oct 30 17:51:29 2025 GMT
            Not After : Oct 29 17:56:29 2026 GMT
        Subject: CN=1B1D5A80F028B288AF5B7D21F6B002F62B41F089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:66:45:eb:51:f1:92:8b:f3:00:ac:fc:14:
                    11:bd:e5:43:58:37:74:b8:a2:84:90:94:2d:9f:d6:
                    12:06:0f:e5:cc:17:e9:fa:34:f2:0f:52:60:5b:d4:
                    c2:50:05:ff:f0:dd:07:59:7c:f2:82:12:28:2c:9b:
                    51:04:4f:78:2b:ef:61:90:b4:15:f8:70:09:35:0c:
                    78:ee:ac:ba:55:08:d8:a4:1c:4c:8b:aa:2d:b3:7d:
                    0f:5c:17:d4:fa:8a:36:42:e1:5a:b6:ab:61:9b:e4:
                    6c:d5:cd:a3:47:7a:92:ae:76:c5:44:a2:20:0e:f4:
                    5d:1c:ba:0a:a4:a4:de:77:9f:14:f6:cc:cd:34:7a:
                    e5:1b:40:47:dd:ea:07:d5:35:15:c6:1f:cb:7d:22:
                    82:fb:72:82:fc:80:7b:02:d3:c6:ac:e1:dc:df:9a:
                    9c:d9:d0:88:c7:4c:25:40:0b:83:d3:0e:db:c0:4b:
                    fb:52:fb:fb:39:1b:6b:d9:f1:a7:cb:df:27:f6:2f:
                    ec:ce:2f:85:3c:f6:79:d1:4c:00:98:43:4d:3d:24:
                    dc:48:41:9e:97:7c:c4:4a:5f:45:00:bd:25:26:82:
                    bf:ec:c0:74:c1:47:1e:05:2e:08:30:15:85:c0:db:
                    25:22:0b:ed:c3:1c:7e:f5:bc:ea:5d:cd:28:65:bd:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1D:5A:80:F0:28:B2:88:AF:5B:7D:21:F6:B0:02:F6:2B:41:F0:89
            X509v3 Authority Key Identifier:
                keyid:14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136352e302f32342d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:97:43:a7:a2:eb:8b:e3:ed:f7:3b:29:6b:2a:04:8c:ea:b2:
         69:7e:d6:90:b9:73:88:c4:e5:15:85:26:12:51:f0:09:25:a3:
         77:20:ed:a4:d7:64:6a:36:5e:ff:6c:25:b9:cc:75:79:98:9f:
         54:db:08:a3:23:73:03:46:81:c8:97:b2:80:4a:3e:02:03:b9:
         9b:4d:37:f1:e5:9e:80:48:ee:2c:db:86:c1:7d:48:ba:86:25:
         02:d4:db:91:60:85:e4:b1:87:77:1d:87:f1:64:e2:aa:e0:f3:
         a5:54:a4:c4:e3:ee:71:54:5e:bd:e8:63:e0:7a:bc:f8:96:77:
         f3:76:a2:64:63:21:e5:8b:55:79:90:2d:37:a5:68:77:8f:8c:
         3d:6c:a3:ba:07:de:1b:64:8b:b2:1b:03:e7:ec:39:4d:8f:8a:
         1f:31:f2:f4:ea:0a:b1:6b:e6:51:c8:20:e4:30:91:59:ab:61:
         5f:43:f8:33:3a:a8:0a:fa:d8:50:bb:42:08:4f:b6:f6:29:b6:
         d4:ed:4a:2d:90:bc:6b:a0:ac:a0:64:29:b2:da:e2:45:6d:cf:
         6c:47:c7:fb:e1:4c:0d:c7:a7:95:d9:f2:91:54:0a:d6:57:6d:
         4e:2e:ec:b0:55:6f:3b:6a:af:9a:ad:9b:58:35:ad:0d:38:d4:
         9c:4e:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:23:51 2025 by rpki-client