Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136362e302f32332d3233203d3e20323635343638.roa
File:                     3136382e3139362e3136362e302f32332d3233203d3e20323635343638.roa (raw, json)
Hash identifier:          c0MRWi8892PKqA6fiyKe1jwBFf2NJQ97WuulZ1l5hc8=
Subject key identifier:   36:74:EB:FF:47:D8:EA:A3:8E:F9:04:16:54:03:1F:15:4E:5F:34:1C
Certificate issuer:       /CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
Certificate serial:       5F28D32B8405AB5EDDB05DFD027B76B8469B3981
Authority key identifier: 14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136362e302f32332d3233203d3e20323635343638.roa
Signing time:             Thu 30 Oct 2025 17:56:31 +0000
ROA not before:           Thu 30 Oct 2025 17:51:31 +0000
ROA not after:            Thu 29 Oct 2026 17:56:31 +0000
asID:                     265468
IP address blocks:        168.196.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:28:d3:2b:84:05:ab:5e:dd:b0:5d:fd:02:7b:76:b8:46:9b:39:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
        Validity
            Not Before: Oct 30 17:51:31 2025 GMT
            Not After : Oct 29 17:56:31 2026 GMT
        Subject: CN=3674EBFF47D8EAA38EF9041654031F154E5F341C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:eb:7e:7b:58:52:8f:12:92:1a:d4:4c:93:
                    63:4f:76:ce:00:40:32:39:b4:a1:a1:ae:5c:9a:c8:
                    c3:ba:ba:69:15:94:87:b7:92:ab:b4:d6:36:b0:b4:
                    8b:81:3d:dc:58:83:a5:9a:55:a7:73:aa:19:5a:72:
                    c9:96:7b:5e:33:6f:64:83:99:18:8d:8a:54:8e:9a:
                    4b:c6:6a:62:49:5f:33:af:3e:da:e5:ae:04:71:54:
                    8c:2d:c2:ed:98:fc:ab:3d:18:b0:c7:7f:1f:d8:d0:
                    77:4b:a3:02:1c:85:22:ed:5e:12:7b:c2:5a:fc:ae:
                    5f:b9:3c:47:3d:58:39:72:c3:4f:d3:3b:64:68:6c:
                    ae:77:71:e6:e4:3c:55:09:e0:c7:1f:87:89:d3:f6:
                    97:0f:21:27:58:9b:ac:12:cd:d3:78:e3:12:7d:c1:
                    48:8a:36:0d:dd:b2:63:60:ec:9a:c8:2a:02:7c:95:
                    34:43:38:a7:3e:40:dc:bc:40:a9:ef:ea:68:82:1a:
                    06:bb:9a:b9:e0:ab:f8:cd:a6:ff:78:3b:e7:be:d2:
                    0e:4b:70:5a:fa:f0:f7:cb:6b:c8:9d:18:0a:df:2d:
                    ed:21:78:88:aa:9b:bd:f4:64:68:ef:68:ec:d5:6d:
                    51:99:48:96:70:9c:e0:f6:70:ab:f9:3b:5a:73:27:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:EB:FF:47:D8:EA:A3:8E:F9:04:16:54:03:1F:15:4E:5F:34:1C
            X509v3 Authority Key Identifier:
                keyid:14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136362e302f32332d3233203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:4a:d3:e5:e2:d2:e9:ed:3c:b7:1c:e4:5f:04:91:72:aa:
         cb:6a:ef:31:33:6c:f8:3f:21:40:b5:5b:e5:3f:fe:00:61:b7:
         7a:c6:48:1b:59:98:5a:d6:0b:ed:5b:8c:af:f6:97:c6:cc:09:
         91:4c:26:e0:5f:cb:2c:e9:ba:cb:2b:56:f7:50:83:b4:63:35:
         32:b6:36:fe:41:30:24:bb:d9:d1:52:58:72:be:d0:75:90:0d:
         b9:e4:d0:52:76:33:d8:50:7e:c9:c7:09:cd:7c:31:23:54:68:
         12:f1:9d:52:6a:2d:fe:0b:be:6b:1f:0d:a3:75:cc:33:6e:3a:
         b2:c7:de:4d:e0:ac:34:32:44:d4:5b:33:d4:b1:14:d9:4f:21:
         7a:87:51:ef:50:c8:d7:47:9f:fd:6e:45:85:1b:41:c1:24:e6:
         a1:04:8a:22:80:8f:1b:f6:be:33:af:60:79:15:85:1e:19:a4:
         ea:d3:cf:e7:9e:a8:c4:73:44:41:c8:88:94:9d:40:6d:d3:01:
         cc:80:0c:9b:d9:0c:c4:18:a3:b8:91:ef:55:c5:76:99:8f:77:
         81:37:46:7c:d2:ac:5a:8b:f4:9c:6d:ec:8d:b8:91:a6:97:33:
         09:ee:4f:d3:0d:1d:b0:22:65:be:a0:bc:54:71:fe:eb:bb:8a:
         e9:99:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:24:25 2025 by rpki-client