Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
File:                     3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa (raw, json)
Hash identifier:          hzbPMFwjiE9CZECQQr8LGdmmRPWb2T2MZU8uRpQZvDs=
Subject key identifier:   CD:5A:4F:FB:04:83:BF:B8:A4:B5:33:5E:BF:B8:32:8C:91:C7:36:2E
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       3BD178F03029E0575A59E9290BECDF6BE24402C0
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
Signing time:             Wed 11 Jun 2025 11:53:27 +0000
ROA not before:           Wed 11 Jun 2025 11:48:27 +0000
ROA not after:            Wed 10 Jun 2026 11:53:27 +0000
asID:                     265465
IP address blocks:        168.196.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 17:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d1:78:f0:30:29:e0:57:5a:59:e9:29:0b:ec:df:6b:e2:44:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: Jun 11 11:48:27 2025 GMT
            Not After : Jun 10 11:53:27 2026 GMT
        Subject: CN=CD5A4FFB0483BFB8A4B5335EBFB8328C91C7362E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:88:2c:ce:cd:6b:c6:ff:71:32:c9:fb:ae:
                    cb:51:1b:80:5a:3e:c9:91:63:9e:33:e9:2b:9b:48:
                    41:88:f0:7c:3a:41:0a:97:c8:28:88:bc:48:a8:a0:
                    54:80:45:21:c7:54:82:3e:fd:3e:fa:5b:62:dd:7c:
                    cf:d1:fa:77:aa:70:b3:15:9f:c4:04:c2:80:3e:20:
                    f2:d2:f2:5d:16:38:a4:34:4d:a7:40:ed:e2:0e:f7:
                    bc:3d:4d:ed:ab:06:68:cd:a2:12:09:29:d3:8c:ad:
                    1d:a0:5d:b7:73:99:c4:98:f5:11:e5:cc:24:3a:22:
                    81:3b:4a:ed:5e:38:93:fa:aa:55:9b:ca:4c:61:a2:
                    06:70:e1:25:60:9c:a7:d3:6b:36:b7:c2:62:a2:ee:
                    2a:d8:a3:4c:af:2d:38:f2:62:11:1f:97:42:3f:8e:
                    be:ce:bd:5f:30:11:e9:76:41:8d:c3:3d:fc:bb:d1:
                    76:c3:7b:d0:12:0d:51:df:05:f1:58:4d:94:7f:f7:
                    66:6e:af:44:ba:54:09:fb:4d:d1:bb:cb:d0:d3:c5:
                    05:ff:38:b9:86:88:9e:12:17:95:05:03:c5:9d:c8:
                    53:41:8e:5a:94:5a:41:bf:ef:9f:30:41:c4:15:5e:
                    0c:ec:bb:6a:1d:d4:32:0b:7d:0e:1e:8f:2c:cb:7b:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5A:4F:FB:04:83:BF:B8:A4:B5:33:5E:BF:B8:32:8C:91:C7:36:2E
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:30:c0:d0:a8:ac:94:ac:1b:2d:1e:79:67:24:b5:0b:70:
         59:14:c7:71:0b:27:20:9c:d2:c0:2e:f7:79:1c:aa:ec:bb:eb:
         7a:4c:29:4a:b9:d7:a8:ce:f4:9c:ab:7d:41:49:a1:ed:b1:62:
         28:05:55:b3:3a:dd:bf:24:7c:04:7c:12:9a:4b:78:c0:45:b6:
         bd:1b:b1:44:cf:7d:cf:19:47:e5:9b:2f:34:53:d7:eb:08:16:
         be:44:a1:ca:c7:22:dd:62:72:f6:50:c9:c3:c1:a3:9c:b2:34:
         b9:3d:58:1b:fa:af:1a:8e:50:cc:c1:67:4f:35:a0:ee:2e:72:
         69:29:22:30:92:00:bc:46:5f:92:94:f0:6b:a2:d6:fb:79:b3:
         93:cf:ad:76:5d:e2:ec:0a:de:6c:ac:d1:eb:d0:55:e1:af:0a:
         c2:c4:75:62:d0:99:b4:29:d8:df:af:8e:b7:ff:47:33:8f:3c:
         c2:6c:9a:87:80:2e:35:98:13:b4:b5:7f:90:3b:33:c0:8b:0f:
         cb:f8:c3:be:ad:84:20:2f:98:af:71:8a:1b:89:d2:9c:59:27:
         06:f2:cc:5a:c0:e6:8d:4a:27:62:3a:fb:bd:c3:e6:27:29:26:
         60:e6:d3:ff:63:c4:fa:93:2d:31:19:db:43:c3:29:ef:49:73:
         80:35:ad:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO9F48DAp4FdaWekpC+zfa+JEAsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0MjQ5MjY1NDlFNEU1MUM1RDYwNDA1MzJCMzRGNjMw
M0FBQzlCNjAeFw0yNTA2MTExMTQ4MjdaFw0yNjA2MTAxMTUzMjdaMDMxMTAvBgNV
BAMTKENENUE0RkZCMDQ4M0JGQjhBNEI1MzM1RUJGQjgzMjhDOTFDNzM2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnT4gszs1rxv9xMsn7rstRG4Ba
PsmRY54z6SubSEGI8Hw6QQqXyCiIvEiooFSARSHHVII+/T76W2LdfM/R+neqcLMV
n8QEwoA+IPLS8l0WOKQ0TadA7eIO97w9Te2rBmjNohIJKdOMrR2gXbdzmcSY9RHl
zCQ6IoE7Su1eOJP6qlWbykxhogZw4SVgnKfTaza3wmKi7irYo0yvLTjyYhEfl0I/
jr7OvV8wEel2QY3DPfy70XbDe9ASDVHfBfFYTZR/92Zur0S6VAn7TdG7y9DTxQX/
OLmGiJ4SF5UFA8WdyFNBjlqUWkG/758wQcQVXgzsu2od1DILfQ4ejyzLe0s5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzVpP+wSDv7iktTNev7gyjJHHNi4wHwYDVR0j
BBgwFoAU9kJJJlSeTlHF1gQFMrNPYwOqybYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGJLdHFXVFczNXpnZkZQblA4NHl0MnZyTHhEa0oxem9WV0p2Zm9QQTdZ
ZG4vMC9GNjQyNDkyNjU0OUU0RTUxQzVENjA0MDUzMkIzNEY2MzAzQUFDOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NDI0OTI2NTQ5RTRFNTFD
NUQ2MDQwNTMyQjM0RjYzMDNBQUM5QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiS3RxV1RXMzV6Z2ZGUG5QODR5dDJ2ckx4RGtKMXpvVldKdmZvUEE3WWRuLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjEoDANBgkqhkiG9w0BAQsFAAOCAQEAoO8w
wNCorJSsGy0eeWcktQtwWRTHcQsnIJzSwC73eRyq7LvrekwpSrnXqM70nKt9QUmh
7bFiKAVVszrdvyR8BHwSmkt4wEW2vRuxRM99zxlH5ZsvNFPX6wgWvkShysci3WJy
9lDJw8GjnLI0uT1YG/qvGo5QzMFnTzWg7i5yaSkiMJIAvEZfkpTwa6LW+3mzk8+t
dl3i7ArebKzR69BV4a8KwsR1YtCZtCnY36+Ot/9HM488wmyah4AuNZgTtLV/kDsz
wIsPy/jDvq2EIC+Yr3GKG4nSnFknBvLMWsDmjUonYjr7vcPmJykmYObT/2PE+pMt
MRnbQ8Mp70lzgDWtmA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 19:10:07 2025 by rpki-client