Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
File:                     3136382e3230352e38362e302f32332d3234203d3e203532373830.roa (raw, json)
Hash identifier:          uzJiJtHLzj8MIw2PxWpTEx0LMVb/f1C0eKpIxx0Iz4Y=
Subject key identifier:   36:3B:11:1F:6A:E8:AE:B3:8E:9F:42:C9:CA:2C:3C:F4:EA:22:90:FA
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       6F9BB38954D122760BA526520002CB472F3B55B6
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
Signing time:             Thu 31 Jul 2025 13:40:33 +0000
ROA not before:           Thu 31 Jul 2025 13:35:33 +0000
ROA not after:            Thu 30 Jul 2026 13:40:33 +0000
asID:                     52780
IP address blocks:        168.205.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 08:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:b3:89:54:d1:22:76:0b:a5:26:52:00:02:cb:47:2f:3b:55:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Jul 31 13:35:33 2025 GMT
            Not After : Jul 30 13:40:33 2026 GMT
        Subject: CN=363B111F6AE8AEB38E9F42C9CA2C3CF4EA2290FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:b8:ab:11:9e:24:71:31:e6:dc:a6:6b:f2:
                    59:6f:fc:fc:19:31:87:2e:1a:d9:65:09:dd:d3:48:
                    80:f8:44:49:42:31:4f:a5:ab:dd:8c:ed:d1:d5:9a:
                    05:f6:8d:25:13:be:37:df:16:8c:e3:1c:13:32:5f:
                    d7:cf:e0:35:3e:5b:b8:32:af:37:d4:e8:d7:e2:a1:
                    b3:8f:7e:05:10:e6:63:33:74:c7:58:28:7a:38:65:
                    e5:3f:5d:41:20:34:ba:ad:b2:e5:42:0a:17:47:6b:
                    b4:d2:5a:87:f6:16:1c:05:e0:e1:cb:bc:80:2a:17:
                    3b:6d:68:e2:65:d5:f2:ec:db:87:b6:b1:0a:d5:69:
                    8a:a2:2f:04:26:0c:db:d1:16:fb:cb:da:1a:34:f4:
                    db:e8:a9:fd:34:36:c7:3e:92:06:57:1e:51:01:c7:
                    ad:3c:cc:39:5d:de:85:76:97:cc:21:b5:66:af:03:
                    65:1e:72:6b:77:a3:ad:9d:54:4a:d4:6c:84:24:0c:
                    20:57:b9:be:42:86:50:34:fb:df:94:4c:5c:c0:0d:
                    68:c1:02:81:4e:df:55:42:f3:41:5d:3a:dc:ac:b9:
                    c8:e5:cc:d4:4b:72:17:15:be:e0:b8:47:92:7d:9f:
                    f3:15:7e:21:e3:04:80:00:0f:f2:8f:00:b2:6c:d1:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3B:11:1F:6A:E8:AE:B3:8E:9F:42:C9:CA:2C:3C:F4:EA:22:90:FA
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:12:71:a4:71:9a:19:94:76:d6:98:d3:0d:8e:73:b0:17:21:
         60:da:b3:de:e6:65:98:df:6e:85:45:16:e7:16:96:88:e2:1f:
         2d:13:24:ec:d3:39:98:70:47:a6:44:e2:2e:91:33:e5:90:ca:
         2b:fe:e8:5e:36:9a:43:7e:41:7b:ac:9a:94:bb:f8:ce:9f:38:
         3a:0c:c5:27:f2:32:0d:cd:bf:d0:82:73:27:73:d9:47:db:05:
         65:4a:04:51:54:6a:ca:a3:10:40:16:57:a8:2e:9e:eb:52:83:
         50:52:0b:ed:c3:45:f1:a3:4d:23:a5:90:4d:95:a7:ec:bd:0d:
         15:88:3a:c2:18:a0:b5:8f:a3:b7:14:fb:9a:b1:21:15:db:96:
         76:8d:29:2d:ba:b5:a3:eb:1b:1a:c4:a0:d1:53:7d:e6:1a:13:
         8e:04:7a:8d:ee:2b:f5:d7:c3:f7:2e:bc:a1:8b:f9:81:ad:74:
         32:15:98:ac:c5:8c:7b:b1:48:c0:29:4d:dd:c0:ba:50:2c:72:
         8b:f8:af:15:65:9d:b9:26:21:91:ad:16:50:fe:8a:ac:45:15:
         46:ea:18:8b:c9:e6:92:da:34:ad:fb:e9:87:b3:48:50:da:d0:
         27:10:c8:05:5b:b5:bc:d8:6e:45:f3:b0:ab:0a:6c:70:3a:27:
         81:3a:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:53:18 2025 by rpki-client