Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa
File:                     3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa (raw, json)
Hash identifier:          7Tt34PxGfpR4OeSkMfUbr0fVgPsUHf3qgpDaUH7AnEg=
Subject key identifier:   F9:36:74:85:14:69:41:42:E5:B4:F2:B1:DB:BA:75:87:65:7F:6F:15
Certificate issuer:       /CN=8A6FD0B797ED6A627290062BC40CB751266060C8
Certificate serial:       7DAF69DEBD3E938DBDDB9FE4DB76EAD2DF98F8F9
Authority key identifier: 8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa
Signing time:             Wed 06 Aug 2025 13:19:19 +0000
ROA not before:           Wed 06 Aug 2025 13:14:19 +0000
ROA not after:            Wed 05 Aug 2026 13:19:19 +0000
asID:                     262417
IP address blocks:        168.195.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 04:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:af:69:de:bd:3e:93:8d:bd:db:9f:e4:db:76:ea:d2:df:98:f8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6FD0B797ED6A627290062BC40CB751266060C8
        Validity
            Not Before: Aug  6 13:14:19 2025 GMT
            Not After : Aug  5 13:19:19 2026 GMT
        Subject: CN=F936748514694142E5B4F2B1DBBA7587657F6F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:54:d1:22:5f:d4:14:43:56:c8:d7:7a:ed:
                    54:24:9d:fd:e2:38:46:51:c5:52:e1:c9:90:b4:e7:
                    10:fc:ac:b4:44:70:bf:93:b4:ae:d9:f6:f9:fa:8d:
                    54:c3:2e:90:62:24:fb:a6:79:4d:45:2a:10:f2:62:
                    e9:d5:15:ca:ce:b4:22:23:08:88:6b:42:56:7c:be:
                    cc:70:d1:dd:cb:83:b4:e1:f1:b3:49:60:30:e7:5a:
                    4e:fb:4e:aa:ca:17:d4:94:c9:e9:2a:5c:47:fc:84:
                    1b:b5:e8:88:65:4e:d0:12:85:7c:19:b6:9b:1c:56:
                    00:78:20:9e:45:24:79:d9:af:44:12:70:e2:50:8c:
                    e6:67:e6:f0:2c:94:fe:41:a3:9f:d1:d8:bb:2f:45:
                    af:60:aa:e5:b1:5e:c1:29:31:ed:a2:56:eb:70:07:
                    d6:ad:96:d0:78:e7:01:21:41:ac:88:86:02:51:24:
                    fb:2d:0a:b4:2c:6a:df:e4:01:87:fe:3b:16:e2:d9:
                    27:57:71:a7:85:97:ab:1d:9a:41:d3:99:cf:94:c2:
                    ba:d2:4e:17:ce:a4:01:2b:71:09:30:e2:d1:0c:1b:
                    1c:b6:30:96:7d:2d:df:ee:ff:fe:e2:74:65:56:92:
                    8c:e8:77:9f:c9:a3:3b:fb:33:2d:fb:8d:58:c4:b7:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:74:85:14:69:41:42:E5:B4:F2:B1:DB:BA:75:87:65:7F:6F:15
            X509v3 Authority Key Identifier:
                keyid:8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:c1:a4:a9:3f:90:6f:03:9f:fa:78:fa:3b:73:77:fb:03:
         4f:f0:ff:ee:1e:bf:87:57:03:f9:78:5b:64:48:3b:20:f6:db:
         0c:c8:35:cc:57:39:c4:17:b2:0e:bf:89:3c:3a:44:fe:22:b1:
         de:6f:44:ec:84:9d:65:99:18:1e:62:b6:27:41:45:5c:05:63:
         54:67:20:ae:1e:7e:81:12:49:0d:6c:d6:c4:ec:ce:61:69:0b:
         8f:6a:06:09:86:7e:de:55:90:11:da:9f:37:16:90:10:37:a9:
         4c:cc:c7:2f:c4:06:98:fc:f8:5b:e1:0e:ea:4b:7f:eb:6d:e7:
         01:77:e9:1d:dc:36:7f:da:98:26:20:83:40:e7:9e:4d:e8:41:
         f2:ce:bc:06:60:2e:7a:76:8c:19:f1:27:79:34:9e:7e:ed:1d:
         27:64:71:48:97:02:f5:9e:e0:ee:e4:9d:d2:16:d7:8d:c3:a4:
         de:46:0e:d9:86:9e:55:e2:fa:77:04:8f:59:ab:38:ff:0a:ab:
         fb:5a:e4:51:d4:1d:0d:31:1e:7c:85:b6:d8:0d:c8:39:40:3f:
         86:d1:af:85:e6:88:9e:4b:35:ed:fb:66:17:74:fc:b8:40:f9:
         c1:c1:77:66:4d:ba:83:a9:42:6e:62:16:a6:91:41:08:1f:06:
         d6:7f:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:24 2025 by rpki-client