Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3139322e3134302e39362e302f32322d3332203d3e20323635333633.roa
File:                     3139322e3134302e39362e302f32322d3332203d3e20323635333633.roa (raw, json)
Hash identifier:          viv6WEcYQ9wasP127PzUD4N3/H85lhBJAWGvYOEG87E=
Subject key identifier:   96:88:76:7B:0A:62:75:0F:92:F3:22:37:1F:41:82:C4:F2:BE:30:FD
Certificate issuer:       /CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
Certificate serial:       3229A90064E74A6ABE07AFF3D5FAC5A8B7E4D6DE
Authority key identifier: A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3139322e3134302e39362e302f32322d3332203d3e20323635333633.roa
Signing time:             Wed 30 Jul 2025 19:17:03 +0000
ROA not before:           Wed 30 Jul 2025 19:12:03 +0000
ROA not after:            Wed 29 Jul 2026 19:17:03 +0000
asID:                     265363
IP address blocks:        192.140.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl
                          rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:29:a9:00:64:e7:4a:6a:be:07:af:f3:d5:fa:c5:a8:b7:e4:d6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
        Validity
            Not Before: Jul 30 19:12:03 2025 GMT
            Not After : Jul 29 19:17:03 2026 GMT
        Subject: CN=9688767B0A62750F92F322371F4182C4F2BE30FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:31:02:ca:5f:2f:15:a2:f4:25:7f:c2:65:
                    cc:60:3f:f6:58:a2:c3:34:cd:3a:24:39:81:e1:c2:
                    03:97:92:75:46:59:77:6a:f3:18:2b:ad:48:d3:34:
                    86:17:3f:d6:1e:5a:c8:dd:51:56:e3:aa:f9:41:1c:
                    81:3c:d3:95:75:8a:fc:3e:24:f4:10:c4:eb:be:9a:
                    cf:54:c8:72:52:2f:d7:c2:cf:2c:f7:ea:16:11:df:
                    01:eb:6b:34:48:2f:bb:86:f7:66:33:eb:37:b5:91:
                    ad:86:06:dd:ba:f4:b4:81:72:9e:da:31:50:d1:03:
                    94:83:95:ca:36:f2:2e:a2:21:14:24:76:69:02:f4:
                    54:c5:28:63:87:49:fb:f5:e0:b4:ab:8b:d7:cb:44:
                    3c:81:5f:a8:3b:6b:32:6f:c8:63:1b:99:b8:ce:7a:
                    b7:56:0e:85:a0:e5:68:f5:d4:e4:ba:7a:8f:f6:8f:
                    2c:56:02:72:3e:c4:8d:e1:d1:36:32:a1:98:03:5a:
                    e6:8f:9d:f6:6d:62:71:ad:fd:08:5d:eb:7a:72:17:
                    2e:f0:8d:47:54:db:9c:d7:11:79:7b:2f:87:de:30:
                    1d:ec:e4:fa:88:fb:e3:65:48:45:08:42:61:a5:42:
                    74:29:a5:eb:7c:a8:b7:3e:80:0b:2f:10:b8:e4:ef:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:88:76:7B:0A:62:75:0F:92:F3:22:37:1F:41:82:C4:F2:BE:30:FD
            X509v3 Authority Key Identifier:
                keyid:A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3139322e3134302e39362e302f32322d3332203d3e20323635333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:8e:94:8b:0b:01:86:ca:8b:b4:9b:18:d4:24:07:79:79:bb:
         37:43:c6:b3:76:3f:e5:98:47:07:a3:11:7f:b0:06:86:bf:b8:
         76:7d:d2:66:24:73:16:a5:c3:9f:51:d5:4b:b6:01:b5:97:42:
         2f:ff:72:40:dd:2f:ae:99:d3:4e:a3:5b:59:20:e4:9a:75:15:
         be:c8:d2:b8:b7:c2:f3:10:ae:44:cb:af:5b:55:a2:b0:8e:87:
         2e:1e:e9:1c:ae:e9:51:e5:a1:cf:e3:04:cb:59:f9:88:e1:13:
         88:55:cf:f1:b7:56:60:1f:b9:5c:13:67:8e:3c:ec:90:d3:ba:
         4a:e3:98:b4:2c:3a:44:83:65:a3:15:dd:e5:02:2e:ce:85:04:
         35:95:52:dc:05:4d:4a:64:cb:c7:b5:25:bd:1a:b6:91:15:34:
         2c:d5:49:d4:03:4e:cc:ea:8f:f3:b7:97:56:95:a9:a7:dd:d9:
         91:60:83:3b:87:2b:a8:65:da:99:c2:dc:f9:5f:dd:6a:06:b0:
         be:f4:20:d4:7f:df:39:8c:a8:e0:f4:67:05:82:8d:e5:49:38:
         5c:86:50:59:cb:ab:1f:26:50:d2:5d:e4:e5:00:bd:6a:90:d2:
         d5:46:e0:30:a1:43:e3:73:2a:24:fd:8f:a4:8e:e9:c4:78:3a:
         2e:5a:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:24 2025 by rpki-client