Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          gZErWMstAHp5LBbYcCTMV8Gcg/b/MmJa9zp6U2uTgds=
Subject key identifier:   4B:60:4A:3E:33:79:4D:DA:B2:7D:FE:9B:3C:E9:73:E0:FF:A9:6B:53
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       6529F84C516BD9E930175D6E6A9F5FA79FF83200
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 04 Aug 2025 18:24:16 +0000
ROA not before:           Mon 04 Aug 2025 18:19:16 +0000
ROA not after:            Mon 03 Aug 2026 18:24:16 +0000
asID:                     263518
IP address blocks:        168.197.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:29:f8:4c:51:6b:d9:e9:30:17:5d:6e:6a:9f:5f:a7:9f:f8:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Aug  4 18:19:16 2025 GMT
            Not After : Aug  3 18:24:16 2026 GMT
        Subject: CN=4B604A3E33794DDAB27DFE9B3CE973E0FFA96B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:44:8e:db:d2:c5:ab:74:18:db:91:c1:ed:b7:
                    a3:a9:b4:1a:2b:9d:b4:a9:c4:62:7e:e8:53:33:81:
                    91:76:43:a6:17:b6:77:e0:d0:b7:d1:39:2e:8c:93:
                    1b:96:51:0a:e7:e2:f4:7a:74:12:8b:03:b7:de:ce:
                    fa:13:ec:59:bd:14:07:00:83:07:80:24:6d:59:0c:
                    b9:36:a4:18:59:94:24:3c:27:f0:3f:bf:f2:a8:bb:
                    4a:c1:96:5c:22:62:4f:2f:4d:06:f0:46:2d:8b:2d:
                    37:ab:83:69:60:9b:be:6a:4c:fb:46:4b:21:4b:77:
                    c4:fb:c6:a7:ec:4e:1e:d4:8f:1b:ad:cc:c7:36:5b:
                    b7:29:03:67:a9:41:21:14:7f:81:0a:b5:2b:97:6a:
                    68:85:f9:be:a6:71:74:59:0d:04:bd:09:cf:87:9d:
                    97:91:c0:46:ed:e3:7f:45:46:09:37:9f:1e:b1:0d:
                    61:5d:86:0f:96:26:42:cc:e8:e2:68:0b:83:b7:8b:
                    27:cc:ed:33:0d:64:d7:0d:f7:32:6d:ca:d3:89:2e:
                    02:cb:d5:e7:4b:8b:e4:8f:81:b8:6c:6f:d0:dd:34:
                    39:7d:3c:af:fb:0a:9d:94:f9:a5:55:e8:5f:03:10:
                    9b:7c:d5:51:97:8b:db:c8:b6:a4:f7:6f:6b:ca:09:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:4A:3E:33:79:4D:DA:B2:7D:FE:9B:3C:E9:73:E0:FF:A9:6B:53
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:58:59:9c:fb:29:ed:fc:95:80:4a:8e:9d:b2:e3:4d:cc:4d:
         df:7a:74:cd:94:d3:f1:3d:35:fe:3e:e6:4c:bb:b8:13:be:78:
         c5:dc:50:86:9d:ca:67:4f:ef:1a:e5:68:5d:04:97:d9:5d:1d:
         de:6d:3f:d3:53:ca:ce:0f:af:61:cd:ff:03:be:5f:7a:15:ed:
         c6:43:09:73:ce:1c:95:67:3d:12:b0:72:fb:05:e8:66:d0:51:
         74:52:39:a4:5e:0e:0b:12:15:e8:21:72:ed:5c:48:8f:57:2f:
         e1:16:e5:80:38:b0:08:98:73:81:7f:8a:99:1b:97:33:74:cc:
         62:e6:65:2e:0d:32:b7:41:0b:ff:e7:ae:a3:2c:ce:cc:2b:b2:
         7f:49:fa:c2:a9:05:ad:69:88:60:a0:5d:d2:8f:50:47:20:bf:
         68:aa:85:13:41:23:ce:e9:2e:5a:13:5b:64:57:a8:8c:bf:b8:
         43:1c:7f:58:d6:03:13:fa:17:d8:11:c3:a5:73:37:ff:99:eb:
         50:f2:c1:bc:a0:2b:dc:fd:07:0f:9b:a7:00:5c:f4:35:ff:d4:
         92:cb:30:a1:25:d1:d4:ce:6f:d8:e2:49:e4:ac:2f:1a:6b:fe:
         41:fa:c4:24:a2:a6:b4:ee:f2:14:db:89:e3:8d:fa:5e:a4:f4:
         29:3e:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:10 2025 by rpki-client