Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa
File:                     3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa (raw, json)
Hash identifier:          m5t8MgFXesGh48yNaM3SqX1UPCJpHgF0Xpl2t/7eMSI=
Subject key identifier:   43:AC:F4:4A:D7:FA:9F:D3:97:C3:2A:03:74:D7:2C:10:B3:E1:D4:25
Certificate issuer:       /CN=5AE699F95343C4180F8A9AECB83BD6BB3898E2E4
Certificate serial:       447C38504BE3C477D7FA75388285FF567C137981
Authority key identifier: 5A:E6:99:F9:53:43:C4:18:0F:8A:9A:EC:B8:3B:D6:BB:38:98:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AE699F95343C4180F8A9AECB83BD6BB3898E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa
Signing time:             Thu 31 Jul 2025 20:49:13 +0000
ROA not before:           Thu 31 Jul 2025 20:44:13 +0000
ROA not after:            Thu 30 Jul 2026 20:49:13 +0000
asID:                     264930
IP address blocks:        168.228.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/5AE699F95343C4180F8A9AECB83BD6BB3898E2E4.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/5AE699F95343C4180F8A9AECB83BD6BB3898E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AE699F95343C4180F8A9AECB83BD6BB3898E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 04:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7c:38:50:4b:e3:c4:77:d7:fa:75:38:82:85:ff:56:7c:13:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE699F95343C4180F8A9AECB83BD6BB3898E2E4
        Validity
            Not Before: Jul 31 20:44:13 2025 GMT
            Not After : Jul 30 20:49:13 2026 GMT
        Subject: CN=43ACF44AD7FA9FD397C32A0374D72C10B3E1D425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:c2:45:76:75:7c:3b:04:03:16:da:e8:26:
                    c4:eb:04:8e:bc:71:f5:62:c5:f4:30:f2:9c:b2:a3:
                    45:f6:51:fa:a3:a4:35:78:94:eb:cf:a5:b3:63:82:
                    dc:56:41:7e:05:8c:f1:3d:46:db:7c:1e:48:77:d8:
                    67:ed:30:0d:02:61:78:cc:5f:53:b2:86:46:68:a9:
                    e0:9f:15:81:94:e6:55:6f:c9:fd:c4:31:cf:ce:61:
                    e4:0c:8c:2d:25:2e:1c:27:a2:e2:0a:73:80:27:df:
                    72:85:72:50:bb:34:e8:2f:0b:e1:0f:08:f5:38:6c:
                    c2:b5:10:b6:11:f4:15:11:e6:8c:1e:ab:4d:37:00:
                    ef:d3:ca:c4:42:af:0d:8e:d1:17:4c:0c:3e:5b:f7:
                    c6:6c:0b:0d:db:d2:59:59:72:5c:1e:25:3f:4d:3c:
                    2e:b9:ce:5c:fb:e8:ff:8d:fb:b8:f8:b4:87:bc:6d:
                    63:07:58:46:ef:7e:ed:7b:0c:9c:5e:0a:1d:c5:40:
                    24:8b:cc:a1:5a:bc:c2:6c:26:df:8b:e7:d7:f7:85:
                    e2:9f:9e:0b:4c:36:dc:7c:e8:2e:52:11:b3:a6:8f:
                    e0:b6:ae:88:12:c6:88:2d:76:42:4f:86:34:18:1d:
                    7b:27:c3:13:42:1c:f4:c7:a1:47:b7:97:39:26:20:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AC:F4:4A:D7:FA:9F:D3:97:C3:2A:03:74:D7:2C:10:B3:E1:D4:25
            X509v3 Authority Key Identifier:
                keyid:5A:E6:99:F9:53:43:C4:18:0F:8A:9A:EC:B8:3B:D6:BB:38:98:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/5AE699F95343C4180F8A9AECB83BD6BB3898E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AE699F95343C4180F8A9AECB83BD6BB3898E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:f6:cf:3b:1f:35:e9:bd:9c:3f:4b:b5:5c:f9:b2:77:7b:33:
         dc:ac:73:4c:d4:b0:3c:76:91:cd:51:30:1c:bc:5a:93:b9:75:
         0d:9e:fd:de:19:f8:a9:5f:4a:d5:4e:8d:78:23:a4:53:05:36:
         35:8e:0f:35:fe:99:5f:4f:d9:47:3d:be:8d:9c:23:f5:a2:16:
         b7:00:61:bc:04:7b:b8:98:ec:53:58:d4:d7:26:b7:79:1f:98:
         a0:2f:48:24:66:ca:6e:e5:a6:7f:50:d7:1a:ef:09:13:11:d8:
         88:ee:fa:39:06:3c:2a:cd:e6:fd:59:ad:df:cf:19:a5:1d:28:
         80:89:a7:08:c7:8b:2a:71:4b:79:cb:8b:37:7f:b2:d6:21:18:
         47:60:2b:17:2f:5c:52:03:a4:13:17:88:25:d2:55:7f:9e:01:
         ee:ab:15:c5:d6:01:23:bb:08:db:c4:a1:72:a9:3b:61:6f:8f:
         01:56:15:d2:29:ae:5f:fd:03:63:7a:a0:16:1e:f3:11:56:b4:
         75:90:aa:51:8d:a6:52:4a:7e:39:f8:61:e0:70:74:cb:6d:b0:
         ce:c3:17:b9:58:d8:a1:ec:0a:e2:36:d7:7f:7c:bb:0e:28:8c:
         26:57:d6:48:d4:f8:46:c6:94:a4:c7:1e:2a:26:ab:ab:07:99:
         9e:16:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:34:55 2025 by rpki-client