Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa
File:                     3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          Gr8iZiJvNZc5Vs5/nHLyabgrM33dS742e/2UUTBHAoo=
Subject key identifier:   EB:38:5E:5B:BF:A1:C8:9B:94:95:E5:66:6F:42:C1:4B:9A:26:92:EF
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       76A10F7F43D03E2E73B13FFF476055AE74020D68
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:33:39 +0000
ROA not before:           Fri 25 Jul 2025 18:28:39 +0000
ROA not after:            Fri 24 Jul 2026 18:33:39 +0000
asID:                     265899
IP address blocks:        131.196.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 14:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a1:0f:7f:43:d0:3e:2e:73:b1:3f:ff:47:60:55:ae:74:02:0d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:28:39 2025 GMT
            Not After : Jul 24 18:33:39 2026 GMT
        Subject: CN=EB385E5BBFA1C89B9495E5666F42C14B9A2692EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:a8:6d:9c:be:38:30:11:70:22:de:48:03:
                    dd:1c:e7:17:50:93:6b:91:c0:50:73:28:21:d8:14:
                    4c:43:0c:90:34:4d:4f:5f:7b:ff:16:91:db:47:b3:
                    18:45:3b:32:1b:66:ef:fd:63:67:c8:80:92:ee:55:
                    ce:8e:ca:a7:1f:28:9d:ec:ef:12:6a:2f:f3:70:8d:
                    58:90:2c:7a:a2:0e:3e:7a:c9:34:aa:1b:4c:9e:f4:
                    f5:ea:b3:b1:25:a3:99:2b:e8:50:8d:d0:bb:94:4f:
                    b7:6f:e2:bd:1c:b8:95:e6:e2:87:1d:45:34:ed:5b:
                    b2:e6:e7:b1:a0:1c:35:a2:af:f1:9d:f8:25:b1:39:
                    51:46:48:e9:17:44:7c:0a:31:91:c7:21:2f:b1:8d:
                    c4:e9:79:c4:a9:59:9c:94:ae:51:a5:1b:6e:72:58:
                    78:d7:d0:06:d4:b2:d1:36:85:36:6b:ca:e5:cf:4d:
                    0e:1c:79:0f:04:4a:50:3f:84:4c:09:06:b6:a9:56:
                    31:2f:de:3b:e4:ba:33:0b:a0:f8:73:e1:ea:87:e7:
                    f4:b6:68:bb:44:c4:4b:63:ca:bc:91:c9:54:06:cf:
                    0e:a8:19:4d:f5:32:89:fc:c9:be:d9:f5:2f:9a:53:
                    55:ac:f5:47:e4:06:02:c1:87:f4:93:99:54:38:5b:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:38:5E:5B:BF:A1:C8:9B:94:95:E5:66:6F:42:C1:4B:9A:26:92:EF
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:a8:57:36:54:18:0d:10:a6:85:d6:22:0e:00:d4:b1:7e:
         2e:56:d2:34:34:0e:d1:cc:14:b7:d7:56:0b:46:08:1b:f1:57:
         17:57:fc:30:c5:6d:03:3f:b8:02:6e:2d:ab:2e:9a:ef:c5:50:
         89:f0:e0:e1:83:dd:e3:a9:2e:cf:c8:f7:97:e7:5e:59:04:6f:
         28:fe:ae:0f:ae:eb:8d:4e:a7:9a:89:28:53:a2:a4:08:dc:05:
         e1:68:ba:55:cf:b1:0b:91:bc:49:c7:a3:23:05:b8:47:7b:d4:
         31:42:f0:8b:16:26:b5:66:18:09:15:00:98:b8:cd:91:0b:6e:
         e1:26:76:c5:c3:22:4c:fd:ab:56:b0:b5:80:b4:0d:00:35:2c:
         b5:28:05:51:b0:c5:38:b6:1b:37:c5:33:76:e8:eb:cc:a2:cb:
         e6:f5:a2:da:5c:07:e5:45:3b:ff:b2:6a:30:e1:d6:dc:84:61:
         9d:2e:58:cb:43:40:46:b8:22:8b:b5:90:5f:13:2b:24:ee:bc:
         8d:ec:b9:70:4f:22:af:77:84:39:fa:dc:0a:1b:32:98:a9:d3:
         d6:b3:aa:4e:eb:ac:4a:16:67:a0:d9:37:e1:ab:46:46:f1:27:
         c4:e7:26:25:d4:26:75:a3:4d:e3:71:a1:50:f4:c2:12:0a:a3:
         3b:cd:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:12:00 2025 by rpki-client