Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234312e302f32342d3234203d3e20323635393331.roa
File:                     3133312e3139362e3234312e302f32342d3234203d3e20323635393331.roa (raw, json)
Hash identifier:          U1M3sljBF8lDTIpm2YBgRS3WDOH3AKIxwjqwIB8ue7A=
Subject key identifier:   BF:F5:01:69:3E:56:78:9E:5E:2F:07:2D:C7:8D:6E:D7:37:BB:2B:06
Certificate issuer:       /CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
Certificate serial:       6A260A9F646373A5E296F818638C7E2227DA8869
Authority key identifier: 92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234312e302f32342d3234203d3e20323635393331.roa
Signing time:             Fri 11 Jul 2025 20:52:20 +0000
ROA not before:           Fri 11 Jul 2025 20:47:20 +0000
ROA not after:            Fri 10 Jul 2026 20:52:20 +0000
asID:                     265931
IP address blocks:        131.196.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl
                          rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:0a:9f:64:63:73:a5:e2:96:f8:18:63:8c:7e:22:27:da:88:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
        Validity
            Not Before: Jul 11 20:47:20 2025 GMT
            Not After : Jul 10 20:52:20 2026 GMT
        Subject: CN=BFF501693E56789E5E2F072DC78D6ED737BB2B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:c7:7b:2d:dd:e2:f3:d7:3a:7d:c3:17:2e:
                    ec:06:a9:21:12:ea:c6:95:66:b4:8b:c8:1f:00:58:
                    6f:22:2f:06:8b:db:39:3f:5b:1b:9f:70:92:e0:a4:
                    49:9f:56:08:4f:ff:40:88:c0:3e:8b:89:32:16:47:
                    26:9a:a6:78:34:51:8f:4c:e7:5e:b8:00:22:2f:6c:
                    f3:c8:af:5e:e1:03:b0:00:91:97:6b:d2:d1:3b:8f:
                    bc:5b:9e:7a:c5:79:76:6a:77:a3:d6:03:92:26:cc:
                    b0:5e:16:e5:ce:3b:67:d8:c1:e3:b6:c6:ca:7d:2f:
                    38:e7:42:05:98:d1:7a:a2:6c:6e:fd:60:a7:d9:b6:
                    43:b0:a6:ea:04:fb:97:d3:6f:30:0d:90:87:e2:21:
                    f3:96:53:b1:37:e8:17:b5:3d:6c:fa:96:f1:33:79:
                    6a:38:36:bd:4c:51:11:d0:14:ae:d5:fa:52:49:df:
                    a9:ce:1d:e0:99:f0:3b:8d:69:0a:e2:22:16:5f:bc:
                    c1:d6:1f:b9:45:05:3c:69:39:de:2a:02:23:96:52:
                    f3:54:28:1b:fc:39:ee:44:4a:13:27:40:16:31:df:
                    24:a1:86:d3:32:67:d8:9c:fe:89:76:ab:6d:0a:ab:
                    ed:de:da:b7:49:08:2c:2f:3e:a7:b4:9b:bd:d9:46:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F5:01:69:3E:56:78:9E:5E:2F:07:2D:C7:8D:6E:D7:37:BB:2B:06
            X509v3 Authority Key Identifier:
                keyid:92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234312e302f32342d3234203d3e20323635393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:cc:9e:78:28:14:5c:ee:4d:75:12:c5:10:09:14:6e:f4:
         98:af:ab:bd:05:96:0b:93:3d:e9:0e:de:73:28:8a:d4:2f:2b:
         05:40:c1:52:82:a5:ce:6f:b4:4d:e0:99:89:ed:1a:11:b2:f7:
         71:67:7f:98:24:94:2a:1b:79:58:bc:f3:15:4d:2a:c4:74:38:
         a6:14:88:dd:e7:89:68:ae:d2:e6:d9:00:bb:c2:ca:23:8e:bf:
         42:41:65:1a:53:5d:5b:a3:2a:a6:59:dc:11:bc:8d:2c:bb:e5:
         40:c8:63:13:c2:2a:da:4f:bd:bb:28:06:25:0f:47:42:08:1c:
         fe:87:f6:5e:68:21:1b:a7:d9:13:93:ef:44:77:a8:30:3e:cf:
         c1:51:54:e5:2f:ca:6a:f9:c9:3e:49:04:1a:ad:c4:d5:05:ce:
         c5:ae:c1:7e:97:05:df:2a:f2:d3:5d:7e:b5:80:ab:ff:ef:d6:
         ed:ea:5e:40:48:0b:44:35:68:ae:b6:ef:0b:e7:4e:70:13:84:
         58:cc:68:05:84:fc:4b:95:42:79:25:00:f6:fd:e4:d7:66:35:
         6a:2b:c9:b4:55:d2:5d:04:d6:99:3c:e1:4e:00:da:5b:1e:1d:
         35:d1:e9:13:0e:e2:e7:6f:8a:79:c4:2b:5b:4f:8b:d5:5d:85:
         09:af:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:54:10 2025 by rpki-client