Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/3136342e3136332e37362e302f32322d3234203d3e20323635393437.roa
File:                     3136342e3136332e37362e302f32322d3234203d3e20323635393437.roa (raw, json)
Hash identifier:          kVU5yGRp4EVwxCGvwLsn9MTHUcmER7TS/+bfB6zchkY=
Subject key identifier:   E7:26:9D:84:B0:12:0E:D6:D1:10:2A:71:76:D5:14:43:46:C8:3B:73
Certificate issuer:       /CN=F5159D4B65C13BFAEAAC00EC92614A92530BC594
Certificate serial:       5641D9A3FDC84A4350553B6F88C5F69B8E593161
Authority key identifier: F5:15:9D:4B:65:C1:3B:FA:EA:AC:00:EC:92:61:4A:92:53:0B:C5:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5159D4B65C13BFAEAAC00EC92614A92530BC594.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/3136342e3136332e37362e302f32322d3234203d3e20323635393437.roa
Signing time:             Mon 07 Jul 2025 19:23:23 +0000
ROA not before:           Mon 07 Jul 2025 19:18:23 +0000
ROA not after:            Mon 06 Jul 2026 19:23:23 +0000
asID:                     265947
IP address blocks:        164.163.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F5159D4B65C13BFAEAAC00EC92614A92530BC594.crl
                          rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F5159D4B65C13BFAEAAC00EC92614A92530BC594.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5159D4B65C13BFAEAAC00EC92614A92530BC594.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 18:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:41:d9:a3:fd:c8:4a:43:50:55:3b:6f:88:c5:f6:9b:8e:59:31:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5159D4B65C13BFAEAAC00EC92614A92530BC594
        Validity
            Not Before: Jul  7 19:18:23 2025 GMT
            Not After : Jul  6 19:23:23 2026 GMT
        Subject: CN=E7269D84B0120ED6D1102A7176D5144346C83B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:73:f6:3d:ec:e6:2a:85:e5:7c:ad:1c:bd:e9:
                    10:0d:26:c6:00:ac:ba:6f:0d:11:a2:21:b7:d0:ea:
                    61:4a:e8:d5:0c:7c:a7:c1:d4:06:61:61:5a:75:44:
                    a9:ac:72:04:90:65:8b:06:29:5e:ef:75:a5:64:16:
                    b2:b8:34:79:67:ec:57:ce:12:d8:2a:fd:7e:b0:7a:
                    fb:5d:cd:00:b5:fc:7e:d8:ca:ed:04:f5:65:06:71:
                    2a:9e:0f:44:70:76:92:bb:a7:9e:e1:05:ba:a2:5e:
                    51:b3:0c:39:e9:3f:4a:97:fa:5f:79:62:95:84:21:
                    2d:13:ed:d9:5e:49:29:7c:56:72:5e:3a:d7:3b:bf:
                    35:b9:f4:32:89:0c:d7:e2:98:a4:5b:e9:56:a4:58:
                    91:cf:37:96:00:ea:68:b9:16:17:18:c2:1b:75:6e:
                    5e:8a:54:ab:2d:e7:0d:e5:8c:7a:c3:00:98:95:c0:
                    69:d3:70:63:76:30:eb:e8:85:2a:21:ea:6b:16:c7:
                    09:28:00:83:9c:70:31:cd:dc:fa:86:93:94:24:b3:
                    e7:07:e7:1a:27:44:ae:b0:e1:57:96:4a:2a:b5:29:
                    ed:df:c5:35:ef:17:a3:5e:43:59:31:43:d7:3b:3d:
                    72:ce:cc:a9:88:aa:5a:75:07:ba:e6:92:69:79:2b:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:26:9D:84:B0:12:0E:D6:D1:10:2A:71:76:D5:14:43:46:C8:3B:73
            X509v3 Authority Key Identifier:
                keyid:F5:15:9D:4B:65:C1:3B:FA:EA:AC:00:EC:92:61:4A:92:53:0B:C5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/F5159D4B65C13BFAEAAC00EC92614A92530BC594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5159D4B65C13BFAEAAC00EC92614A92530BC594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/3136342e3136332e37362e302f32322d3234203d3e20323635393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:79:6c:a0:a8:14:ba:98:e1:d4:f2:be:de:ac:87:fc:8d:
         fa:18:24:c9:be:e9:ba:68:6f:27:ed:59:f3:37:38:9f:e2:28:
         d8:bc:07:8f:b3:26:e0:5a:04:83:c3:96:f1:fd:8e:9a:a2:6a:
         50:f7:80:20:9c:1d:97:5e:f0:ad:05:19:aa:ad:dc:84:75:38:
         e1:68:ee:50:80:45:92:94:39:7f:7d:be:1d:99:16:45:e8:aa:
         40:31:49:9a:da:cc:a8:77:49:e4:b4:86:36:fc:74:78:fb:75:
         7c:90:9a:b6:81:e5:84:79:00:cb:df:1d:b4:4f:65:df:61:f3:
         be:03:6b:86:18:5a:ea:91:2f:7a:2c:42:4e:23:81:f5:01:a9:
         82:a6:9b:44:82:a7:0e:ba:fa:a3:27:4b:06:33:e8:c6:78:52:
         e8:71:5b:b4:6e:74:0f:c9:fc:70:36:a1:6b:9d:e2:77:ab:69:
         9a:ad:99:35:f7:d3:58:fc:11:9d:10:32:41:6f:b4:79:8f:a5:
         b8:fa:28:4d:7b:88:f5:55:5a:4f:83:0b:ec:c8:79:9d:fe:2f:
         52:d5:e9:40:f0:65:b8:5b:c6:ed:21:cc:21:15:ad:2c:fc:51:
         1d:9e:4b:f0:65:71:78:be:e9:0a:89:7b:8a:6f:e5:73:82:33:
         3f:f2:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:39:59 2025 by rpki-client