Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa
File:                     3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa (raw, json)
Hash identifier:          gjTOo1e/q9rHGDfBQ7K4y4bXPKFKZ4apre6uagyfkU0=
Subject key identifier:   08:67:BD:F8:27:09:8A:D9:A0:16:60:4D:23:A9:3E:6C:1A:6E:77:5E
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       04172F50FEF8DA2CD3DD849BBB441557B34F9DCA
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa
Signing time:             Tue 29 Jul 2025 17:00:00 +0000
ROA not before:           Tue 29 Jul 2025 16:55:00 +0000
ROA not after:            Tue 28 Jul 2026 17:00:00 +0000
asID:                     264509
IP address blocks:        132.255.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:17:2f:50:fe:f8:da:2c:d3:dd:84:9b:bb:44:15:57:b3:4f:9d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Jul 29 16:55:00 2025 GMT
            Not After : Jul 28 17:00:00 2026 GMT
        Subject: CN=3082010A0282010100C054732EDB1F213A3BDFBF70CFE0A22E950F679F2A9A7B8FBC0B4BFC971EDF741381A112B3AAC11563A5F4730E048D7D1489DEEABC27226F6312A04C95AD3C8569A835D341AD66FDB062335C1136F464305728CEC1EBA0D10A69A48CA0676C8753A840172C80CA7F2CEFCE724D8BED05F4EE8A6498CFC1F5B1D6469C3D91F3156188D4368BBD5C1995DF6D9FDB63BB15B1E8409388567610F29C42DC9786C11802F0B158C92D39A499FA05C0AD1CEC90E5B9339BDC78D22864C7EF5844BCC5C24ECF9E1664C0605590BCFC74BE3BAB915545AAA3AE7CEC6CAB264EF1C1DCE9A92B0C61F9FAC489BC2D03B7831B2C6D3AAAFBF902BC74DC3B555CFB8B33D1D17D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:73:2e:db:1f:21:3a:3b:df:bf:70:cf:e0:
                    a2:2e:95:0f:67:9f:2a:9a:7b:8f:bc:0b:4b:fc:97:
                    1e:df:74:13:81:a1:12:b3:aa:c1:15:63:a5:f4:73:
                    0e:04:8d:7d:14:89:de:ea:bc:27:22:6f:63:12:a0:
                    4c:95:ad:3c:85:69:a8:35:d3:41:ad:66:fd:b0:62:
                    33:5c:11:36:f4:64:30:57:28:ce:c1:eb:a0:d1:0a:
                    69:a4:8c:a0:67:6c:87:53:a8:40:17:2c:80:ca:7f:
                    2c:ef:ce:72:4d:8b:ed:05:f4:ee:8a:64:98:cf:c1:
                    f5:b1:d6:46:9c:3d:91:f3:15:61:88:d4:36:8b:bd:
                    5c:19:95:df:6d:9f:db:63:bb:15:b1:e8:40:93:88:
                    56:76:10:f2:9c:42:dc:97:86:c1:18:02:f0:b1:58:
                    c9:2d:39:a4:99:fa:05:c0:ad:1c:ec:90:e5:b9:33:
                    9b:dc:78:d2:28:64:c7:ef:58:44:bc:c5:c2:4e:cf:
                    9e:16:64:c0:60:55:90:bc:fc:74:be:3b:ab:91:55:
                    45:aa:a3:ae:7c:ec:6c:ab:26:4e:f1:c1:dc:e9:a9:
                    2b:0c:61:f9:fa:c4:89:bc:2d:03:b7:83:1b:2c:6d:
                    3a:aa:fb:f9:02:bc:74:dc:3b:55:5c:fb:8b:33:d1:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:67:BD:F8:27:09:8A:D9:A0:16:60:4D:23:A9:3E:6C:1A:6E:77:5E
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:a8:ba:94:97:b4:82:e6:d4:96:1f:22:5a:c7:d5:ea:9a:63:
         08:48:0f:ae:e5:22:45:be:df:f0:2e:5c:84:ff:9c:64:0e:6b:
         12:4b:f9:4b:99:05:62:34:42:88:1c:0f:4f:8a:3f:83:88:6a:
         bd:d0:31:ef:1e:94:0c:b8:d1:24:85:2a:d0:79:98:10:8e:df:
         ad:fa:21:24:2e:22:99:e9:9c:8d:02:c2:c2:db:9d:5b:3a:8c:
         08:92:57:7a:83:69:4c:d5:81:36:ac:84:0d:81:db:59:af:63:
         f4:40:a7:b6:e0:7a:f1:84:b6:ca:26:6b:64:dd:ae:05:53:d0:
         a5:10:61:39:e6:d4:3c:ae:f3:4e:71:f2:4c:5f:0a:e3:b8:3a:
         0e:4b:88:f7:50:c4:78:0b:1a:9d:c2:bb:9d:23:b7:23:7e:d5:
         df:19:94:26:1c:dc:b4:ea:9f:19:cf:3d:6b:84:9b:74:f0:55:
         b7:30:94:dc:29:69:3e:f2:3d:aa:26:5e:89:02:10:cc:c0:99:
         6f:c0:32:d2:4a:8a:a0:a6:9f:35:7a:d7:a0:f0:b0:2c:ff:e9:
         dc:23:de:95:3a:1c:ec:cd:7b:1c:ab:60:af:aa:ab:22:07:88:
         c0:92:e1:a1:42:75:5f:4c:41:35:46:7a:c8:dc:35:0e:a3:a5:
         63:86:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:36:22 2025 by rpki-client