Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa
File:                     3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa (raw, json)
Hash identifier:          uefcTe2sTKQpmOD1jTIIKiYPsRs/bGoZLI5nwnBhDiQ=
Subject key identifier:   3E:BA:27:2C:EB:74:C6:5E:AB:8C:CB:97:21:AB:1F:CA:17:38:CA:0D
Certificate issuer:       /CN=4177EB4445E439416051AB3B18D882B679B3BA71
Certificate serial:       200F6169B7E0E7C3E0D8915268BCF9392507915C
Authority key identifier: 41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa
Signing time:             Mon 01 Sep 2025 16:50:16 +0000
ROA not before:           Mon 01 Sep 2025 16:45:16 +0000
ROA not after:            Mon 31 Aug 2026 16:50:16 +0000
asID:                     263515
IP address blocks:        191.243.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 05:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0f:61:69:b7:e0:e7:c3:e0:d8:91:52:68:bc:f9:39:25:07:91:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4177EB4445E439416051AB3B18D882B679B3BA71
        Validity
            Not Before: Sep  1 16:45:16 2025 GMT
            Not After : Aug 31 16:50:16 2026 GMT
        Subject: CN=3EBA272CEB74C65EAB8CCB9721AB1FCA1738CA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:84:17:29:66:02:d0:2a:eb:50:ef:14:3b:
                    96:c7:1f:b3:5a:28:48:36:b7:21:14:91:00:f0:4b:
                    1e:cf:19:2f:ef:89:cd:09:78:7a:84:a0:3e:b4:04:
                    77:c0:35:82:cf:63:83:8c:b7:71:8d:fa:14:7a:53:
                    8b:8b:6d:8d:ab:71:5c:9c:66:52:91:dc:e9:d6:56:
                    1b:d5:05:26:9d:33:28:52:48:b7:94:a7:01:ed:5c:
                    17:9e:a0:b6:2e:6f:91:06:f3:05:39:a1:73:bb:b5:
                    a6:6b:53:96:c7:0b:cb:11:c2:70:86:60:57:e6:be:
                    15:a8:23:31:a4:84:2c:15:4a:5e:34:a2:d7:bd:aa:
                    02:14:bb:b6:59:e8:67:4b:0a:76:2d:e8:cf:b6:82:
                    6a:d9:e3:b0:89:5f:e1:f6:62:6e:e9:d7:1c:35:e5:
                    f8:38:d3:57:b2:cf:74:44:c8:30:34:5e:07:32:f2:
                    94:33:5b:bb:40:af:65:73:38:fd:85:7c:fd:74:9a:
                    94:ee:ea:1d:ad:d2:16:04:ee:45:6c:bc:d5:f3:a4:
                    90:43:08:ac:e9:0c:e0:4d:49:07:bd:64:74:e7:10:
                    d7:35:03:98:64:39:45:0a:5a:86:cd:12:d8:f1:f2:
                    a2:80:8b:d9:73:5a:0e:cd:0c:d8:ec:8f:c8:7a:c8:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:27:2C:EB:74:C6:5E:AB:8C:CB:97:21:AB:1F:CA:17:38:CA:0D
            X509v3 Authority Key Identifier:
                keyid:41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:f2:64:71:ca:c6:a9:6e:fd:17:aa:54:ff:8d:a4:16:a2:
         f3:03:27:ae:9b:86:7f:63:ca:0c:ce:45:c1:12:c3:95:27:3b:
         98:e6:59:a7:b4:ac:94:7e:95:e9:74:43:b4:e8:0b:4f:56:6b:
         be:35:6d:a0:1e:a3:c7:c8:d0:d8:9c:4a:02:45:37:af:e2:83:
         35:f7:52:46:8b:ab:60:d3:3a:60:bf:4c:f8:b0:df:c9:e5:be:
         1c:83:6d:60:45:52:85:23:7e:6b:30:5b:63:db:b9:3c:0b:96:
         c2:c7:9c:0e:76:a4:a5:58:ac:11:95:52:5f:9b:b9:03:d0:a7:
         f0:0f:46:c1:f4:38:a8:67:d5:75:a7:4c:bb:22:55:f7:c1:49:
         4e:26:e0:ad:2b:1e:1a:1f:00:f2:69:f2:6e:d1:23:45:66:ab:
         84:e5:e8:b9:9f:f6:01:d2:3d:94:39:0b:02:fc:a3:29:54:1b:
         6f:fc:65:45:79:09:bf:c9:be:c7:2c:88:9a:19:86:ee:a3:54:
         8e:4b:a5:ea:36:14:4d:bc:34:b0:84:f0:fc:d8:8c:10:eb:7b:
         2c:47:05:0a:86:fe:0b:33:55:71:17:78:f6:66:c7:95:98:70:
         d1:47:94:66:ff:f4:74:90:4e:a1:a5:eb:66:4b:f9:9b:68:35:
         36:0f:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:37:08 2025 by rpki-client