Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/3133312e3136312e3232342e302f32322d3332203d3e20323634333938.roa
File:                     3133312e3136312e3232342e302f32322d3332203d3e20323634333938.roa (raw, json)
Hash identifier:          D2ZAno+HBcrJh17T7/nKT+m6mCbG85NeI/Nr2gI7Ydc=
Subject key identifier:   23:32:92:B7:69:34:5F:7F:EC:99:ED:08:00:25:0F:B4:69:90:89:E7
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       1BACF2F35D95EA4F5D060B38800E0A7AB5DC67E7
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/3133312e3136312e3232342e302f32322d3332203d3e20323634333938.roa
Signing time:             Wed 18 Jun 2025 19:02:02 +0000
ROA not before:           Wed 18 Jun 2025 18:57:02 +0000
ROA not after:            Wed 17 Jun 2026 19:02:02 +0000
asID:                     264398
IP address blocks:        131.161.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ac:f2:f3:5d:95:ea:4f:5d:06:0b:38:80:0e:0a:7a:b5:dc:67:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: Jun 18 18:57:02 2025 GMT
            Not After : Jun 17 19:02:02 2026 GMT
        Subject: CN=233292B769345F7FEC99ED0800250FB4699089E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:d3:53:22:bb:8f:1e:bd:e8:df:ef:2b:79:
                    9f:03:b1:37:86:46:06:50:fd:d3:e0:61:1f:f6:96:
                    64:84:76:c3:66:c0:3c:ce:91:49:f8:fb:d3:9f:aa:
                    b8:2c:51:4a:42:15:f5:8a:81:f9:79:c4:84:33:4b:
                    35:b9:13:d9:25:64:49:8c:d2:dc:84:4a:71:8a:b2:
                    0b:2c:1b:81:16:fa:e6:c8:bf:8c:67:77:cc:29:85:
                    d6:9c:db:da:07:cc:13:86:0b:24:55:6a:a9:b7:68:
                    70:5a:bb:f4:e7:69:9f:f0:43:66:fe:41:80:36:74:
                    b3:c0:03:cd:a0:16:a2:6a:92:b3:54:c1:72:81:05:
                    b5:cb:6d:f4:94:11:f7:2f:8f:81:5e:03:20:54:8a:
                    cd:9d:14:0a:23:aa:eb:37:90:79:28:a0:28:79:8c:
                    26:a9:95:d7:f5:29:6d:a2:44:3e:2c:ca:82:7f:8b:
                    ba:41:fb:fa:ad:91:e9:3e:44:31:16:85:b0:fe:a0:
                    b0:32:3c:d6:cb:40:d2:d6:2b:c7:f1:c0:d0:59:be:
                    3f:d6:8a:11:4b:d5:34:2d:2b:52:27:4e:db:e4:2c:
                    d2:65:b7:ce:c0:49:62:1c:54:15:92:a0:6f:f9:27:
                    ca:1a:ae:2d:54:c3:40:01:c9:b8:08:c0:47:81:36:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:32:92:B7:69:34:5F:7F:EC:99:ED:08:00:25:0F:B4:69:90:89:E7
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/3133312e3136312e3232342e302f32322d3332203d3e20323634333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:e3:2a:24:29:57:f8:82:95:ce:c1:55:7c:81:9b:0c:ac:
         74:f5:6f:3b:ec:9b:fc:d8:be:4c:a6:c0:77:47:72:b8:d2:ca:
         61:b8:7c:e8:d2:ed:17:b9:8f:8c:70:04:e9:52:96:22:61:6e:
         c0:a0:15:de:8b:1b:27:fe:b9:9f:b6:ee:d6:d7:8c:3b:8d:70:
         31:f5:16:63:ca:a6:fe:b3:1c:b5:6f:97:fc:37:11:3f:bc:ca:
         37:fe:7b:b0:d4:ed:57:0d:77:9b:61:44:1d:12:20:c3:53:31:
         7e:c0:21:e7:b3:57:57:dc:7b:a7:53:d9:e6:a0:6c:6b:54:36:
         f7:57:cc:99:54:34:f5:7d:94:83:69:68:9a:bc:58:24:34:22:
         62:bc:9a:f2:8d:77:5c:42:da:86:bc:0b:99:a1:e0:b0:3e:80:
         d6:5d:87:ca:8c:3b:2d:f7:67:81:11:a2:cf:6f:a8:c7:06:70:
         65:8b:90:20:a7:0d:12:07:68:95:3d:bf:d4:01:6c:0b:b7:e1:
         15:6e:c3:89:15:a4:1c:f1:d7:6f:9f:ad:41:da:ce:07:a4:fb:
         ca:af:be:46:a7:14:1e:77:69:84:74:77:06:9f:d9:ac:16:d0:
         68:9b:bd:02:3d:07:8b:27:70:9b:69:b5:5e:48:23:69:e4:b1:
         e9:e6:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:50:34 2025 by rpki-client