Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa
File:                     3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa (raw, json)
Hash identifier:          YEqvvyzJGN5LO2fLpb8POiDwE8qrg6EfwJuPfZGaG2Q=
Subject key identifier:   7A:ED:55:95:E3:1C:DF:EE:79:C3:BA:3A:B4:22:1B:BD:8B:02:0A:CB
Certificate issuer:       /CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
Certificate serial:       43A63CC69E72FD6211A3527DBC065E943C9D3E4B
Authority key identifier: 08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa
Signing time:             Mon 15 Sep 2025 16:57:40 +0000
ROA not before:           Mon 15 Sep 2025 16:52:40 +0000
ROA not after:            Mon 14 Sep 2026 16:57:40 +0000
asID:                     265198
IP address blocks:        167.250.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl
                          rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a6:3c:c6:9e:72:fd:62:11:a3:52:7d:bc:06:5e:94:3c:9d:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
        Validity
            Not Before: Sep 15 16:52:40 2025 GMT
            Not After : Sep 14 16:57:40 2026 GMT
        Subject: CN=7AED5595E31CDFEE79C3BA3AB4221BBD8B020ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:6b:f3:b9:5c:d4:8a:18:f3:3b:1b:bd:50:
                    e8:5f:9e:5a:fa:18:3c:21:26:0e:2c:1b:b5:8c:a1:
                    b9:2a:85:64:89:d9:eb:7f:1e:c2:4a:b3:d0:da:bb:
                    aa:68:2e:1b:5e:18:e7:b4:50:c8:0c:fe:1c:3d:91:
                    98:c1:3b:63:fd:cf:57:a5:a1:6c:00:41:9f:44:2b:
                    9e:67:2e:c1:e5:e5:ee:14:7d:9c:96:73:53:b2:d5:
                    e5:11:f5:5a:1d:10:f2:4f:9c:af:cd:2a:a4:88:6c:
                    52:73:b9:08:32:5f:22:da:44:7e:0e:17:65:1b:22:
                    3f:9c:85:29:03:20:5c:f0:22:ae:e1:43:89:0c:5d:
                    5e:fa:60:ad:d5:dc:b8:17:12:0b:02:6b:c2:aa:af:
                    59:33:1d:b7:b0:86:73:f8:a1:c3:0c:69:a6:d8:49:
                    5b:36:37:2b:8f:52:18:76:d0:f2:c8:8e:a2:6a:cf:
                    3b:b0:28:d7:b7:95:75:f7:b9:36:27:d0:5d:1c:10:
                    bd:e1:d6:df:e7:d2:31:58:d0:cf:4d:69:cf:12:ab:
                    ef:c3:25:9f:fd:09:72:f0:53:c6:a6:db:35:f5:cf:
                    64:7c:b8:27:39:ee:39:4d:4e:22:fe:9b:dc:6b:1e:
                    3c:a9:30:64:a0:82:d1:61:c8:da:63:5d:ed:a2:cc:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:ED:55:95:E3:1C:DF:EE:79:C3:BA:3A:B4:22:1B:BD:8B:02:0A:CB
            X509v3 Authority Key Identifier:
                keyid:08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:95:de:18:e3:d3:f3:cd:6c:af:c7:dc:05:6d:e4:7d:e0:2b:
         e2:22:48:cd:67:12:e4:a0:46:22:2c:fc:42:73:ad:22:31:5b:
         bd:21:22:c3:93:c2:50:49:bc:dc:4d:62:cc:38:2f:a4:38:1e:
         77:4c:50:49:0e:b8:cf:55:20:0b:e2:9d:43:2e:a0:bc:66:6b:
         d1:fc:e9:c0:be:dc:45:65:6f:70:c7:58:b9:5e:66:ac:a3:4d:
         58:4a:17:0d:8c:b2:b4:70:49:16:88:11:b3:78:2d:a8:05:27:
         03:35:d5:d8:7f:a7:e8:5f:3c:16:14:c3:d4:60:d8:a4:c8:02:
         ea:6b:05:a8:26:50:1f:74:77:61:d7:19:50:ae:0d:7e:fb:3b:
         b9:9b:cf:77:6b:2b:44:4a:2d:97:41:f6:cc:67:59:77:f2:c8:
         be:6d:45:be:f1:96:e0:3a:d3:86:5f:b7:de:56:25:8f:e8:0d:
         3c:03:3d:8a:64:bf:40:d1:9f:43:d6:35:2b:80:b8:a3:8b:b6:
         89:1d:64:ea:49:ab:75:f1:61:89:7c:48:7f:2e:ae:00:99:89:
         ab:5c:db:e6:f2:14:71:fa:ed:80:1a:85:cf:3b:92:8e:84:45:
         2a:f9:57:68:b4:d2:40:cf:b9:61:9b:84:da:67:b4:46:e4:ed:
         bb:5f:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:27:12 2025 by rpki-client