Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135322e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3135322e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          nQzDj6ut/YLQg718n+xClRAzaCwskfkWRokIFbRo8Fg=
Subject key identifier:   22:5D:B1:C1:03:82:EC:97:35:D9:FC:0E:D1:36:E0:79:C7:B8:0E:E5
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       1683B0BCC76BA6A84B320BF4C50604E784E0EBBD
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135322e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:00 +0000
ROA not before:           Thu 30 Oct 2025 02:44:00 +0000
ROA not after:            Thu 29 Oct 2026 02:49:00 +0000
asID:                     28615
IP address blocks:        201.46.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:83:b0:bc:c7:6b:a6:a8:4b:32:0b:f4:c5:06:04:e7:84:e0:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:00 2025 GMT
            Not After : Oct 29 02:49:00 2026 GMT
        Subject: CN=225DB1C10382EC9735D9FC0ED136E079C7B80EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:f8:2b:e4:21:3b:ca:07:d8:bd:cf:6f:62:
                    af:ec:a9:06:0b:6a:d2:e1:e1:49:bb:55:61:05:af:
                    fc:f2:6e:0d:53:11:76:bf:03:03:63:f7:4c:96:64:
                    32:20:dc:65:bb:12:59:dc:26:20:4e:1d:7a:93:dd:
                    55:21:a5:72:1c:47:36:3a:4e:5a:ed:53:0c:a2:56:
                    2a:e5:c1:4c:81:60:c5:12:36:73:e6:8d:9f:55:85:
                    bb:c4:3e:d8:4c:02:46:19:eb:db:83:c2:e3:6b:86:
                    2b:cf:8f:5e:06:48:42:ea:ad:ff:0a:fb:c5:e8:0e:
                    9e:b1:5b:07:d1:db:cf:34:a1:53:bd:01:a3:a7:cd:
                    cf:69:70:49:89:ab:2e:fc:92:08:90:13:29:c2:87:
                    01:89:28:ee:8a:07:f8:ec:ee:7e:93:94:78:21:2b:
                    1c:de:c9:36:47:12:cf:2d:83:45:c0:d7:5e:0d:87:
                    64:8b:e9:56:05:51:b1:7e:3e:23:58:1f:e2:44:84:
                    60:03:e1:0a:e9:6a:f7:ab:eb:62:28:46:77:cc:8a:
                    ca:f7:4b:2d:13:4b:25:f9:31:00:74:ac:66:cc:bc:
                    9b:f7:74:85:62:bf:ce:bf:3f:b6:09:1e:7b:1d:38:
                    7f:34:38:2e:e6:de:e2:9c:8a:c8:c3:16:ad:1f:19:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5D:B1:C1:03:82:EC:97:35:D9:FC:0E:D1:36:E0:79:C7:B8:0E:E5
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135322e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:d9:6e:ef:d7:e1:fe:d7:7a:8f:32:c8:3b:16:4c:42:5b:
         66:54:3b:8c:ec:f6:f4:7a:3a:b1:a6:3b:e7:9f:63:f4:5c:df:
         92:78:a0:08:ad:76:8a:22:7b:e2:41:5b:49:2e:47:46:49:70:
         15:c3:5d:65:e3:50:0b:35:9a:14:11:93:11:53:5c:53:4d:81:
         ac:d7:87:b3:32:76:ca:79:be:6c:72:95:3e:02:10:cb:20:e1:
         04:34:5b:3e:f2:76:19:41:fa:6b:30:e3:84:75:65:d1:06:4b:
         f0:34:ac:0d:01:af:ba:36:7f:62:43:30:e5:a4:55:a4:49:1d:
         d9:e7:ab:54:fe:44:06:0e:f2:01:c0:7a:95:c2:b5:12:eb:4d:
         fa:47:63:98:bf:60:43:a8:a3:6d:4b:e6:b6:2f:aa:ec:9c:98:
         50:e2:22:71:59:e3:3c:8f:7a:9b:15:27:68:b0:cc:f3:22:aa:
         9b:32:b2:60:b6:8d:5d:a0:a4:f9:45:98:c3:e4:44:80:02:26:
         3e:97:16:34:13:0e:2a:60:b9:7e:32:06:46:95:c0:b4:dd:1a:
         83:6f:68:96:2a:32:3e:be:94:61:08:87:d1:d8:aa:3c:81:16:
         f6:fd:e2:1e:c1:ac:2d:94:06:77:90:d9:d1:84:25:98:80:c2:
         0b:55:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:51 2025 by rpki-client