Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/3139312e33372e3137362e302f32312d3231203d3e20323633333639.roa
File:                     3139312e33372e3137362e302f32312d3231203d3e20323633333639.roa (raw, json)
Hash identifier:          ctvRQcQKqgHMSAekIz0SoTbY34ZKhlOXjwvz61tzDWU=
Subject key identifier:   0C:E4:AF:66:B5:82:6D:B6:C6:0F:B2:B0:87:D1:B9:04:E9:62:11:93
Certificate issuer:       /CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
Certificate serial:       483C3E9236A663B1A9103C570385E7FC703B041F
Authority key identifier: 80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/3139312e33372e3137362e302f32312d3231203d3e20323633333639.roa
Signing time:             Mon 04 Aug 2025 18:15:51 +0000
ROA not before:           Mon 04 Aug 2025 18:10:51 +0000
ROA not after:            Mon 03 Aug 2026 18:15:51 +0000
asID:                     263369
IP address blocks:        191.37.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 15:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3c:3e:92:36:a6:63:b1:a9:10:3c:57:03:85:e7:fc:70:3b:04:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
        Validity
            Not Before: Aug  4 18:10:51 2025 GMT
            Not After : Aug  3 18:15:51 2026 GMT
        Subject: CN=0CE4AF66B5826DB6C60FB2B087D1B904E9621193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:ab:47:3f:a9:0e:b3:e6:bd:7f:40:d5:f5:
                    4f:07:92:66:5a:5e:2e:7f:ab:85:bc:2c:39:8d:31:
                    19:f1:d5:8f:10:7c:2e:c1:b3:21:5c:5e:87:54:2c:
                    58:b8:c1:2d:b6:02:00:32:07:55:1b:6d:37:0d:87:
                    d3:ff:c6:e0:b4:af:05:c6:14:a2:ea:3e:dd:0f:07:
                    e6:ea:a0:7f:f4:cd:a0:40:c9:5f:b3:4e:f4:f4:15:
                    01:da:44:a5:11:6e:e1:a7:88:0b:88:aa:58:78:79:
                    89:a4:b8:09:0a:30:3c:de:ff:52:17:29:e8:99:58:
                    5d:7b:0f:27:e3:50:73:98:2f:62:18:83:c8:d5:89:
                    44:8f:34:a4:8b:75:bd:c2:2c:5e:87:fb:e5:ff:81:
                    69:8f:e7:b0:1e:14:39:4f:19:6e:e3:f4:f6:e8:5b:
                    d2:84:02:fa:b4:8a:76:18:b7:5e:99:f5:99:3b:a9:
                    4e:5d:b2:32:c5:56:c8:2f:c8:20:f8:07:f7:14:ec:
                    6c:e8:d0:81:1a:0c:ae:d0:c8:00:c4:66:73:94:42:
                    f0:e6:ec:f1:99:c6:02:47:f1:de:3e:ec:72:73:87:
                    51:54:70:ba:1b:45:ac:20:54:19:3d:0d:6f:67:61:
                    8b:c0:9b:3f:77:58:3c:22:73:d6:99:27:25:ed:99:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:AF:66:B5:82:6D:B6:C6:0F:B2:B0:87:D1:B9:04:E9:62:11:93
            X509v3 Authority Key Identifier:
                keyid:80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/3139312e33372e3137362e302f32312d3231203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:05:59:2a:06:1b:78:85:51:9b:54:63:31:5d:62:2d:b7:
         4b:27:99:14:9f:46:9a:eb:2b:3f:52:f3:13:bd:6b:8b:45:90:
         60:ff:67:e5:0b:a5:90:ab:4c:b1:00:0b:49:ff:87:f6:32:85:
         8c:8b:bd:6b:88:c1:45:71:25:34:a2:3c:c2:87:89:7c:7b:9a:
         50:53:b6:c6:9c:e1:68:7b:dc:a3:3b:d8:1d:25:15:33:30:22:
         33:46:0a:d4:b0:0a:98:fd:89:69:53:50:0b:72:66:a7:9a:61:
         8b:b7:46:e3:7f:11:94:08:62:44:fc:23:fa:e7:12:07:ec:f5:
         6c:61:6d:f3:02:d0:be:0d:b8:6b:dc:58:99:43:85:76:15:c3:
         2c:73:47:83:7e:2f:43:e2:ac:70:83:67:2f:ba:1c:fd:b1:25:
         4c:94:1c:02:45:50:0e:49:77:e8:f0:ab:89:23:69:68:c2:d8:
         b3:0c:c5:11:c0:fb:4c:e9:58:de:19:e7:b8:01:59:a0:7a:96:
         3a:ba:32:90:c9:dc:47:45:1b:58:29:6f:6e:5a:2a:13:fd:17:
         b3:a1:17:f3:ff:65:74:f8:d5:44:6c:f9:5e:8b:b9:fc:be:0d:
         88:af:0b:b0:d8:e3:47:44:92:b2:dc:05:61:44:86:dd:ca:10:
         f7:18:32:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSDw+kjamY7GpEDxXA4Xn/HA7BB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBDMjAyNjRBRkM1MjVENUM4RTYzQzcwOUNFN0FCRTBF
REFGQzlGMTAeFw0yNTA4MDQxODEwNTFaFw0yNjA4MDMxODE1NTFaMDMxMTAvBgNV
BAMTKDBDRTRBRjY2QjU4MjZEQjZDNjBGQjJCMDg3RDFCOTA0RTk2MjExOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOatHP6kOs+a9f0DV9U8HkmZa
Xi5/q4W8LDmNMRnx1Y8QfC7BsyFcXodULFi4wS22AgAyB1UbbTcNh9P/xuC0rwXG
FKLqPt0PB+bqoH/0zaBAyV+zTvT0FQHaRKURbuGniAuIqlh4eYmkuAkKMDze/1IX
KeiZWF17DyfjUHOYL2IYg8jViUSPNKSLdb3CLF6H++X/gWmP57AeFDlPGW7j9Pbo
W9KEAvq0inYYt16Z9Zk7qU5dsjLFVsgvyCD4B/cU7Gzo0IEaDK7QyADEZnOUQvDm
7PGZxgJH8d4+7HJzh1FUcLobRawgVBk9DW9nYYvAmz93WDwic9aZJyXtmdBnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDOSvZrWCbbbGD7Kwh9G5BOliEZMwHwYDVR0j
BBgwFoAUgMICZK/FJdXI5jxwnOer4O2vyfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODE4a1lFY3lXb2h4UzlLYWF0d3prZFU1SEh6ZVk2UnA0Qzg3dnBCMzNT
bVEvMC84MEMyMDI2NEFGQzUyNUQ1QzhFNjNDNzA5Q0U3QUJFMEVEQUZDOUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwQzIwMjY0QUZDNTI1RDVD
OEU2M0M3MDlDRTdBQkUwRURBRkM5RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxOGtZRWN5V29oeFM5S2FhdHd6a2RVNUhIemVZNlJwNEM4N3ZwQjMzU21RLzAv
MzEzOTMxMmUzMzM3MmUzMTM3MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/JbAwDQYJKoZIhvcNAQELBQADggEBAAxHBVkq
Bht4hVGbVGMxXWItt0snmRSfRprrKz9S8xO9a4tFkGD/Z+ULpZCrTLEAC0n/h/Yy
hYyLvWuIwUVxJTSiPMKHiXx7mlBTtsac4Wh73KM72B0lFTMwIjNGCtSwCpj9iWlT
UAtyZqeaYYu3RuN/EZQIYkT8I/rnEgfs9WxhbfMC0L4NuGvcWJlDhXYVwyxzR4N+
L0PirHCDZy+6HP2xJUyUHAJFUA5Jd+jwq4kjaWjC2LMMxRHA+0zpWN4Z57gBWaB6
ljq6MpDJ3EdFG1gpb25aKhP9F7OhF/P/ZXT41URs+V6Lufy+DYivC7DY40dEkrLc
BWFEht3KEPcYMvw=
-----END CERTIFICATE-----
Generated at Thu Aug 21 00:12:58 2025 by rpki-client