Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32342d3234203d3e20323730393035.roa
File:                     3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (raw, json)
Hash identifier:          82plwJJTMXjlj2xQonVnYthoRgLBPcbTFJrwjSmx/Qo=
Subject key identifier:   D3:45:61:21:5D:9B:0B:B9:55:5C:16:80:14:18:AD:05:1C:0E:AE:03
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       14A5C7A267DFA3963918F9280ACA8717FF340868
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32342d3234203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:16:08 +0000
ROA not before:           Wed 01 Oct 2025 16:11:08 +0000
ROA not after:            Wed 30 Sep 2026 16:16:08 +0000
asID:                     270905
IP address blocks:        189.50.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a5:c7:a2:67:df:a3:96:39:18:f9:28:0a:ca:87:17:ff:34:08:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:11:08 2025 GMT
            Not After : Sep 30 16:16:08 2026 GMT
        Subject: CN=D34561215D9B0BB9555C16801418AD051C0EAE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:74:27:e3:54:e3:33:59:6b:c2:2a:07:7e:
                    88:c6:9d:5a:ac:34:a2:25:ff:d7:ab:0a:97:95:51:
                    7d:d9:5c:60:04:50:67:09:ed:28:3e:2f:43:63:43:
                    fc:ca:34:ed:51:f5:12:f1:28:5f:df:bf:6a:33:c2:
                    9d:fb:a4:01:42:a7:bf:c6:ea:81:ad:24:d4:21:c5:
                    39:a1:bd:47:f1:a0:2d:b5:3c:02:ee:e1:e7:dc:d4:
                    7b:6e:41:0b:6a:05:7b:5f:84:dd:e9:41:07:26:f5:
                    e9:4c:e1:d8:8d:3e:9f:11:18:a7:77:91:43:0d:e0:
                    46:b4:55:d8:f8:6c:11:09:80:9d:f0:56:cf:d9:be:
                    d7:5e:91:91:e2:29:34:ea:a8:75:ca:d7:49:ac:bd:
                    b4:3d:5e:7b:aa:ca:95:c8:b1:16:88:f8:c3:9b:32:
                    eb:5b:f0:b1:75:b0:4a:36:46:b6:a5:b0:86:88:0a:
                    27:27:03:f0:44:31:97:98:54:98:2e:9c:f2:8a:f2:
                    62:b4:09:10:b5:96:55:5e:0a:4c:53:a4:9f:f0:01:
                    80:da:f2:ec:13:f3:0f:13:d4:8f:0d:9c:1b:fa:9d:
                    b9:49:ee:e4:6a:40:ea:f9:f2:77:5f:20:d5:4c:95:
                    2d:2b:5d:b0:6f:53:be:9b:20:42:2a:bd:b1:1a:3e:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:45:61:21:5D:9B:0B:B9:55:5C:16:80:14:18:AD:05:1C:0E:AE:03
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32342d3234203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:9d:05:fa:fe:04:44:97:bc:02:88:ff:c3:71:e3:47:c2:
         1c:b5:65:36:92:3c:ab:5f:1a:64:7c:f2:94:6c:a1:39:e1:02:
         0a:65:7f:96:18:d5:b1:ee:2e:19:98:8c:38:aa:12:f7:65:78:
         46:8f:3a:6b:e1:97:17:95:6b:55:76:ba:63:cb:96:ee:0d:cf:
         15:a0:5c:5c:25:52:66:c9:08:04:c6:56:6e:10:08:76:8f:93:
         5f:34:0a:17:4a:9c:bc:35:8c:2b:eb:3e:73:2e:84:06:65:30:
         49:54:18:e6:3d:3d:76:b7:e7:9c:28:c4:29:1a:18:90:c3:0c:
         2e:28:29:61:a5:18:e9:49:a0:f6:04:5f:f2:3f:02:e7:2a:aa:
         4e:74:17:ce:31:7c:70:ad:ef:ec:1c:63:ca:69:2e:57:1e:72:
         53:b7:dc:b9:ed:7a:63:a5:2b:1d:52:07:fb:bc:16:6b:78:d1:
         c9:cf:ed:03:62:53:0b:0e:b8:01:1c:14:24:63:72:cb:47:cd:
         ae:c8:36:be:35:c6:61:74:cd:58:81:ce:c6:26:8e:e3:11:54:
         18:5c:6a:51:c9:50:53:75:e6:38:2c:05:59:6f:4f:5f:1b:e4:
         94:d9:ef:e0:9d:dc:40:3d:e1:7a:31:99:38:55:11:28:76:b8:
         7a:f9:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:41 2025 by rpki-client