Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32322d3232203d3e203533303532.roa
File:                     3138372e38342e34342e302f32322d3232203d3e203533303532.roa (raw, json)
Hash identifier:          9TZ27uObGwwd8p5TrpjhMQuSRIxIL+nppt+AbR+BmNI=
Subject key identifier:   D6:06:6F:39:DA:97:1A:D3:D9:DF:47:CC:D3:E4:28:DA:07:CA:5F:00
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       5321373B895CBFD0E83CB80E188D59CE1F758376
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32322d3232203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:33 +0000
ROA not before:           Mon 01 Sep 2025 18:40:33 +0000
ROA not after:            Mon 31 Aug 2026 18:45:33 +0000
asID:                     53052
IP address blocks:        187.84.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:37:3b:89:5c:bf:d0:e8:3c:b8:0e:18:8d:59:ce:1f:75:83:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:33 2025 GMT
            Not After : Aug 31 18:45:33 2026 GMT
        Subject: CN=D6066F39DA971AD3D9DF47CCD3E428DA07CA5F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:fd:a6:51:18:64:15:1c:32:80:1a:a6:0d:
                    2b:4b:6a:63:56:b3:e9:4d:5a:86:0f:ec:56:be:a5:
                    22:34:5c:1e:73:89:36:ca:66:f7:8e:ce:d6:7c:c7:
                    57:f5:a5:90:0d:7a:a7:43:6a:0f:4d:ce:9e:c1:94:
                    da:f8:f9:fb:7e:40:aa:29:6c:b8:79:b5:ac:af:ab:
                    bb:fd:fd:e9:c0:4e:36:de:cf:0c:c7:0d:dd:a3:cb:
                    ef:2a:8c:4f:ff:64:6d:85:b1:00:0e:3d:c7:5d:90:
                    3c:87:70:7c:cd:38:e4:2e:5c:88:27:13:ec:8b:ed:
                    cb:09:8d:5e:ac:d8:be:78:2d:a5:eb:4f:b6:63:2b:
                    18:58:a9:6e:82:4d:6c:ef:8e:72:d9:69:dd:22:59:
                    7a:cc:9f:54:22:4f:3d:cd:ab:d2:20:8d:54:d7:8b:
                    8b:c6:d0:0d:5e:3e:de:02:32:63:c5:db:b9:2e:aa:
                    42:1d:3d:78:a0:7a:76:b7:88:d3:0c:a1:8c:a6:54:
                    21:02:f7:8e:81:f0:2b:22:81:c0:85:b3:e0:dc:34:
                    8d:4d:74:06:12:6d:f7:dc:6c:c7:3c:37:2a:69:fd:
                    47:df:4e:e9:55:26:79:0f:f8:c1:67:00:12:51:4f:
                    af:d2:48:2c:ae:12:b0:fd:ed:54:47:3f:af:a3:d8:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:6F:39:DA:97:1A:D3:D9:DF:47:CC:D3:E4:28:DA:07:CA:5F:00
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32322d3232203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:14:3d:72:a9:e0:4a:c8:5e:30:4c:57:91:bc:3c:47:9d:be:
         a8:c4:46:3b:8d:43:fa:0d:d3:28:7e:09:ab:17:74:0e:bf:50:
         11:eb:2c:f7:b6:74:e4:c4:6c:48:39:e9:51:fe:73:8b:87:cc:
         cb:95:7b:1a:0f:21:51:17:59:27:a6:3f:44:7f:0b:8c:7f:23:
         fc:f8:50:61:2c:06:fe:6f:32:14:4d:b2:6e:df:73:ff:33:75:
         cd:bc:21:02:97:4d:df:ab:64:f1:35:78:67:d4:2c:14:52:a1:
         98:1f:3b:83:8f:a8:25:9a:b8:cc:4e:0b:f5:54:ee:42:64:4b:
         82:1f:00:70:29:04:21:9f:58:1b:b3:b1:03:2f:44:e1:ae:2e:
         31:94:96:b6:bc:2f:8d:28:69:5e:f7:7f:97:5d:25:45:63:1b:
         1f:58:8c:ae:a1:87:a7:fa:1c:66:6c:79:76:b1:c5:ce:85:6c:
         32:e0:47:44:8e:38:bc:66:99:77:64:dd:20:23:ad:da:68:df:
         62:be:dc:41:81:96:59:ef:40:bf:91:b9:b8:e3:8d:7d:e1:ed:
         61:58:2b:bc:3e:4e:d2:1d:a6:e5:9c:d7:e9:02:0d:5d:02:e4:
         71:cc:43:1f:83:0b:d4:05:22:ef:12:6b:1e:41:97:b3:bc:45:
         6c:8e:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:34:52 2025 by rpki-client