Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa
File:                     3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa (raw, json)
Hash identifier:          my8/S3MIsBNYW/x0gFtoQNussu714xSmnlPgsFwrnJs=
Subject key identifier:   49:43:E0:C8:62:8E:CA:AA:64:CF:B0:9C:2C:3E:5E:51:DF:07:EA:91
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       7B1519138B44387774D0894478B46C3D98649377
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:23 +0000
ROA not before:           Fri 12 Sep 2025 15:31:23 +0000
ROA not after:            Fri 11 Sep 2026 15:36:23 +0000
asID:                     265461
IP address blocks:        168.196.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:19:13:8b:44:38:77:74:d0:89:44:78:b4:6c:3d:98:64:93:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:23 2025 GMT
            Not After : Sep 11 15:36:23 2026 GMT
        Subject: CN=4943E0C8628ECAAA64CFB09C2C3E5E51DF07EA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:9f:0f:bf:a8:2c:a1:d9:34:55:97:74:97:
                    57:60:3e:7e:68:3c:09:16:6e:09:4e:42:3e:2f:83:
                    cd:ce:3b:42:af:c4:5c:1f:f9:51:9d:a6:59:8f:18:
                    5b:8f:4a:f9:fb:e9:03:f5:58:b5:6e:2c:64:ac:58:
                    eb:0c:ad:95:a9:73:fc:f2:20:2b:87:da:46:0b:52:
                    66:87:2c:68:ea:c1:ea:2e:43:b9:18:2b:99:0d:28:
                    1d:ff:cd:ef:62:0a:b1:83:30:0f:10:49:43:59:29:
                    1a:d6:a6:c9:9d:63:b0:b9:b6:f8:21:5e:50:9a:03:
                    9b:01:90:b6:10:47:42:28:08:fa:b8:2d:b4:74:77:
                    51:1b:a1:da:60:9e:0c:a1:cd:58:1f:ba:74:88:0e:
                    68:49:de:1c:b1:a9:5e:31:b4:27:2e:5f:10:6c:8a:
                    05:b6:86:ec:4b:16:8c:a4:a8:12:55:cc:e8:92:52:
                    10:32:52:a7:e2:0a:e0:c9:de:73:ee:50:ac:57:ee:
                    64:35:e7:3f:8d:e7:a9:84:e5:89:76:e0:6f:33:dc:
                    43:1a:fe:df:c7:11:fb:49:7c:cb:62:b3:4b:c4:53:
                    7a:d3:bf:21:9d:5b:e3:36:23:f6:0b:13:b9:f3:a8:
                    4d:a3:4f:f9:f1:ad:32:7d:d0:d7:96:57:ef:78:86:
                    0c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:43:E0:C8:62:8E:CA:AA:64:CF:B0:9C:2C:3E:5E:51:DF:07:EA:91
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:fc:da:d7:ed:e0:02:78:c2:c9:c0:cc:81:2b:d5:6b:a8:
         87:c2:02:19:83:e1:49:f0:8e:8a:e9:0d:97:f4:96:dd:12:7c:
         28:bc:62:af:1a:54:93:41:69:d8:e7:05:f6:c2:46:fb:9d:79:
         ab:81:61:32:2d:dc:25:86:9e:c9:12:8c:5d:a1:26:27:a6:92:
         db:76:08:c5:d9:5d:02:eb:e9:87:29:00:21:f3:3e:bf:c8:86:
         cd:db:8c:50:89:af:fe:c1:a3:03:51:d5:58:d8:a0:fc:78:fc:
         9c:e2:e5:f7:28:c0:bd:15:9a:43:10:96:09:f9:cd:f5:8a:72:
         94:3a:00:e1:77:6f:19:a7:a8:6b:9c:62:58:38:b2:6f:4e:ac:
         b0:65:53:64:c1:8d:0e:44:af:29:82:a5:73:ec:29:75:a7:fd:
         65:c8:33:40:e2:cc:7d:a4:36:a1:1e:6c:ad:00:16:25:2d:d0:
         71:64:77:2e:ca:f5:23:d5:1b:5c:f8:3f:f1:f3:87:ba:20:c6:
         0d:5a:60:69:28:5f:61:5a:d7:48:ee:ae:7a:09:3b:cd:b2:2f:
         7f:b5:71:e1:78:ac:01:fd:3f:4d:63:3d:11:69:f4:ba:e9:bd:
         b9:a8:7a:21:05:35:27:77:b5:91:6b:e7:cf:37:dd:df:3b:fa:
         0d:a0:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:50:02 2025 by rpki-client