Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230302e3135302e3136362e302f32342d3332203d3e203232333831.roa
File:                     3230302e3135302e3136362e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          5WZTelqFJpZzp7oqfGy+/nuEyqusPpnk09T0ZP7CcZE=
Subject key identifier:   C3:66:A0:D2:8F:F1:4C:C4:77:1F:BA:59:29:C9:82:17:4C:B2:17:04
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       499FB6628EC48BC64E39DDD8A0BE26966A739936
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230302e3135302e3136362e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:24 +0000
ROA not before:           Thu 28 Aug 2025 14:50:24 +0000
ROA not after:            Thu 27 Aug 2026 14:55:24 +0000
asID:                     22381
IP address blocks:        200.150.166.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9f:b6:62:8e:c4:8b:c6:4e:39:dd:d8:a0:be:26:96:6a:73:99:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:24 2025 GMT
            Not After : Aug 27 14:55:24 2026 GMT
        Subject: CN=C366A0D28FF14CC4771FBA5929C982174CB21704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:50:9c:12:1b:96:2f:cc:23:8b:b9:a7:bf:
                    ec:89:2e:09:93:8e:d1:ee:ee:b6:9b:e4:1f:52:35:
                    d4:0f:47:98:24:63:be:ba:2f:c4:c0:07:68:d7:4d:
                    2c:41:b7:61:60:3b:95:a5:e6:c6:f9:a8:69:6c:24:
                    59:76:e7:2f:5a:72:af:5f:ba:b1:09:a4:01:86:bc:
                    01:06:23:4d:3b:b8:ee:5b:72:9c:d8:26:ea:47:44:
                    91:ad:a3:e8:ed:3f:73:f8:dd:5e:70:dc:95:79:b2:
                    8c:99:ed:de:b3:00:53:d8:1b:11:32:94:09:e7:60:
                    04:79:09:40:88:64:37:15:d3:21:1a:12:7e:b6:e6:
                    a7:db:ab:d0:0d:9c:01:04:ac:0d:31:2e:85:7f:ac:
                    52:3b:33:7d:6c:37:ac:27:e5:7f:33:0a:58:8b:34:
                    d5:ca:4f:f5:50:f2:f1:95:52:98:fc:16:2f:14:d7:
                    e6:89:84:5b:ff:c2:3a:14:b3:33:0a:1c:93:6e:4d:
                    b2:4c:4b:34:8e:a0:71:65:da:1c:84:f7:0e:ef:72:
                    72:ce:b7:98:ce:da:2e:19:25:7b:c2:a7:66:38:5b:
                    7e:d4:5f:60:d6:a5:fc:3f:6f:0b:f6:e6:f5:85:de:
                    32:c2:4d:42:a6:1c:92:55:d9:98:af:1e:7a:01:bc:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:66:A0:D2:8F:F1:4C:C4:77:1F:BA:59:29:C9:82:17:4C:B2:17:04
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230302e3135302e3136362e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:23:5c:35:b2:dc:20:be:bb:80:cd:01:48:55:4f:1f:bb:8e:
         35:00:ba:d3:c3:5c:54:b3:f6:bf:88:16:3b:1a:d8:14:2d:40:
         a6:f4:44:c0:82:d9:a3:87:ce:fa:94:37:29:56:d6:bd:23:28:
         4c:65:35:32:2a:b4:c1:da:60:ad:c6:c3:e6:c5:de:cc:1a:36:
         53:2f:7f:a0:cf:4f:20:96:8f:17:67:01:7a:56:14:76:3f:52:
         ce:9d:d1:80:eb:71:9d:8d:af:b1:8c:e1:72:03:4c:59:4d:f3:
         e5:ec:16:1d:4b:32:b8:6d:45:ec:db:17:cd:8c:dd:1e:f0:5f:
         8f:58:f3:84:60:32:7a:23:ef:3c:8b:51:17:e6:de:b1:60:41:
         bc:71:a4:c0:9e:b9:31:7f:1c:eb:9e:42:98:2e:26:19:b8:25:
         88:ce:d6:8d:7d:b4:11:ef:1b:c0:92:37:97:dc:10:7c:3a:18:
         a4:f5:19:c7:18:b8:1d:60:d3:b3:5f:f3:2a:b7:96:d3:ef:46:
         01:43:f1:cb:91:ba:c8:35:8e:1e:2c:30:b6:9c:af:d7:86:40:
         4d:72:94:4c:74:1c:58:db:42:28:2a:2d:ed:46:e5:b0:9f:a9:
         23:70:46:fe:66:7b:c0:b8:b8:10:e2:fa:62:56:45:8a:8e:86:
         5e:74:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:09 2025 by rpki-client