Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3234203d3e20323635313735.roa
File:                     3136372e3234392e3230382e302f32322d3234203d3e20323635313735.roa (raw, json)
Hash identifier:          VP1LX5YFB6rg9nNmWiQ9oEolJ0UaJRE1x5X/bkvyBUk=
Subject key identifier:   9C:96:F9:67:DD:E2:E0:93:79:54:76:D4:B7:EA:FB:C5:79:9C:39:99
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       368A14F7CCC8B8E3A963A1CB5D2C1BBFF066B229
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3234203d3e20323635313735.roa
Signing time:             Tue 09 Sep 2025 19:14:29 +0000
ROA not before:           Tue 09 Sep 2025 19:09:29 +0000
ROA not after:            Tue 08 Sep 2026 19:14:29 +0000
asID:                     265175
IP address blocks:        167.249.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8a:14:f7:cc:c8:b8:e3:a9:63:a1:cb:5d:2c:1b:bf:f0:66:b2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  9 19:09:29 2025 GMT
            Not After : Sep  8 19:14:29 2026 GMT
        Subject: CN=3082010A0282010100C191A61113CC06933FEC681D0465A3FC29D28168CF0E77424811D8AAE8FBBC69531ECF955EAB8A9D6AA7C64FC99A82B86FBD50A507BF9619EAF5B1DD0E1FD4761E9E85F92B766308438EB5A3D5DB081598342FD480040596B318C2D5A5740E0176E3481519A20700289231EF217E1263F594C484E9415115472662B633F590A4CC6EE8C197875CE13A01C27F2978E7FF476A06C974BD88B9764EA44ADFC23A0B944690C27345DD4D1A203FCCBC807551BD36C43C90242B80A0A71101DE6AFB6606EA3C7902960C93BC4F8D0D5F8E446F618500A825A06D5467FA8DCAE102DB7F29074AD699B9B938FD83B3B30A67EC6D47DF14BCD47DCBDDBD1210B22C486AA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:a6:11:13:cc:06:93:3f:ec:68:1d:04:65:
                    a3:fc:29:d2:81:68:cf:0e:77:42:48:11:d8:aa:e8:
                    fb:bc:69:53:1e:cf:95:5e:ab:8a:9d:6a:a7:c6:4f:
                    c9:9a:82:b8:6f:bd:50:a5:07:bf:96:19:ea:f5:b1:
                    dd:0e:1f:d4:76:1e:9e:85:f9:2b:76:63:08:43:8e:
                    b5:a3:d5:db:08:15:98:34:2f:d4:80:04:05:96:b3:
                    18:c2:d5:a5:74:0e:01:76:e3:48:15:19:a2:07:00:
                    28:92:31:ef:21:7e:12:63:f5:94:c4:84:e9:41:51:
                    15:47:26:62:b6:33:f5:90:a4:cc:6e:e8:c1:97:87:
                    5c:e1:3a:01:c2:7f:29:78:e7:ff:47:6a:06:c9:74:
                    bd:88:b9:76:4e:a4:4a:df:c2:3a:0b:94:46:90:c2:
                    73:45:dd:4d:1a:20:3f:cc:bc:80:75:51:bd:36:c4:
                    3c:90:24:2b:80:a0:a7:11:01:de:6a:fb:66:06:ea:
                    3c:79:02:96:0c:93:bc:4f:8d:0d:5f:8e:44:6f:61:
                    85:00:a8:25:a0:6d:54:67:fa:8d:ca:e1:02:db:7f:
                    29:07:4a:d6:99:b9:b9:38:fd:83:b3:b3:0a:67:ec:
                    6d:47:df:14:bc:d4:7d:cb:dd:bd:12:10:b2:2c:48:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:F9:67:DD:E2:E0:93:79:54:76:D4:B7:EA:FB:C5:79:9C:39:99
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/3136372e3234392e3230382e302f32322d3234203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:5c:be:1d:66:74:93:d0:71:68:9b:f9:43:8e:83:f2:a3:
         d1:10:1c:38:43:1e:89:b8:74:51:01:c2:38:6c:44:32:6f:91:
         bc:d3:80:24:95:94:ed:d8:b1:78:ec:01:c8:36:74:82:c3:23:
         f0:59:a7:5d:b5:41:c1:66:dd:0b:e9:5b:03:11:36:a5:de:6b:
         7a:ce:73:79:54:2d:ec:20:d2:0f:da:20:ee:20:12:59:30:f7:
         ed:a3:76:e8:ca:27:7b:6a:16:d9:8e:1e:5f:56:ad:14:30:6e:
         17:c0:7d:ab:8a:5b:b3:36:64:61:c1:c7:96:a5:11:d9:49:cc:
         26:3a:ba:74:b8:ec:63:a1:7c:f8:8a:52:c2:c8:1d:f0:f4:1e:
         a5:12:a5:9c:74:64:5f:74:0d:22:a8:96:25:63:ca:90:d4:4a:
         3e:5c:33:e8:70:1c:ba:07:80:05:96:83:5c:84:6a:a9:b6:66:
         da:a4:1c:c3:f4:86:0d:b4:f0:32:05:39:36:f7:34:41:fc:ab:
         8d:ff:1e:bd:50:e6:87:5d:ec:e5:98:38:50:5b:6b:a0:f0:d0:
         df:a3:63:41:5e:e3:fb:50:45:29:ed:49:95:95:98:f0:ef:46:
         cf:28:10:6c:fc:49:44:ba:1c:4c:79:8d:c4:61:ca:b5:75:c8:
         55:bd:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:50:12 2025 by rpki-client