Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139372e302f32342d3234203d3e20323634393438.roa
File:                     3136382e3233322e3139372e302f32342d3234203d3e20323634393438.roa (raw, json)
Hash identifier:          QzE75kSlnNEwl16krpFH4dg4BW6I5wRWdmczIaNJlkc=
Subject key identifier:   3D:88:4F:27:9D:26:B3:96:1F:63:38:55:F0:D4:8C:6A:67:5A:15:EF
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       28FD8C50D1DE85850E8AE4CAAB2C9595A38B211E
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139372e302f32342d3234203d3e20323634393438.roa
Signing time:             Thu 18 Sep 2025 18:14:07 +0000
ROA not before:           Thu 18 Sep 2025 18:09:07 +0000
ROA not after:            Thu 17 Sep 2026 18:14:07 +0000
asID:                     264948
IP address blocks:        168.232.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fd:8c:50:d1:de:85:85:0e:8a:e4:ca:ab:2c:95:95:a3:8b:21:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Sep 18 18:09:07 2025 GMT
            Not After : Sep 17 18:14:07 2026 GMT
        Subject: CN=3D884F279D26B3961F633855F0D48C6A675A15EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6f:9a:8c:e3:5b:c2:ac:be:dd:44:a4:0f:56:
                    6e:6d:20:a0:42:9b:99:ef:09:16:15:f1:19:4f:2f:
                    31:56:73:ff:af:09:df:df:9e:89:c6:8d:b7:9f:3c:
                    2b:cf:29:be:a3:07:03:0a:45:fb:8e:07:72:c9:95:
                    36:10:d8:9e:8a:78:54:cd:8c:de:be:12:a5:94:71:
                    4a:61:07:95:04:a6:dc:04:89:cf:38:19:71:06:b7:
                    5b:41:05:e2:c5:d5:32:d7:dc:a3:a1:ab:d8:ba:47:
                    27:22:66:8b:41:db:24:4c:d4:fb:fc:74:ba:ce:91:
                    ce:5d:54:f5:88:4a:98:ab:16:1d:77:bf:6e:79:7e:
                    19:05:a9:50:ed:8c:e2:84:d9:6e:cb:2f:2b:8d:48:
                    5a:e9:22:be:2c:01:fe:d2:b0:59:d8:5b:05:dc:c6:
                    94:3a:c1:d0:09:af:9a:d5:01:4f:1c:45:0e:46:22:
                    94:19:f1:71:dd:38:c0:f6:44:ac:9b:37:bc:46:66:
                    69:d8:f1:3f:3f:10:2b:37:c4:d4:5d:ae:f7:e3:a5:
                    f5:cd:c7:07:20:83:a0:77:9a:bc:69:57:7d:83:aa:
                    7f:11:94:3e:37:21:2a:23:3f:a8:d7:ba:20:70:ed:
                    ec:32:de:47:67:f6:00:06:5d:f7:ed:f9:c6:e0:ea:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:4F:27:9D:26:B3:96:1F:63:38:55:F0:D4:8C:6A:67:5A:15:EF
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139372e302f32342d3234203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:15:0b:9b:48:1a:bb:69:5f:9d:a9:74:74:22:ed:eb:b8:9e:
         a6:7e:ce:3b:e6:b2:c4:d9:98:4d:3e:84:34:1d:37:7b:63:e3:
         9f:59:e1:fa:4b:08:3c:5a:aa:c3:f1:a1:5a:16:e3:68:99:72:
         f6:13:8b:2e:5c:80:cd:fb:4d:ed:fd:53:86:fe:4c:c0:05:39:
         f8:4b:25:65:bd:3b:73:b2:21:61:11:ce:c1:34:a6:34:a3:3d:
         ea:91:b8:c0:fd:a0:04:c7:97:e9:22:17:2f:17:b9:e7:1b:0e:
         76:7d:7d:0c:4a:e7:d0:11:5b:2f:b3:49:38:cd:ed:96:1f:90:
         1c:0e:a0:f6:0a:32:11:42:be:4f:64:87:52:a2:ee:23:cb:dc:
         72:be:bc:d5:31:45:49:3d:c5:9c:c6:f6:65:26:4c:09:95:04:
         7a:36:0c:64:7c:4d:ac:9d:27:61:87:5d:b3:06:1e:ac:d9:38:
         30:70:4b:02:8e:9c:e9:9f:54:4b:09:a7:f9:fc:af:ba:07:d7:
         92:09:a3:11:8b:b7:ba:60:56:0d:49:ee:fa:29:5b:09:67:f4:
         e0:aa:50:f0:d6:0c:42:47:8f:8e:83:d7:37:78:8f:4d:7e:5d:
         fd:95:6b:60:c4:26:c2:30:63:84:27:de:32:c6:31:f1:31:a7:
         b9:58:6d:f7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKP2MUNHehYUOiuTKqyyVlaOLIR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY5Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkx
MkRCN0QyMDAeFw0yNTA5MTgxODA5MDdaFw0yNjA5MTcxODE0MDdaMDMxMTAvBgNV
BAMTKDNEODg0RjI3OUQyNkIzOTYxRjYzMzg1NUYwRDQ4QzZBNjc1QTE1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlb5qM41vCrL7dRKQPVm5tIKBC
m5nvCRYV8RlPLzFWc/+vCd/fnonGjbefPCvPKb6jBwMKRfuOB3LJlTYQ2J6KeFTN
jN6+EqWUcUphB5UEptwEic84GXEGt1tBBeLF1TLX3KOhq9i6RyciZotB2yRM1Pv8
dLrOkc5dVPWISpirFh13v255fhkFqVDtjOKE2W7LLyuNSFrpIr4sAf7SsFnYWwXc
xpQ6wdAJr5rVAU8cRQ5GIpQZ8XHdOMD2RKybN7xGZmnY8T8/ECs3xNRdrvfjpfXN
xwcgg6B3mrxpV32Dqn8RlD43ISojP6jXuiBw7ewy3kdn9gAGXfft+cbg6jezAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPYhPJ50ms5YfYzhV8NSMamdaFe8wHwYDVR0j
BBgwFoAUL5+EJ7siEsKOA39fOGmKORLbfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8yRjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOUY4NDI3QkIyMjEyQzI4
RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjoxTANBgkqhkiG9w0BAQsFAAOCAQEAZhUL
m0gau2lfnal0dCLt67iepn7OO+ayxNmYTT6ENB03e2Pjn1nh+ksIPFqqw/GhWhbj
aJly9hOLLlyAzftN7f1Thv5MwAU5+EslZb07c7IhYRHOwTSmNKM96pG4wP2gBMeX
6SIXLxe55xsOdn19DErn0BFbL7NJOM3tlh+QHA6g9goyEUK+T2SHUqLuI8vccr68
1TFFST3FnMb2ZSZMCZUEejYMZHxNrJ0nYYddswYerNk4MHBLAo6c6Z9USwmn+fyv
ugfXkgmjEYu3umBWDUnu+ilbCWf04KpQ8NYMQkePjoPXN3iPTX5d/ZVrYMQmwjBj
hCfeMsYx8TGnuVht9w==
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:31:51 2025 by rpki-client